Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
File: i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft (raw, json)
Hash identifier: f67cP3RgA1kqZjniGys3y9CA6VtMy7OSVIpg40A8TDU=
Subject key identifier: 15:18:7C:46:79:11:84:CE:7E:E1:5D:BA:A8:D9:D7:1B:D6:6F:54:6A
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 01963EE6ECE1E6E7106C74BB4E70D92C2D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
Manifest number: 1500
Signing time: Wed 16 Apr 2025 14:00:43 +0000
Manifest this update: Wed 16 Apr 2025 14:00:43 +0000
Manifest next update: Thu 17 Apr 2025 14:00:43 +0000
Files and hashes: 1: Z9hqFRirUe4P1_J6cnVrlFkJUwM.roa (hash: 1rB513D+oaDkVMZd5WQl+V38WfLdjvRgbt7ShIhiM3k=)
2: eldr0Gd72QMDJnfB5g3XkvXB5MA.roa (hash: TtEGiXJhnS9J3b71Jc1YsSME+mGa0e8iTuBkAI+Nugs=)
3: i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl (hash: 9BMjLVAfoBaPG7M8xfDcCSbQnIjbLfdMXfM0ieUw198=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:ec:e1:e6:e7:10:6c:74:bb:4e:70:d9:2c:2d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Apr 16 14:00:43 2025 GMT
Not After : Apr 17 14:00:43 2025 GMT
Subject: CN=15187c46791184ce7ee15dbaa8d9d71bd66f546a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:ee:48:dc:93:5a:08:27:cf:ec:91:08:3c:
08:0d:39:46:ab:6e:b6:6e:7f:88:bd:fa:0d:05:80:
a3:9f:b0:bc:4a:64:15:c6:6e:8e:8d:db:e5:ae:80:
73:a5:fc:64:04:8b:e9:ce:ed:32:03:35:a8:5f:ed:
50:b1:89:f4:4d:e1:08:66:5b:4b:47:1a:d9:da:27:
85:2a:c1:13:56:2f:f0:46:f0:18:eb:f2:97:44:92:
20:b3:95:7e:49:17:f6:9f:80:ae:7e:d8:82:56:94:
18:2b:13:68:36:f6:0d:2b:56:e4:c8:d2:01:95:37:
30:a8:c0:51:c5:09:3f:bf:70:9b:29:16:a3:be:ea:
d2:88:bd:42:6e:6b:7e:4a:e9:44:ea:e3:9b:c0:33:
66:9c:8f:a9:24:3f:40:71:bc:43:77:9d:2e:70:3e:
70:8f:93:40:db:d6:c7:4d:93:38:4e:be:b4:df:d7:
36:b4:7e:f0:0b:33:2a:da:65:af:df:02:30:b7:a7:
c5:9f:95:a2:51:f8:48:7f:5a:86:eb:d9:50:c9:bd:
42:4c:7e:9e:d3:01:ad:d1:04:3b:81:26:8b:c7:cb:
d7:8b:4c:49:50:8b:43:6c:7c:e9:e7:c2:31:04:12:
3c:67:bd:4b:e1:f5:54:7d:b6:71:14:9d:99:37:fb:
01:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:18:7C:46:79:11:84:CE:7E:E1:5D:BA:A8:D9:D7:1B:D6:6F:54:6A
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:96:c9:b6:66:1d:d6:43:5d:54:da:8b:10:0c:53:c2:03:73:
76:7d:82:b2:98:f3:e4:c8:96:3f:c9:62:c0:2c:bb:2b:22:b6:
9c:39:5c:a4:c3:41:c5:40:7d:17:e4:c2:53:73:3a:c0:3b:b3:
58:f1:02:ac:a4:49:a0:bf:c1:5a:a6:7c:7b:98:fe:3c:f2:f3:
7b:41:2a:ea:92:62:34:af:c9:29:27:b4:45:c5:b6:bd:de:bf:
4a:cf:76:cb:f0:c6:1b:8c:5e:a6:c0:b3:ac:10:da:2b:37:48:
9c:89:f3:3e:5e:76:96:79:31:d3:26:31:96:e7:fa:fa:f4:1f:
ae:62:64:1d:5b:7e:50:83:98:8d:28:2e:8b:17:d9:3f:85:9c:
41:6f:76:1d:f4:5d:90:77:63:56:d6:27:93:48:29:12:9d:0a:
aa:f9:24:09:d3:1a:0d:18:be:5b:c0:00:83:c6:8e:28:fe:3d:
1c:38:60:f1:06:04:08:8a:81:d8:85:e6:18:42:2d:b6:75:5e:
af:fe:c2:dc:35:0e:37:89:38:c9:5e:74:ba:c3:2e:de:89:73:
eb:b0:7d:84:6f:ce:ef:47:f9:14:13:94:a1:a7:ef:4a:49:e0:
c3:6a:e0:bf:00:c5:3e:a7:2b:82:6c:79:1d:b7:38:87:8d:cc:
61:e5:8e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:16:48 2025 by rpki-client