Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.mft
File: 7eApTRMFvrr2iUZCv9kv1DmCUQI.mft (raw, json)
Hash identifier: 0rdH2VOan2iM0XL70gLWYmo1FhkBvRMqnlCTESg2jBQ=
Subject key identifier: BE:9F:98:8C:38:34:CE:BC:72:FF:B9:D7:59:D4:E6:E2:8F:F4:47:5C
Authority key identifier: ED:E0:29:4D:13:05:BE:BA:F6:89:46:42:BF:D9:2F:D4:39:82:51:02
Certificate issuer: /CN=ede0294d1305bebaf6894642bfd92fd439825102
Certificate serial: 01959073D16C913AC44ED19A24ADC358189D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eApTRMFvrr2iUZCv9kv1DmCUQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.mft
Manifest number: 149A
Signing time: Thu 13 Mar 2025 17:01:04 +0000
Manifest this update: Thu 13 Mar 2025 17:01:04 +0000
Manifest next update: Fri 14 Mar 2025 17:01:04 +0000
Files and hashes: 1: 7eApTRMFvrr2iUZCv9kv1DmCUQI.crl (hash: A7MIntuH6ECDJtuMFFlnL5Nmq1kUidJKAkPAPn0gOos=)
2: bJ4sh6U6AWn89GmwoeAcocafgE4.roa (hash: Y+U7WWWf4hP7E6R51Ww3VT3Vt2JWiwOghZ095dPcPh8=)
3: fNvy3r37_4b6LefWjRGgK8SlrUI.roa (hash: 6A8ADFg9pRpZbe6Cwd0Rb5jshUxYYaxV6Jo4EFTgMJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7eApTRMFvrr2iUZCv9kv1DmCUQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:73:d1:6c:91:3a:c4:4e:d1:9a:24:ad:c3:58:18:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede0294d1305bebaf6894642bfd92fd439825102
Validity
Not Before: Mar 13 17:01:04 2025 GMT
Not After : Mar 14 17:01:04 2025 GMT
Subject: CN=be9f988c3834cebc72ffb9d759d4e6e28ff4475c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:0f:98:65:23:cb:5c:f5:31:39:4c:70:93:
94:6b:4c:44:e0:5c:11:b9:2c:8f:f8:fe:f9:58:b0:
3b:31:75:3a:3d:89:59:22:36:2f:ee:33:18:63:5b:
63:58:3d:63:9a:64:f2:33:a2:0a:a4:f1:e5:92:df:
c4:78:4d:77:f7:16:23:29:5f:49:28:ff:6d:29:bb:
8f:ff:f3:b3:ce:80:71:80:a8:c4:d7:9e:3f:88:64:
07:ee:9e:29:ec:5a:65:1a:fb:4e:3e:c7:90:73:cd:
23:ac:ce:c2:3d:9d:df:57:57:f7:2c:a0:1b:aa:0c:
bc:09:79:0e:65:35:11:c7:a8:35:3b:12:45:f3:44:
de:66:89:0f:d9:59:95:05:1b:d0:3f:0d:84:8e:3b:
05:8d:87:e2:ea:80:50:41:f0:9b:14:1d:a6:e1:a5:
dd:e0:13:48:2e:9a:09:6f:56:a1:1c:3d:3c:53:e3:
8f:69:b6:6c:5f:8f:91:12:0c:7b:f1:c9:e0:3c:e2:
24:93:18:fc:81:33:95:f2:b2:c4:64:78:83:4c:5a:
c0:92:60:cb:16:4b:eb:c3:18:84:36:2c:21:d5:3e:
85:a2:0e:ec:7b:c1:d0:bd:48:a4:30:5b:d3:56:f8:
09:4d:b1:aa:63:42:bd:12:90:6f:5d:de:69:ae:2f:
9d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9F:98:8C:38:34:CE:BC:72:FF:B9:D7:59:D4:E6:E2:8F:F4:47:5C
X509v3 Authority Key Identifier:
keyid:ED:E0:29:4D:13:05:BE:BA:F6:89:46:42:BF:D9:2F:D4:39:82:51:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eApTRMFvrr2iUZCv9kv1DmCUQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a2:a8:27:31:e7:24:27:10:52:6d:3c:6a:b5:27:76:e7:b8:
37:92:98:cf:4f:64:ba:0f:d9:10:4e:4b:1d:63:2a:aa:1a:7d:
fd:da:f5:26:a1:d9:8c:83:9b:c6:40:b0:43:28:93:21:46:f8:
ee:e4:ab:f9:83:46:2c:29:43:92:51:8a:2f:cf:52:ea:1e:3b:
f3:4a:4f:ac:bf:07:8a:e7:31:da:e1:73:87:75:a7:bb:08:04:
a3:61:e3:65:0c:f2:40:e2:77:f2:fc:c4:ef:db:21:17:cd:54:
2c:6f:4b:00:69:4f:30:6a:a0:f9:4e:b2:9a:c6:1f:fe:1e:e3:
8b:44:99:a5:66:ae:eb:9f:5e:31:2b:69:bb:91:21:8d:ef:e9:
fa:3e:b2:72:c1:fd:25:49:6b:9d:72:48:da:71:a1:20:59:95:
b1:86:7f:37:70:7d:ee:2c:2a:53:bf:37:6c:79:ef:31:dc:c5:
49:f8:50:46:92:f7:96:14:31:6d:90:d9:80:c9:0f:9b:ee:16:
ee:bc:e0:45:c1:c1:df:da:26:59:79:0a:e4:38:22:2c:a4:ae:
a5:03:89:63:59:53:77:91:0f:37:b6:ae:ac:fe:69:bd:ad:e7:
6f:27:c3:db:6d:8e:c8:d6:8a:f5:11:48:dc:6b:81:c4:cc:5e:
46:16:ef:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:20 2025 by rpki-client