Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
File: v7VI2FclEEUn875Hl2tnRzmuLxM.mft (raw, json)
Hash identifier: x/2Qh9h4W7Wl3vvT6ibkoMcjlBvPaSUlv9zvDg2bHUk=
Subject key identifier: 9B:4D:37:8E:C4:D2:BF:78:CD:C4:E3:4E:E4:98:09:D0:EC:EB:3A:CA
Authority key identifier: BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13
Certificate issuer: /CN=bfb548d85725104527f3be47976b674739ae2f13
Certificate serial: 019659B9228B4ED0E485879395E2F71F0B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 19:00:27 +0000
Manifest this update: Mon 21 Apr 2025 19:00:27 +0000
Manifest next update: Tue 22 Apr 2025 19:00:27 +0000
Files and hashes: 1: nI_8YGf_KIt8612GRNYpw062gLo.roa (hash: hhjvYhiG9KK3YdbRnKxZqPKderlpYCo7W5KoODn99Eg=)
2: v7VI2FclEEUn875Hl2tnRzmuLxM.crl (hash: C5IXbpY96GeqUGxXNxcJSUs9Soy67YsevPKK5Oz+Vsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:22:8b:4e:d0:e4:85:87:93:95:e2:f7:1f:0b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb548d85725104527f3be47976b674739ae2f13
Validity
Not Before: Apr 21 19:00:27 2025 GMT
Not After : Apr 22 19:00:27 2025 GMT
Subject: CN=9b4d378ec4d2bf78cdc4e34ee49809d0eceb3aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:85:df:4c:bb:5a:ba:d7:f7:24:c2:9c:67:
57:99:5d:15:2c:3d:7b:bc:eb:42:d8:fc:76:f1:ec:
c8:98:01:89:86:99:5f:36:6f:77:24:9a:97:11:b7:
47:2a:8b:58:64:49:30:23:a6:ab:ac:b6:06:a9:86:
a0:31:b3:75:62:3b:46:3f:dd:47:40:ee:18:fe:f0:
97:73:cb:47:d3:12:9d:47:6b:01:0e:92:0c:ad:5e:
83:2d:cd:12:2b:58:5a:30:7e:86:68:77:c3:5d:b5:
9a:18:74:af:d1:25:a1:53:55:ac:92:38:8a:79:ea:
b1:79:c8:62:a6:08:c7:fa:7f:3a:04:79:d8:6d:97:
f7:5d:59:64:4a:ea:7b:ea:d2:99:0f:21:a8:6c:e0:
38:d6:12:d1:92:c7:b8:86:bf:ef:4c:fb:5c:27:5a:
0a:31:d6:ef:fa:00:37:1f:a6:00:20:ad:41:bc:d4:
68:30:6e:39:b8:d0:c6:1c:f5:04:8b:09:f2:35:d9:
1c:a7:9e:a7:a5:74:b6:02:94:41:66:03:cc:d5:c8:
b6:9d:87:42:ca:13:79:f6:de:c6:e2:13:04:d4:82:
96:f8:37:6e:cd:9d:ac:2f:a6:8f:22:b3:f9:49:34:
31:bc:46:e5:36:74:74:2c:23:4d:44:d4:fc:28:fd:
d5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4D:37:8E:C4:D2:BF:78:CD:C4:E3:4E:E4:98:09:D0:EC:EB:3A:CA
X509v3 Authority Key Identifier:
keyid:BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8d:70:1a:36:56:50:63:70:14:7a:90:ee:69:47:7f:ee:10:
f8:12:43:05:a2:40:1b:cb:ce:a5:21:11:d5:08:03:76:72:28:
d0:ca:6e:7b:18:36:c7:b4:c1:50:1c:76:2d:59:03:61:24:04:
ed:d7:93:fd:18:7e:f2:af:8b:f5:0a:ed:81:74:35:2c:81:b3:
67:f7:82:75:c6:4d:6c:e8:3e:ad:61:67:1a:4e:a9:fa:91:ba:
b4:cf:2b:12:81:70:29:8f:71:b6:d1:1f:1b:cb:3f:43:4c:06:
21:72:c4:99:24:22:09:85:c0:8d:93:31:3f:60:27:f9:89:fb:
f0:bd:50:98:7a:52:09:5e:03:42:aa:a8:f5:9e:81:89:20:f7:
f5:2d:29:7a:fa:4e:a7:36:94:e5:b6:02:b8:5a:d2:36:41:a2:
7c:8b:93:86:9f:22:5d:c6:8c:a5:7d:e4:5c:a1:8d:6a:5a:c3:
02:51:3e:d5:93:60:71:8b:93:64:a7:a7:f6:ab:cc:77:28:11:
02:81:35:e9:c9:39:84:ee:4a:fc:0b:f3:dc:eb:1f:46:1d:20:
09:eb:c5:99:84:10:c4:0b:c9:25:ca:6e:e5:53:2c:05:13:18:
bc:34:c3:50:50:65:61:2b:af:38:9c:f4:97:c4:2e:0e:1c:65:
25:fe:9f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:40 2025 by rpki-client