Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.mft
File: 7eApTRMFvrr2iUZCv9kv1DmCUQI.mft (raw, json)
Hash identifier: WuqaFZsjOEPVvVKbrLhedAnCkQQL8g46gIk/z0+WM7k=
Subject key identifier: 5B:27:28:64:00:21:EB:F5:36:80:3A:FC:80:75:A8:F0:8E:0A:BC:97
Authority key identifier: ED:E0:29:4D:13:05:BE:BA:F6:89:46:42:BF:D9:2F:D4:39:82:51:02
Certificate issuer: /CN=ede0294d1305bebaf6894642bfd92fd439825102
Certificate serial: 01960FE99BF5D5952329CACEEA6FBC8F9FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eApTRMFvrr2iUZCv9kv1DmCUQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.mft
Manifest number: 14DC
Signing time: Mon 07 Apr 2025 11:01:30 +0000
Manifest this update: Mon 07 Apr 2025 11:01:30 +0000
Manifest next update: Tue 08 Apr 2025 11:01:30 +0000
Files and hashes: 1: 7eApTRMFvrr2iUZCv9kv1DmCUQI.crl (hash: PhnY+OTPKQIwiQjZ/6W4qxxnqOssFtLzxuISC8NU22M=)
2: bJ4sh6U6AWn89GmwoeAcocafgE4.roa (hash: Y+U7WWWf4hP7E6R51Ww3VT3Vt2JWiwOghZ095dPcPh8=)
3: fNvy3r37_4b6LefWjRGgK8SlrUI.roa (hash: 6A8ADFg9pRpZbe6Cwd0Rb5jshUxYYaxV6Jo4EFTgMJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7eApTRMFvrr2iUZCv9kv1DmCUQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:e9:9b:f5:d5:95:23:29:ca:ce:ea:6f:bc:8f:9f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede0294d1305bebaf6894642bfd92fd439825102
Validity
Not Before: Apr 7 11:01:30 2025 GMT
Not After : Apr 8 11:01:30 2025 GMT
Subject: CN=5b2728640021ebf536803afc8075a8f08e0abc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:4f:7e:95:37:4c:90:79:bd:55:33:fb:48:
76:40:6f:72:df:b9:5e:c1:bc:b9:75:96:bf:68:50:
e6:91:b5:27:3d:21:75:43:f6:42:64:79:30:57:de:
ab:d9:f3:02:e0:1b:0b:a7:2f:64:6c:93:8f:2d:3e:
8a:f5:7e:c7:b0:3d:55:1a:29:9b:91:eb:58:75:0f:
5d:37:c5:62:41:1f:24:a1:64:ed:46:ab:04:ae:6d:
67:87:20:7b:6a:a0:76:ac:de:77:3a:15:8c:1b:12:
54:78:54:a4:ab:64:40:67:e7:e7:ae:da:8b:1d:d9:
b6:bf:bd:0c:a0:0d:63:6e:9d:1f:81:16:5c:47:1b:
20:59:cd:57:c4:8a:68:a0:e5:9c:6a:7b:cb:36:b1:
fe:b3:d5:fd:cc:03:44:f0:f8:66:3b:0b:7d:14:76:
3a:a6:59:25:40:cc:96:e4:84:95:5a:dd:9c:b3:01:
94:17:46:f9:19:45:8a:ca:82:38:9a:4d:d2:ec:ac:
2d:bc:f1:1a:46:4a:67:59:90:c4:a0:3a:82:34:14:
39:f9:4e:48:bf:c9:1d:9a:b5:67:9b:60:aa:40:9b:
88:28:fd:de:8c:3d:ef:66:1d:05:bd:c3:a5:2e:16:
6c:ab:eb:40:f9:aa:59:9f:9e:87:70:49:43:bf:6a:
5f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:27:28:64:00:21:EB:F5:36:80:3A:FC:80:75:A8:F0:8E:0A:BC:97
X509v3 Authority Key Identifier:
keyid:ED:E0:29:4D:13:05:BE:BA:F6:89:46:42:BF:D9:2F:D4:39:82:51:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eApTRMFvrr2iUZCv9kv1DmCUQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6616ac-87cd-4edf-b107-046a3a9aacb9/1/7eApTRMFvrr2iUZCv9kv1DmCUQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:39:1c:b4:a9:2e:fe:25:63:ba:bc:2a:de:1a:81:bd:61:e6:
92:1a:da:89:8a:82:ef:30:ef:38:60:c0:36:04:49:a7:1e:7d:
38:bf:7e:a0:de:5b:8b:ec:5c:2d:1a:6a:d1:d5:45:c2:76:17:
cd:61:34:d5:eb:a3:ea:fc:46:b5:7a:d7:88:c2:71:61:b4:52:
d0:3e:7d:c3:a9:ad:77:66:52:9a:61:ed:cb:8b:d4:da:35:04:
02:01:35:2c:8e:d8:c5:33:ff:a5:c8:db:e3:1d:fa:59:6b:ab:
b9:a6:c5:f1:06:6c:f2:e1:c4:63:b7:4c:62:45:81:07:57:81:
e6:37:ce:a2:42:fe:a0:f0:92:f9:57:de:1c:46:91:c8:b0:81:
c3:c2:93:5a:e0:da:cc:ec:4f:31:af:b0:02:c0:80:37:1d:ee:
40:e5:d7:ff:b8:2f:ae:7b:63:a0:8d:e9:2f:c3:38:04:d7:ac:
c2:b4:5b:36:21:95:94:52:ca:00:46:4e:30:a8:7f:67:b0:d3:
0e:1b:f3:d9:eb:68:1a:a4:28:fd:6a:19:80:89:52:5f:fe:3f:
3f:d2:58:00:a0:32:fe:e5:f9:f8:6b:c7:27:2a:61:57:14:36:
e6:f7:1e:72:75:9c:70:69:9f:2f:16:7e:78:00:fe:fb:c1:16:
f8:c6:56:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:01:25 2025 by rpki-client