Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
File: _7up17hmEtT4fPFhcf-CsrRBNk0.mft (raw, json)
Hash identifier: CO58Fkelfjh5lA46SyTgz6yPr9s8f7+K7OxmZR60ABI=
Subject key identifier: B8:3E:94:13:CF:0D:E9:B2:D8:4A:60:AF:86:63:3C:A0:65:D1:4A:08
Authority key identifier: FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
Certificate issuer: /CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Certificate serial: 019655A5571C81CA0A5A59677DA756A28259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 00:00:21 +0000
Manifest this update: Mon 21 Apr 2025 00:00:21 +0000
Manifest next update: Tue 22 Apr 2025 00:00:21 +0000
Files and hashes: 1: LYzc6OtaS8KV6QcG5hHmYjRMk0Y.roa (hash: fgjAjawvKdndlxTdQAycErp9wGnUNzrHaq3cdzUckXg=)
2: _7up17hmEtT4fPFhcf-CsrRBNk0.crl (hash: oQ8qTGepKdWrmLb4lhDar/LujMnOb1GW9ySBsMfzkkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:57:1c:81:ca:0a:5a:59:67:7d:a7:56:a2:82:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Validity
Not Before: Apr 21 00:00:21 2025 GMT
Not After : Apr 22 00:00:21 2025 GMT
Subject: CN=b83e9413cf0de9b2d84a60af86633ca065d14a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:12:e6:76:2f:5a:e0:d8:29:01:29:d6:09:
70:e0:c1:ff:0d:02:cf:b8:29:3a:34:ea:af:33:22:
bf:4b:f3:dc:58:2d:17:a7:ee:40:d0:19:60:93:c5:
e4:a1:66:39:37:5e:34:0c:70:e2:b8:ef:a7:82:c8:
79:87:93:48:20:05:28:56:f4:77:a0:4d:c5:3d:9c:
44:38:4e:82:80:8c:12:1b:86:98:7f:87:16:5f:fe:
2c:9d:a7:7e:6f:38:6f:71:15:1c:1d:a9:90:26:cb:
44:3f:15:7b:31:94:b8:1c:0e:ec:0b:0c:67:52:fb:
94:15:17:7d:56:15:58:a4:22:f7:ed:9f:28:21:a7:
50:14:60:77:da:06:97:4f:14:4f:58:11:79:d3:c5:
4a:35:12:50:b2:b1:46:61:f5:69:0a:2d:59:78:b5:
d4:f8:e9:de:9b:68:74:e5:ba:2d:8c:f0:d3:07:b3:
bd:b3:d0:21:9e:38:59:fb:e3:3e:22:b4:06:34:7f:
80:af:15:4e:d8:38:f9:44:8b:e6:c4:80:54:2e:eb:
9f:55:67:10:66:67:bd:3a:a3:83:d9:04:65:f7:b3:
b4:b7:ff:17:ab:a2:97:ee:3a:84:0a:86:ec:a5:cd:
68:bd:fd:20:6c:05:93:c5:27:dc:31:9b:ce:51:67:
80:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3E:94:13:CF:0D:E9:B2:D8:4A:60:AF:86:63:3C:A0:65:D1:4A:08
X509v3 Authority Key Identifier:
keyid:FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:01:d0:f4:25:b0:4f:42:05:97:63:1f:f6:9c:9d:de:4b:0c:
db:35:ae:08:70:a6:2a:f1:5e:d8:7e:48:03:4c:8e:4d:2c:cd:
c2:27:66:5f:8c:80:1e:47:a7:4b:29:e4:1c:05:29:c2:a4:0b:
31:1c:42:4a:95:66:b5:fb:c7:09:12:a9:49:a0:b9:13:f7:60:
47:58:b3:86:14:ad:7f:59:d5:f2:56:c1:ff:91:85:31:9d:1b:
9d:91:f3:6d:55:b3:0b:34:23:39:69:c0:d1:95:67:1a:e3:1b:
d5:ea:95:08:f9:c4:3c:4f:6e:71:b2:d1:ea:07:78:79:1e:39:
35:a8:f1:3d:37:90:60:1c:fd:fa:1d:d9:6b:bd:10:ea:e9:67:
90:64:be:34:77:ed:ba:a2:97:4c:09:75:dd:59:3c:88:92:98:
b9:77:be:f4:68:f2:62:9c:55:50:ad:02:da:7f:92:7a:4c:2f:
d1:0c:54:85:2e:2d:6d:aa:ad:5a:a3:4b:a8:04:6c:9b:d5:32:
e3:45:46:e3:c1:c5:ee:46:25:b1:1e:2a:97:3c:02:0b:95:7a:
7e:a3:d9:af:59:7e:58:76:6b:9d:c9:32:2f:32:e5:97:a8:55:
cb:5b:b5:26:94:2c:2e:50:45:bc:99:49:3c:c2:70:ce:be:dd:
c2:e2:da:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:52:35 2025 by rpki-client