Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier: 5JhSq+qMibw95GLiH4u3TjHy1joKjBkAFiBmqB4BKJA=
Subject key identifier: 95:30:E6:5F:C9:D8:42:92:5A:EB:F4:3D:FB:BB:67:01:C6:71:19:A2
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial: 01964D475220041092A21FC425FEEC4754F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number: 1100
Signing time: Sat 19 Apr 2025 09:00:41 +0000
Manifest this update: Sat 19 Apr 2025 09:00:41 +0000
Manifest next update: Sun 20 Apr 2025 09:00:41 +0000
Files and hashes: 1: LfrSVtlH9do-60_TEx27lHKNfrQ.roa (hash: TpFdLJ2bXCpVRx0+Pt6yo0AUPtighW1Vwfu+RYNR6uM=)
2: Y5oWWSqH2f4PzIF1caWpoS6C0uI.roa (hash: 1+Bd1mblfzXz4N7C24HyQvcSfHhcXd/iMBMWLlVj9RQ=)
3: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: Y3hEVpGevdEalp+/I3SFLpzJyxov+9r608ipo6jT4wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:52:20:04:10:92:a2:1f:c4:25:fe:ec:47:54:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Validity
Not Before: Apr 19 09:00:41 2025 GMT
Not After : Apr 20 09:00:41 2025 GMT
Subject: CN=9530e65fc9d842925aebf43dfbbb6701c67119a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:da:c7:0f:29:44:e7:e5:ea:b9:1c:08:54:
d1:56:41:10:42:6b:d8:36:72:d1:54:8c:94:88:00:
9d:f9:ab:1e:fe:1a:3d:82:42:9e:8f:aa:9e:da:32:
2f:11:38:82:b3:4e:71:5b:9e:49:52:59:87:77:c9:
11:a8:c3:1a:60:97:e3:7e:74:c8:50:16:33:83:12:
72:34:8c:45:5e:48:8b:1c:30:4b:ab:09:f7:1e:62:
a3:f1:8d:96:06:7f:7d:93:42:07:28:fc:bf:63:f1:
83:6d:97:ed:da:4b:11:1c:ca:97:86:88:64:89:ba:
f9:4e:3b:5a:dc:b5:43:29:6c:c2:c0:1e:b6:2f:38:
74:04:7d:60:7c:5a:1d:5e:c6:1c:3d:f3:dd:ee:ed:
71:62:93:c6:c0:18:ba:4b:d3:8a:a6:8b:11:ce:e4:
f4:9e:d6:b9:5d:b5:17:f0:5e:6d:d8:cf:eb:7b:3c:
cb:cf:c9:11:7b:6f:66:72:2d:8e:4b:7e:73:5d:a1:
7e:7e:79:03:9b:64:13:2f:77:aa:b2:40:09:97:54:
87:e7:db:2d:e2:d6:40:1b:08:75:44:4e:d9:ea:0b:
02:76:84:f2:de:90:22:bf:f3:e7:5a:74:fb:62:b1:
f8:57:84:02:46:c7:c4:1d:6a:36:cd:b3:0d:33:ce:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:30:E6:5F:C9:D8:42:92:5A:EB:F4:3D:FB:BB:67:01:C6:71:19:A2
X509v3 Authority Key Identifier:
keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2a:dc:96:9e:34:f4:cd:38:ff:70:05:f9:6e:37:f5:a0:d7:
04:27:34:94:f9:81:bc:6c:2a:79:69:b6:87:20:9a:b8:04:f8:
62:e9:08:86:02:99:11:3a:61:04:68:cf:02:3d:2b:ce:a0:3b:
ef:a1:a6:09:37:98:2c:90:46:d6:4b:be:75:15:0f:06:82:0c:
91:ab:74:b8:97:5d:22:2d:91:93:83:e0:c8:22:90:24:b1:a0:
2c:15:c3:8f:a2:ba:66:60:f4:b1:55:d1:54:12:d6:4c:eb:79:
78:bd:58:7c:28:5e:41:28:5a:03:db:2c:d5:d6:35:dc:f5:60:
64:cc:2a:55:a5:a4:19:1e:8e:29:be:9d:84:51:db:6d:66:a7:
ff:b7:53:d4:c3:fa:02:9b:4b:64:9d:44:2e:f2:a6:c6:d3:f5:
1b:cc:84:d0:e2:af:dc:7a:c6:86:ee:fa:23:85:d0:f9:c5:49:
75:07:86:90:1f:be:64:76:2a:3f:67:2e:2b:a3:dd:89:4f:23:
b0:57:aa:65:98:b0:7d:bc:a3:28:49:59:87:e6:08:e8:17:48:
2a:28:ff:35:b9:7c:2a:9f:ce:25:be:c0:0c:fd:f1:2f:8d:df:
d5:25:a2:de:23:43:a1:d1:0a:de:d3:11:18:39:0c:7b:63:96:
ca:d6:1a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:43:50 2025 by rpki-client