Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
File: t7Z7pXn0ikIHrECav08BGUBG6jo.mft (raw, json)
Hash identifier: IamT2Nav3WCYg8ILINJoGH/bacefesRJERKVU38KJS0=
Subject key identifier: 33:70:38:07:D9:12:8A:82:2F:55:B0:28:50:9A:1C:59:24:43:53:20
Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
Certificate issuer: /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Certificate serial: 0195903DDC706BBD3BD20752A8C0FFC06BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
Manifest number: 149D
Signing time: Thu 13 Mar 2025 16:02:08 +0000
Manifest this update: Thu 13 Mar 2025 16:02:08 +0000
Manifest next update: Fri 14 Mar 2025 16:02:08 +0000
Files and hashes: 1: k-hTaQknXDp2DKuP6vvaZN3brec.roa (hash: IoaNc7VRuQAEFnNwpBORifvWy2POOqQygfpjoy01lPY=)
2: t7Z7pXn0ikIHrECav08BGUBG6jo.crl (hash: v7waO8kh82IcgwUOv5FQjvGQtPcSk2Ps7AjYh6vyx3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:dc:70:6b:bd:3b:d2:07:52:a8:c0:ff:c0:6b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Validity
Not Before: Mar 13 16:02:08 2025 GMT
Not After : Mar 14 16:02:08 2025 GMT
Subject: CN=33703807d9128a822f55b028509a1c5924435320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6a:fb:8d:d4:a0:0d:e1:79:cb:b9:9b:78:bf:
e8:bf:18:b1:78:df:e1:3c:6c:20:6f:67:33:f1:28:
6f:44:35:04:ed:9a:90:0e:d9:5f:2e:62:ed:0d:d8:
ab:88:d6:6e:12:b3:66:0c:5b:29:32:52:b7:f2:43:
bd:99:9a:49:8c:af:38:38:d3:4a:35:44:07:1f:2c:
26:d5:5c:61:87:b0:2c:e7:36:49:ed:fe:e0:32:34:
8e:7c:3d:71:ab:43:15:b0:3f:c8:a3:30:b6:c1:45:
33:11:ea:0a:8d:1c:7d:7e:65:35:05:ac:11:fe:09:
3d:61:17:63:b8:94:98:33:d1:ac:3f:24:39:c5:d8:
ce:02:58:45:bd:c0:b1:5a:ac:32:f3:c1:1a:e5:ce:
50:fb:cd:1b:6b:54:92:cb:b6:da:db:f3:2c:ee:87:
a7:05:65:16:4c:d4:b5:8e:49:52:65:b5:34:47:87:
6c:77:02:1d:a6:b9:9f:c3:5e:21:9e:44:61:73:58:
7b:3b:34:9c:b6:54:76:d0:fa:65:41:77:08:d3:ad:
5e:c4:17:f5:3e:9f:58:b7:59:f0:dd:fe:d5:54:10:
f4:9f:03:8b:77:5b:37:32:4a:3a:3e:59:13:2a:3c:
41:b4:d0:90:e6:1b:07:06:4c:db:a0:91:65:7a:2a:
ce:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:70:38:07:D9:12:8A:82:2F:55:B0:28:50:9A:1C:59:24:43:53:20
X509v3 Authority Key Identifier:
keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:36:b3:52:48:a0:3c:51:90:12:ad:cb:4a:7c:8a:9d:7f:ee:
ac:59:30:56:3e:67:59:bb:3f:be:d0:a9:fd:6d:d6:c0:9e:1b:
11:0f:ad:52:72:0f:f4:d5:6a:69:08:b2:0e:73:40:17:27:af:
e5:da:cf:90:76:7b:8a:11:11:d1:fa:39:e7:53:89:67:1e:fc:
a8:d8:09:8d:4a:59:b9:54:64:99:4b:51:15:04:24:cd:a4:a3:
ea:73:21:e3:31:70:61:fe:0e:b0:34:91:19:58:08:ac:77:2b:
f2:3d:da:dd:4e:fe:b9:40:92:a6:d1:2e:c0:64:c6:3e:b9:76:
4c:1f:57:c5:c2:7a:e6:14:16:57:d1:21:4c:f7:f6:ec:1c:94:
5c:c3:01:38:94:5d:13:b9:93:1e:a8:6d:98:d0:b6:27:4b:c4:
88:ec:25:cb:9e:d5:93:9a:cf:84:59:7b:4b:e6:1f:31:5d:b3:
ae:b4:f4:7b:e7:8b:a1:4f:15:d6:45:c1:de:29:a0:06:f1:e8:
18:46:84:ab:aa:92:db:93:f0:b1:4f:be:32:2c:c6:13:71:f7:
7c:7d:ea:6f:69:9b:63:73:6e:86:1e:7b:63:7c:43:08:72:df:
35:82:b9:88:bb:b1:d5:6c:4b:3e:25:64:14:4a:10:c3:33:f7:
44:a8:70:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:41:27 2025 by rpki-client