Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File: e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier: lVznfmDjf8DepIVE0+SUmixscBRAeqO5RsdJ6ISAYMo=
Subject key identifier: 7E:41:27:52:5B:8E:E7:5E:A2:4C:08:CD:7A:02:CC:E5:FD:86:6F:BE
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial: 019653EEA09CFA67C53AD52FBB9C8A73201D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 16:01:09 +0000
Manifest this update: Sun 20 Apr 2025 16:01:09 +0000
Manifest next update: Mon 21 Apr 2025 16:01:09 +0000
Files and hashes: 1: A2mB37rJmerIuB24l4Bs4lzgXqo.roa (hash: ndaVFcXFO0lVM0GIop/3BjpE63WSZdctz0XY3LjKsVI=)
2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: 0z0BCqFnGqE0XiIwhVbec79T34GhMRQuH13Z8Eewciw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:a0:9c:fa:67:c5:3a:d5:2f:bb:9c:8a:73:20:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
Validity
Not Before: Apr 20 16:01:09 2025 GMT
Not After : Apr 21 16:01:09 2025 GMT
Subject: CN=7e4127525b8ee75ea24c08cd7a02cce5fd866fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:44:90:18:b9:31:7a:b8:76:63:55:11:65:
48:ad:af:5b:26:ad:7e:63:c5:65:ff:37:b9:32:f2:
07:f6:6b:79:fd:61:b7:8c:d2:32:12:a5:03:c3:0a:
61:b1:56:ad:eb:22:9b:61:38:50:a4:88:75:53:bb:
ac:cb:e9:89:2c:44:6e:e4:d4:f4:ac:9a:17:9d:56:
3e:7b:34:3c:42:1d:26:43:91:ae:fc:99:99:fd:89:
11:74:24:f8:50:69:9f:3a:83:77:04:02:2c:80:7b:
91:64:f2:9f:e0:e7:3c:76:24:eb:fb:17:63:13:92:
dc:d6:3d:cc:50:a7:f6:35:95:87:5c:b6:8a:f9:9e:
3f:e2:f7:7c:f8:2a:ab:c8:a0:4f:32:32:5a:ef:9c:
09:c4:41:a8:40:83:a0:d6:a6:d7:e4:f0:4f:64:14:
8f:fd:c7:8f:cc:91:7c:3e:06:48:4b:ae:85:2a:17:
f8:81:47:60:84:13:3d:f3:93:2d:33:54:42:e2:2e:
50:9f:c6:e9:86:24:66:81:69:09:0e:48:16:75:8c:
97:bf:f9:91:31:56:60:79:a3:47:2c:6f:7d:5a:d2:
b4:34:92:f8:a2:d6:98:9a:18:e5:4c:ee:5e:fc:f3:
b3:2b:f6:ba:ad:11:d9:53:1d:63:4d:db:54:41:d6:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:41:27:52:5B:8E:E7:5E:A2:4C:08:CD:7A:02:CC:E5:FD:86:6F:BE
X509v3 Authority Key Identifier:
keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c3:46:cc:e9:fc:6a:43:c3:31:65:bf:87:f6:b4:0e:62:0e:
ab:54:c1:a7:e3:e2:76:d7:33:cc:60:cb:34:af:c7:39:54:24:
94:d8:c5:4c:5f:ed:f7:7d:71:55:e4:42:e7:3c:f6:18:5d:fc:
c4:9f:40:4f:e6:1d:06:a5:c7:01:fa:9b:67:b6:2b:f6:97:75:
91:56:3c:33:57:9c:69:53:ed:39:b0:c6:ed:55:94:72:3a:be:
71:f2:98:ce:1d:90:90:2d:94:01:e5:b2:e9:38:ed:7f:e3:22:
72:6d:0f:ea:d7:f7:de:f5:60:f9:b6:98:df:d6:80:7f:b6:8f:
63:c9:07:e5:b6:a8:49:76:09:58:42:f1:1b:23:d1:5b:7c:4e:
e0:88:0a:1f:8e:d2:ac:e8:1e:ce:a5:d7:11:5b:c1:bd:cd:4e:
44:89:f5:ba:42:c6:4f:d2:b3:b5:19:dc:6f:6d:2b:1f:24:5a:
1d:e5:3a:ac:b4:a2:3d:72:ca:d7:ce:5c:af:01:c4:f7:df:ca:
69:48:0c:b5:fb:01:e7:15:59:28:3d:4e:10:0d:8f:22:07:31:
3d:c5:3d:37:71:6b:65:57:70:a4:a8:b1:5b:a4:d1:45:f2:be:
66:1b:28:6e:9f:a4:80:98:ec:db:81:d2:79:a9:9a:d0:50:5b:
46:cf:70:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:12:33 2025 by rpki-client