Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
File: 7eKhItz_wiL6mYS_Frb58T94paU.mft (raw, json)
Hash identifier: 0cT0kkfYY41cYk0c6B5jkkLZUVR0CS3jv3UUo0gn1SM=
Subject key identifier: FE:B8:23:95:24:86:EE:DA:49:56:36:48:AC:E7:CA:AB:16:46:0E:B0
Authority key identifier: ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
Certificate issuer: /CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Certificate serial: 019651C962D84329C9CF10E0EF5FD0DCE8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
Manifest number: 09DB
Signing time: Sun 20 Apr 2025 06:01:14 +0000
Manifest this update: Sun 20 Apr 2025 06:01:14 +0000
Manifest next update: Mon 21 Apr 2025 06:01:14 +0000
Files and hashes: 1: 7eKhItz_wiL6mYS_Frb58T94paU.crl (hash: JTYhc/NueJYxBp4sAcUKpPzZR9TMhuvuZBSotKDD/hc=)
2: mv1MwE4getpiKJwrF8tobr9rXrs.roa (hash: QIccUqQB+Qm12TRlwd2LKOXzcj0t1dKqrfMEgV4h7VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:62:d8:43:29:c9:cf:10:e0:ef:5f:d0:dc:e8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Validity
Not Before: Apr 20 06:01:14 2025 GMT
Not After : Apr 21 06:01:14 2025 GMT
Subject: CN=feb823952486eeda49563648ace7caab16460eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:22:00:e8:51:a4:7e:7c:89:66:e8:d3:dc:
38:ac:cd:4a:98:aa:04:2d:0a:43:c4:e9:b0:c6:78:
93:70:c3:10:37:e6:ae:5c:12:f2:10:36:82:18:70:
ac:40:a3:f8:7e:f1:a0:d7:73:48:73:9c:b8:ce:6f:
6f:f1:f4:92:93:b6:78:ab:fb:b4:48:63:cf:e0:d1:
08:86:b5:38:58:2c:92:10:bd:30:be:c3:f0:0f:44:
d3:41:a8:18:21:db:79:aa:16:e0:7b:fa:b5:1f:04:
5d:60:c8:d4:45:21:d4:51:a8:03:7c:92:13:9e:e7:
9b:e4:a6:cf:43:58:8d:b4:94:9f:05:46:93:3f:b7:
ac:62:24:5e:d2:45:2f:1d:0d:35:74:5a:d6:6a:d3:
a4:53:1d:13:9b:e4:56:7e:4e:a8:f3:55:a7:c1:7d:
b3:ba:d3:67:2b:05:3d:81:8a:8a:c2:6b:1d:2e:d4:
86:1c:33:c9:af:f0:a4:b7:0c:c9:5c:f1:42:c8:95:
21:9a:98:01:53:fb:fe:d5:17:95:b3:ed:6e:f2:4e:
79:bb:f2:d5:30:67:46:96:31:69:33:07:5c:cc:15:
16:47:15:6e:93:2d:51:28:4c:2b:13:cf:6e:ab:9e:
1f:ba:24:c7:03:7f:c7:b5:58:6d:52:3a:6a:7b:26:
63:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B8:23:95:24:86:EE:DA:49:56:36:48:AC:E7:CA:AB:16:46:0E:B0
X509v3 Authority Key Identifier:
keyid:ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ce:c2:f4:88:94:22:37:db:dd:99:4c:a0:b6:fb:88:6c:e7:
0f:c4:42:2c:df:46:3e:f2:2b:ad:a2:4e:e8:fd:97:fb:23:87:
ed:da:52:7f:5b:f4:7f:7e:f5:04:e3:86:0e:7a:19:0a:31:03:
a9:e4:ed:72:7b:54:ef:4e:84:5d:fe:37:2f:48:8c:f5:bf:08:
50:9d:50:44:eb:56:0e:89:c1:9d:0c:f4:5f:13:c1:10:02:87:
50:59:c3:d2:65:c9:67:aa:62:f5:73:48:8f:51:2b:f0:92:a4:
b5:0f:0b:75:13:b9:d0:9d:46:ae:f5:22:27:b1:5d:b7:65:79:
19:3b:da:9c:87:ba:31:a6:6e:4f:0b:39:ba:a6:99:ab:d4:8e:
19:c7:99:62:dd:b8:3c:b6:10:69:46:64:69:36:57:33:c6:14:
81:f2:a7:42:15:ba:5c:78:d3:df:fe:c6:1b:61:5a:65:54:d3:
24:d0:dc:d4:ed:af:f4:49:da:33:2c:85:47:f4:b0:e4:55:82:
05:92:66:24:7b:08:4a:fe:46:51:9a:77:67:34:c8:21:cb:55:
f9:e9:01:79:33:65:71:77:cb:7e:a7:42:e7:1e:9d:af:84:21:
11:8b:b7:e9:cf:00:3b:e5:cf:f1:6a:51:15:dc:7a:2a:53:9d:
9e:f0:48:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:50 2025 by rpki-client