Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
File: 7b5zqycw806U8SDpv8Va9EBTafY.mft (raw, json)
Hash identifier: bkdjWZOryrKFkf+1VMtGJVJMjZMtWR/SUQv2wG/B8bQ=
Subject key identifier: FC:E2:BA:42:A6:15:78:1D:2E:38:C9:25:2C:B2:A6:A5:AC:46:ED:57
Authority key identifier: ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
Certificate issuer: /CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Certificate serial: 019619237B5FB5AFC98CC766E22F0780FC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
Manifest number: 027E
Signing time: Wed 09 Apr 2025 06:01:17 +0000
Manifest this update: Wed 09 Apr 2025 06:01:17 +0000
Manifest next update: Thu 10 Apr 2025 06:01:17 +0000
Files and hashes: 1: 7b5zqycw806U8SDpv8Va9EBTafY.crl (hash: fRgEdHUPSBHXijenVP4po0rfAvHaN/ZZS0cHTpiqMfg=)
2: K7v_erre4xqrVjEHRvxy-76X3oY.roa (hash: 73JVJm8ra91Vis54U60FFg9PWumAI6t/5NGHyQV5dMo=)
3: RqDjTULio7HkucdqWVIGBKTqd0Y.roa (hash: PcWewLEjusrfHJnBpktJ+OmKEcChBIByu4RElEeoGKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:23:7b:5f:b5:af:c9:8c:c7:66:e2:2f:07:80:fc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Validity
Not Before: Apr 9 06:01:17 2025 GMT
Not After : Apr 10 06:01:17 2025 GMT
Subject: CN=fce2ba42a615781d2e38c9252cb2a6a5ac46ed57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:42:5b:63:37:a1:cb:99:54:24:8f:56:e7:
20:36:7c:be:a2:74:fc:90:16:19:d1:ef:73:00:e0:
a7:42:81:22:c3:25:2b:31:84:9b:14:42:b3:30:6f:
02:b4:f5:7f:ec:06:34:82:5e:8d:d4:0a:32:e7:d5:
38:6e:9f:04:a5:de:fd:42:db:83:3d:1e:65:c2:75:
b6:b1:36:94:0d:1e:4a:67:07:be:ed:fe:f7:7e:c7:
b8:6f:01:eb:c8:44:66:30:38:72:7e:29:df:bc:53:
ee:7b:d8:b9:01:ff:b7:90:81:72:c2:85:61:65:47:
55:a6:60:b4:12:4f:8b:ff:61:6c:15:92:e5:8f:07:
41:11:8b:05:96:71:6d:22:65:02:14:59:db:12:f3:
07:ca:d3:ec:61:34:47:a9:aa:a3:26:18:84:0f:2f:
4b:71:74:ea:74:fa:d2:1c:e1:79:a7:40:6b:1d:0a:
2c:1a:d2:1b:82:ba:b2:eb:dd:0e:07:b8:2d:c0:ff:
b5:ca:4c:47:cc:d0:89:4a:63:df:7e:af:2c:28:23:
32:32:fe:36:a4:bb:52:1d:98:8d:1a:0f:43:aa:86:
f0:7a:b0:8a:2c:ca:1c:82:ba:bb:c6:93:8e:ea:5f:
d3:75:f1:7a:e6:6c:09:50:3c:ef:b6:b7:bb:e0:db:
a5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E2:BA:42:A6:15:78:1D:2E:38:C9:25:2C:B2:A6:A5:AC:46:ED:57
X509v3 Authority Key Identifier:
keyid:ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d2:25:ac:56:c5:df:d3:48:96:fb:e8:22:40:ac:87:7c:12:
99:10:e7:8e:83:51:ef:59:72:02:ea:57:ae:4c:f8:92:48:e7:
22:3e:d7:fb:71:0f:7a:8c:15:7c:2d:a1:34:16:83:7a:a8:55:
06:da:bf:98:cd:e0:f4:40:3b:97:33:bd:7b:53:b8:86:c8:fb:
d3:9f:09:fe:92:f0:0e:3d:c0:e4:56:e6:75:31:de:e3:2d:11:
f3:51:57:b0:2b:ee:65:64:6a:0e:71:cd:f2:7a:ce:34:3d:af:
91:51:f3:4d:6f:e0:94:45:b2:fe:df:88:bd:4c:11:dd:8f:ec:
cb:18:58:ab:0e:74:7e:c7:5a:9d:dd:f7:02:05:8d:82:94:e8:
99:4a:ee:c0:f2:c1:fe:b1:c0:66:5a:64:15:81:4b:34:ba:ca:
bb:9a:17:53:87:d4:99:94:8d:63:3b:e4:a7:5b:d1:55:1b:7c:
ef:be:87:8f:b0:e6:cb:a2:11:ea:28:88:7f:35:42:65:9d:52:
33:90:47:73:38:c0:04:69:9a:12:ec:ca:83:c0:ec:d4:87:c7:
04:36:83:ef:d5:b7:2b:75:7b:d3:ba:3d:89:ea:57:3e:8e:af:
05:f7:18:97:e0:9e:06:cf:74:67:f0:ad:89:f1:de:32:55:6c:
6f:12:57:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:18:21 2025 by rpki-client