Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
File: 7x8BiBtzyOm12SI5IppuUS7KTnw.mft (raw, json)
Hash identifier: WAOIFpmvgS1inTT17pPCnvyHdE8BPC9HEhBs+sv05Gc=
Subject key identifier: 45:FC:BD:A0:BC:54:2B:A3:27:CF:45:88:F1:90:1B:90:60:32:49:B8
Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
Certificate issuer: /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Certificate serial: 01964A7D6A3C1DDCE71B6D24C04F7F1EAD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 20:00:55 +0000
Manifest this update: Fri 18 Apr 2025 20:00:55 +0000
Manifest next update: Sat 19 Apr 2025 20:00:55 +0000
Files and hashes: 1: 1vUfYa7ohoVbSwGgaxISYNQJ4rU.roa (hash: wuJzjrI9EaOKpfz53i0KZN8DZtLqoyJbku8WdDvpazs=)
2: 7x8BiBtzyOm12SI5IppuUS7KTnw.crl (hash: SyurCFHb5tnt+OG31SEhNrEvyR22iPo/0tF22Qq/ZQw=)
3: Fvx_jJCdTF_pvu2LbWU3LmH0H8o.roa (hash: cMc5/+uI8EwNJg30oKHwLh7pnaj9wAcQ3DWjnpzREXo=)
4: UAMozedMddnvbaHXdpt5f_TDvZE.roa (hash: C7OBU+9hOWyvCkQ42eXork8FUbOcNdFjL8raQWMxSpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:6a:3c:1d:dc:e7:1b:6d:24:c0:4f:7f:1e:ad:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Validity
Not Before: Apr 18 20:00:55 2025 GMT
Not After : Apr 19 20:00:55 2025 GMT
Subject: CN=45fcbda0bc542ba327cf4588f1901b90603249b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:a4:dd:84:fc:90:f0:1e:d5:64:f6:f5:65:
62:75:2f:30:53:e6:ca:5c:73:eb:6d:85:1a:31:80:
9c:7e:04:93:13:d7:10:02:96:0c:e3:28:85:e0:cf:
33:bc:65:06:38:b1:eb:4c:80:99:b4:a9:b9:e0:8e:
85:58:d3:1a:d6:41:aa:a3:20:12:4f:dd:77:06:a4:
e0:43:f0:28:ab:84:89:19:70:fe:1c:25:6f:9a:80:
28:9c:fe:3b:84:3c:91:4f:20:d1:60:16:4c:00:d6:
94:24:a6:51:30:3d:01:19:f9:4c:38:ec:c2:bf:1f:
6a:d7:d7:8e:ac:c9:8a:18:1f:1a:53:d7:62:20:7d:
8e:fc:b4:b0:71:a5:15:76:cf:e0:9d:3b:eb:a3:b9:
82:97:cc:06:6c:c8:ad:9b:dc:4b:78:c5:4c:6b:1b:
a7:b7:b2:74:55:80:13:b2:fa:09:9f:64:c3:17:f5:
63:03:1b:43:e2:33:72:e3:10:23:af:4f:d7:de:06:
d6:75:79:27:34:5a:b9:38:78:62:15:dd:e7:16:c6:
5a:a1:eb:04:ba:fd:ae:03:48:b6:17:b1:c4:ae:f9:
a3:a7:80:b2:cd:f1:22:1e:e7:a0:8e:2c:58:1b:a4:
07:1c:46:46:b6:4f:54:34:d6:83:2b:de:db:5d:3d:
9e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FC:BD:A0:BC:54:2B:A3:27:CF:45:88:F1:90:1B:90:60:32:49:B8
X509v3 Authority Key Identifier:
keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:53:9a:04:19:d7:1c:5c:6f:a6:b5:b5:b3:82:23:c5:4b:cb:
30:b1:d6:e0:57:07:f7:33:c9:99:a0:10:0d:66:f8:9c:8b:89:
b2:e9:38:a6:d2:1b:00:d1:27:fd:52:01:ba:dd:32:16:5e:ca:
5f:0b:f5:e6:8d:6c:a1:17:0a:0b:aa:13:e1:1a:7c:fb:c0:0b:
a5:46:19:a3:3f:b8:10:e1:0d:68:3b:1e:f1:b6:4a:e3:a2:d5:
00:0d:16:b4:3d:d5:56:dc:6b:fd:71:12:57:34:0d:d5:f7:a0:
21:fa:53:bc:16:92:c7:3e:0b:de:70:d1:85:18:ab:79:0e:70:
a4:a2:b4:97:97:22:6b:91:3f:33:88:e8:9f:aa:cb:2d:1b:2b:
5b:9f:92:50:fa:48:92:02:7c:50:57:39:7e:1c:b4:9d:b8:e4:
68:d8:f9:32:c3:21:7f:e4:54:68:62:99:c6:65:7f:17:32:eb:
a9:1c:5b:9d:c7:6e:e0:32:ca:94:bf:7c:1c:62:42:25:49:8e:
76:8f:a2:d1:00:05:bf:de:16:52:8a:43:6e:fa:b7:be:ce:f3:
d3:c8:c4:bf:a6:29:cd:bd:78:cd:75:50:9f:b7:e9:63:d6:08:
73:81:aa:23:df:c1:e6:04:97:6e:31:5c:2a:93:ce:7f:ee:1e:
fe:ef:02:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:39:28 2025 by rpki-client