Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
File: dQ_7ZVLViud0ukJNVSezUGJPqvw.mft (raw, json)
Hash identifier: OPRjLaOJb8KSJ0QtM95TAJsIHHKJyDxd5NSUrSdUjDU=
Subject key identifier: E7:A2:9B:AC:10:FC:16:BB:2D:D3:6F:4C:3F:36:49:DF:90:A3:49:BA
Authority key identifier: 75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC
Certificate issuer: /CN=750ffb6552d58ae774ba424d5527b350624faafc
Certificate serial: 01965E71F1E501BDDBDC2ECFC8691050C8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 17:00:47 +0000
Manifest this update: Tue 22 Apr 2025 17:00:47 +0000
Manifest next update: Wed 23 Apr 2025 17:00:47 +0000
Files and hashes: 1: Bjl5NnXVblzGXrxRvGYoGjhKX1s.roa (hash: YSca3SNn3dbydNzeg1qaUX/HJae1ElZZx6hrF1jVM80=)
2: dQ_7ZVLViud0ukJNVSezUGJPqvw.crl (hash: MJ2q9WRebFg7PrnGyE5+dNv4hXllYSDMnYz4VHNrZdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:71:f1:e5:01:bd:db:dc:2e:cf:c8:69:10:50:c8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ffb6552d58ae774ba424d5527b350624faafc
Validity
Not Before: Apr 22 17:00:47 2025 GMT
Not After : Apr 23 17:00:47 2025 GMT
Subject: CN=e7a29bac10fc16bb2dd36f4c3f3649df90a349ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:c0:ee:93:90:45:03:f5:b7:ec:71:3d:c0:
ed:48:9b:fc:4b:82:52:4d:c2:23:d4:3f:9c:95:bd:
bf:29:81:11:c4:d5:3f:f2:8b:9b:8e:03:31:99:c8:
88:c4:b6:29:ef:60:2b:28:e7:b1:b7:21:a4:97:09:
af:4c:63:f5:35:46:e6:d1:96:4c:0f:e9:d4:43:de:
c9:5e:e6:47:ad:75:68:77:cf:71:93:c7:ff:18:89:
26:37:32:52:fb:e7:a4:0a:39:5c:a5:83:af:3b:d3:
14:d5:bf:56:ce:97:10:fd:99:ea:70:8c:8d:a8:b2:
f6:fc:92:63:87:62:62:8c:3a:05:05:dc:ec:9d:9b:
82:9b:cd:a6:f3:e0:1d:61:3b:ec:72:5a:f6:c2:e8:
77:4c:c4:14:38:91:ad:27:03:d5:e1:ac:b3:ca:f9:
df:2e:f2:0a:b2:2a:b4:0e:68:7d:68:1b:82:9b:c3:
b0:d9:6a:b6:ce:8d:df:7a:da:55:42:4b:7e:22:6c:
eb:37:97:d7:1f:ab:a8:8b:bb:1e:a0:51:db:4a:bd:
36:90:f4:c0:e2:cc:37:99:65:37:d8:e3:28:bc:36:
b2:23:cb:8a:62:17:f4:fc:12:02:5a:26:0a:f0:fe:
fe:b2:1d:86:74:a2:41:3c:80:4c:df:1f:b4:58:ee:
c3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A2:9B:AC:10:FC:16:BB:2D:D3:6F:4C:3F:36:49:DF:90:A3:49:BA
X509v3 Authority Key Identifier:
keyid:75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e6:ab:6d:90:db:ba:4f:79:46:d9:4d:80:ed:1f:27:1e:fd:
01:da:30:84:83:f2:66:b7:14:ed:2a:5d:da:3e:20:fb:42:82:
49:cf:60:42:3c:b8:21:09:e6:7a:72:94:18:c0:9a:d9:84:d9:
ec:c0:e1:db:f4:d3:ac:b2:9b:3f:43:6a:d6:4e:cb:b8:2d:71:
c7:1a:f9:4f:0b:cd:7e:68:7b:47:ef:6d:9c:4c:69:66:a2:af:
6f:6f:c3:14:d2:56:12:19:5f:f0:54:d2:26:77:05:6a:d8:3a:
d7:49:df:22:35:99:a8:aa:38:e1:34:26:34:cc:99:b1:4a:b4:
f2:25:54:fa:b0:8e:7a:75:c3:08:da:1c:48:c9:62:6e:6b:8a:
a0:4b:3c:1a:9e:d4:80:ea:04:3f:48:f1:de:2a:51:16:d6:21:
21:87:17:1b:d6:91:f1:68:dd:ac:3c:31:ad:c0:9f:ff:cd:6a:
42:99:35:a1:f5:a6:52:a2:24:63:04:49:39:c3:41:fb:35:ad:
78:43:cb:ae:f4:31:38:c6:f0:a6:2f:00:4a:87:84:63:c6:91:
c3:c9:4a:dc:97:b9:44:3b:f1:a7:71:b4:dc:cd:b9:2a:64:b3:
18:b0:81:d2:02:29:32:ef:94:9d:ce:57:f2:c5:dd:f9:04:70:
fb:fc:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:15 2025 by rpki-client