Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier: igaY9RMM32V5zf/p8XzLy4wLc2hXiENNDmfI+6tDNlU=
Subject key identifier: 6C:0B:20:01:39:72:A4:0E:B8:8B:1F:58:3E:83:F8:1A:3A:CE:72:CF
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial: 01963FC25FDE7D308AD44E42F51D2FDB897B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number: 14F5
Signing time: Wed 16 Apr 2025 18:00:25 +0000
Manifest this update: Wed 16 Apr 2025 18:00:25 +0000
Manifest next update: Thu 17 Apr 2025 18:00:25 +0000
Files and hashes: 1: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: MwgdVNeJ1TYKmyIYo9LR+A/aOYHrF40oaY190O7Qs2E=)
2: fwhTjjRIhEdJ6uOffHkJ9IbiBcc.roa (hash: uAg9kNvS0wjEdBKrNfsh4Pl1caTWWUTWPoPoJJEyRFk=)
3: tmBvyCU9dS1RGbck9AhZ77ixbZ4.roa (hash: LYRTheb+KiohViLX8r9l59ZvW37F3uyl1qPERmyYOaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:5f:de:7d:30:8a:d4:4e:42:f5:1d:2f:db:89:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Validity
Not Before: Apr 16 18:00:25 2025 GMT
Not After : Apr 17 18:00:25 2025 GMT
Subject: CN=6c0b20013972a40eb88b1f583e83f81a3ace72cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c9:99:3a:21:76:a4:86:00:d8:29:42:b0:f2:
a0:ec:19:29:81:ad:4e:b2:70:4e:06:96:06:8d:34:
8b:76:1d:39:8c:64:2e:ab:b5:e5:06:ca:70:fc:4d:
d8:e4:e5:42:33:70:bc:7a:05:60:6b:1f:97:ba:d6:
29:1a:02:71:5a:94:49:20:9a:bc:ea:ba:e9:19:98:
d8:20:17:a8:a9:12:f2:17:9a:71:8f:25:b7:8f:f6:
c6:4b:71:c8:cd:c8:a7:6f:7f:59:57:ba:d6:8b:28:
a1:81:da:51:f0:ac:e0:29:f4:cd:19:0c:5c:0d:31:
0b:a1:21:c5:ff:ca:04:93:1c:92:9f:3f:2f:05:a5:
b8:aa:09:0b:61:f9:72:60:b2:f3:70:c5:be:4e:c8:
8f:13:ea:30:8d:a6:da:92:40:96:b2:19:9e:9c:7e:
ac:90:75:50:3a:02:7a:57:05:d3:57:fe:d2:92:e9:
9a:e0:0c:8b:dd:6f:12:42:98:81:9f:33:9c:f7:3e:
53:52:8a:63:8c:a1:21:dc:ce:dc:22:01:96:58:cd:
c9:5c:cb:10:62:60:b0:69:09:09:93:f9:48:eb:40:
db:36:7a:85:22:d3:6a:71:35:97:1c:ff:73:93:9b:
fe:37:38:25:6a:d1:81:80:17:33:f3:77:f7:7c:a9:
ca:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0B:20:01:39:72:A4:0E:B8:8B:1F:58:3E:83:F8:1A:3A:CE:72:CF
X509v3 Authority Key Identifier:
keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:28:0c:95:48:a5:c1:75:2c:26:7c:c2:48:f3:36:51:7d:e8:
82:3c:2a:ef:0b:ed:f5:b2:62:8b:45:71:57:b8:f3:5f:ec:5c:
5e:ba:53:71:94:3d:55:09:db:24:eb:c0:f5:26:12:0f:ae:3b:
e5:20:e1:42:49:15:f8:06:1b:16:80:54:44:ab:7d:96:9c:b2:
72:d0:2e:13:be:3a:65:91:73:42:33:88:c8:d7:cc:18:d8:d9:
a6:bc:9f:0d:7a:df:83:e8:e8:e9:c1:ea:04:b7:1d:e7:4f:99:
bc:3d:d7:2c:72:c5:9e:64:03:6e:36:3a:59:31:f5:08:db:88:
1c:86:22:72:db:88:9b:e5:50:a8:aa:b8:d4:93:c9:b4:25:ae:
2a:78:de:69:7a:c5:7b:8b:1e:c3:4b:84:6f:69:04:ff:c0:67:
88:6b:75:8d:a0:44:25:75:2e:c9:9a:39:ec:ff:94:53:61:7a:
b2:a1:4c:a1:05:7d:48:de:79:11:23:b5:42:b9:cf:c3:2d:0c:
8a:61:1c:c1:79:70:ff:4c:13:ed:c2:9d:6c:25:cc:0c:60:32:
d3:96:35:bf:21:d8:25:45:2c:96:37:13:4d:bc:27:6b:45:46:
8e:00:2a:4e:40:c0:3b:57:33:1a:bd:8b:2f:35:b0:7c:fa:8a:
04:af:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:19:06 2025 by rpki-client