Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
File: 7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json)
Hash identifier: BEUjSmceF5bOng+gNuOJchfLowUojOtcSAJcwA44Nik=
Subject key identifier: AE:A5:84:1B:5D:74:02:ED:38:76:9F:ED:E6:52:87:0B:7C:B6:7A:8C
Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
Certificate issuer: /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Certificate serial: 01965538ACF52602D0632D7BFEB83C569DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
Manifest number: 063B
Signing time: Sun 20 Apr 2025 22:01:39 +0000
Manifest this update: Sun 20 Apr 2025 22:01:39 +0000
Manifest next update: Mon 21 Apr 2025 22:01:39 +0000
Files and hashes: 1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: DkdCWmmaXdCiN9U6kPd3CE9y6sp6CJebCR3pV/uSwHk=)
2: kXJd78RsJ79BG_LY-HKE3xW9xTQ.roa (hash: Ff8IU/0K89U686a3qz0aLt9a8lnUt29LLnlbj61soko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:ac:f5:26:02:d0:63:2d:7b:fe:b8:3c:56:9d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Validity
Not Before: Apr 20 22:01:39 2025 GMT
Not After : Apr 21 22:01:39 2025 GMT
Subject: CN=aea5841b5d7402ed38769fede652870b7cb67a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:66:d0:6d:14:3b:a7:0a:c1:8b:84:dc:04:f3:
12:f8:36:84:03:17:9c:84:f2:bd:91:53:4d:b6:6b:
01:d8:e5:0f:8a:a6:ef:8a:be:43:f5:a1:bf:a3:f1:
0b:7e:8d:4e:6c:9a:b0:59:db:42:e8:15:e1:cc:f0:
82:85:e5:68:ec:e0:b8:38:85:bc:e0:5a:e5:97:59:
2d:65:3e:86:46:ef:fb:a5:c1:b0:7c:52:e4:2f:2a:
06:d9:9b:2b:e8:3e:ef:d1:d9:82:4f:fe:51:ba:98:
79:a5:49:5e:b3:ac:38:96:32:c8:a9:89:2e:9f:e2:
a3:da:c5:38:b6:b2:e1:f6:68:59:fe:ce:7c:c3:51:
37:6a:6f:24:8f:5f:55:3b:fa:e4:80:43:8e:5e:a0:
85:05:df:62:94:5f:c5:2c:67:37:89:b0:4f:c8:0b:
61:b0:f1:79:87:b2:a5:48:72:ac:cd:ca:b1:8f:09:
99:95:d2:89:90:be:da:8c:b7:42:95:da:9c:c4:7c:
38:2a:66:34:d7:80:b6:ed:e4:ed:c0:f6:7f:53:f7:
56:6d:3a:ab:85:36:10:07:66:23:bb:d4:1d:98:2c:
82:aa:5a:f8:c0:8f:b2:cb:fe:b4:1d:c8:3d:ff:71:
91:ef:e5:b9:73:5a:40:d8:9d:2e:6e:0d:6a:16:a6:
b4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A5:84:1B:5D:74:02:ED:38:76:9F:ED:E6:52:87:0B:7C:B6:7A:8C
X509v3 Authority Key Identifier:
keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:78:cd:37:48:5f:f8:3c:b7:73:8d:d4:db:d4:ba:8e:e1:6d:
23:27:6a:78:92:d7:82:fd:3c:58:15:62:0a:df:1b:3f:e1:f1:
45:8a:0a:ae:cb:78:03:00:07:3e:f2:bb:fd:2a:46:3e:3f:d0:
2d:b2:09:55:17:c8:4c:88:5b:47:b3:15:f0:48:f3:0d:a8:e6:
f2:06:22:14:2a:cc:97:3b:72:98:43:85:0e:3e:23:f6:7e:bc:
d7:9f:14:08:f1:ff:42:1c:58:30:b2:15:99:25:46:c8:fc:2f:
cb:6e:2e:38:75:cb:80:d5:55:69:4f:77:99:77:dc:28:42:78:
75:47:80:ff:b7:d3:e3:66:e7:06:77:c7:33:2a:67:08:bc:96:
7f:6d:de:c1:31:45:82:4d:66:8e:b5:f2:6e:0d:4f:98:8d:94:
f7:60:6d:14:17:93:44:0f:69:2c:eb:1a:a8:48:40:cc:ef:4e:
11:de:8a:b8:60:80:7f:54:37:4b:7c:15:26:20:a8:4a:f7:b9:
67:c5:a8:57:ab:3e:d2:39:5d:60:a5:0a:8c:47:e1:db:34:4b:
fc:cc:ee:a9:39:34:11:e4:3c:d6:74:45:29:ce:47:4f:c1:01:
82:b8:2c:6c:65:be:91:c8:05:44:93:18:bf:50:9e:d0:15:f3:
e1:50:19:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:45 2025 by rpki-client