Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
File: 7KM8lvAqnwvvJc04BqJGfKFlY3s.mft (raw, json)
Hash identifier: H0Npehi15si6NBv+7FaReVOrBDdeIwB45Pvq8p13Ztg=
Subject key identifier: 95:4D:43:F5:CF:56:E4:CA:5A:B6:0F:37:51:19:42:9D:0D:F5:E5:71
Authority key identifier: EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
Certificate issuer: /CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Certificate serial: 01961BED926F1872CF7441F056D385BE969D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
Manifest number: 14DF
Signing time: Wed 09 Apr 2025 19:01:16 +0000
Manifest this update: Wed 09 Apr 2025 19:01:16 +0000
Manifest next update: Thu 10 Apr 2025 19:01:16 +0000
Files and hashes: 1: 4_25V1XttJ1qw5vFtRBIGOQ28e4.roa (hash: jrFE5OHsnZSV8YIte/QlrxAa0XpS7lb+A+yiq4ZHdDE=)
2: 7KM8lvAqnwvvJc04BqJGfKFlY3s.crl (hash: rqjzivQ7SxU3AHsWpiEgNDE/9HArnh/2Lr52QiJMPYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:ed:92:6f:18:72:cf:74:41:f0:56:d3:85:be:96:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eca33c96f02a9f0bef25cd3806a2467ca165637b
Validity
Not Before: Apr 9 19:01:16 2025 GMT
Not After : Apr 10 19:01:16 2025 GMT
Subject: CN=954d43f5cf56e4ca5ab60f375119429d0df5e571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:44:7c:7e:0f:6a:b4:34:48:bd:2f:b9:22:
9a:a6:9c:bf:8c:16:f8:19:ed:6f:e0:2e:4b:4d:16:
6c:01:c8:1a:c7:77:c9:46:51:d7:fa:39:79:5b:88:
42:06:31:97:a5:8a:2c:60:57:42:82:ce:b6:fa:4e:
d2:98:92:16:88:83:ba:e7:14:b3:53:e5:d8:60:36:
c6:cf:f5:f9:5d:2b:7d:13:0e:7d:fb:4b:99:7d:d2:
c0:ab:ac:00:a1:e2:64:28:24:5b:5e:25:f3:ba:f1:
7f:b8:3e:eb:4c:9a:8f:26:7e:86:69:05:f5:a0:e7:
ac:c2:0a:d1:3c:75:33:a6:9f:13:84:3b:67:5f:88:
84:5c:93:fc:e1:49:24:d9:a3:86:da:d5:da:8e:52:
ff:6f:f4:16:4c:d4:bc:be:cb:34:ea:fd:57:be:5f:
fe:60:4d:c1:a0:f9:ac:09:fc:f3:17:6e:22:a9:14:
63:e9:ce:06:19:da:7f:a2:cd:04:4c:1f:47:31:05:
b3:aa:d2:6d:a9:c7:f3:de:a0:37:ca:35:11:fa:63:
af:7b:13:f5:fe:a6:b7:a1:1b:69:22:54:26:60:e1:
ac:b6:93:2d:02:c2:4b:ba:58:4f:aa:7f:85:ff:ca:
77:59:be:80:2d:21:1c:33:f1:f9:87:17:de:f6:64:
eb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4D:43:F5:CF:56:E4:CA:5A:B6:0F:37:51:19:42:9D:0D:F5:E5:71
X509v3 Authority Key Identifier:
keyid:EC:A3:3C:96:F0:2A:9F:0B:EF:25:CD:38:06:A2:46:7C:A1:65:63:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7KM8lvAqnwvvJc04BqJGfKFlY3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/49ae42-0e9a-4e24-ba15-25ef2990f166/1/7KM8lvAqnwvvJc04BqJGfKFlY3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fc:70:16:c6:dc:af:88:54:b1:6b:68:ce:1a:17:b7:d1:15:
78:b9:e2:37:23:f1:0b:c4:b7:ff:63:a0:c5:38:f5:dc:af:da:
ab:70:94:5a:5b:7d:80:50:3c:3a:b4:50:fb:18:84:58:65:b3:
b8:11:71:e3:00:5e:59:12:1e:15:e0:83:e6:da:22:06:9e:c8:
18:be:99:7b:be:26:d4:39:81:03:d2:27:05:ad:91:4b:67:6d:
be:0c:f4:87:de:49:d7:49:a9:e7:e2:3a:31:be:8d:5c:cf:b8:
e4:22:f7:ff:83:25:6d:73:a0:6e:e8:92:5e:03:de:fa:90:11:
76:3a:b9:10:1e:e2:0e:77:be:29:35:7e:fb:67:4e:69:c2:41:
45:68:e1:e2:e3:a9:8b:69:9d:6a:07:e0:d2:9d:a6:a8:48:55:
bc:5d:64:ea:78:aa:32:83:1b:39:8a:69:d7:c4:cb:4f:ee:33:
1f:f2:52:a9:f6:b7:2f:e0:63:d6:03:3a:1b:5e:83:17:3f:3f:
46:49:a5:bc:cd:eb:ba:2e:3f:7a:f5:84:84:eb:a0:11:bf:3e:
23:b9:8a:2f:bd:18:78:d6:40:29:1d:a6:04:c8:21:59:f5:e4:
71:dc:7a:de:3a:d0:74:2f:53:c7:2e:f0:6d:ea:e4:5d:17:15:
86:77:c1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:01:11 2025 by rpki-client