Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
File: 71g2hkZMUz1BUryi7fOgG0h-6pI.mft (raw, json)
Hash identifier: xvDETQlUk8BLrnyJ4iW6rLOu5aQReR372LG9DCJztgw=
Subject key identifier: 75:FD:79:78:58:E7:DB:BC:C0:6A:36:BA:D8:32:F2:C1:9D:A0:D0:04
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial: 01965A5E785B00BFCFA93B90535E78B8E24D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 22:01:02 +0000
Manifest this update: Mon 21 Apr 2025 22:01:02 +0000
Manifest next update: Tue 22 Apr 2025 22:01:02 +0000
Files and hashes: 1: 71g2hkZMUz1BUryi7fOgG0h-6pI.crl (hash: V0O8ZnpdKe1Cin//wwwLn3iFUMY1tQePu8wgDGPZHoY=)
2: f55jTIdQsHwVwkpSlpByg0fWwy8.roa (hash: 25acZzU2K48rff6CSQnqCSvHpfoM5LhDm4D2D9V3Y28=)
3: pDNMWZBm4DSQ8IaTBRK4JfyOvPQ.roa (hash: zFp7HXAJh1CoEp8dhPFuXJ5GjYTeml3rleudA3KDsw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5e:78:5b:00:bf:cf:a9:3b:90:53:5e:78:b8:e2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
Validity
Not Before: Apr 21 22:01:02 2025 GMT
Not After : Apr 22 22:01:02 2025 GMT
Subject: CN=75fd797858e7dbbcc06a36bad832f2c19da0d004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:d8:8f:31:b2:b0:f4:c7:0c:f6:a7:45:af:
1e:de:16:92:df:65:ea:95:a1:58:7b:8c:03:6d:0c:
99:7a:58:98:d5:f1:28:5d:4d:76:7c:a7:b7:2f:b1:
1a:af:78:66:e1:88:d8:cf:9f:92:26:b7:43:71:1e:
8f:14:d1:47:ce:b4:2f:09:09:0d:d9:02:b6:8b:74:
68:5f:04:03:66:bf:11:67:d9:30:8e:52:b0:b4:1b:
f0:fb:ce:c3:db:b1:36:92:72:df:fe:d7:dc:07:10:
3b:5d:ca:b5:78:0d:5b:df:ce:02:b7:74:21:75:09:
a8:7d:cf:4f:a7:42:41:de:92:59:40:a0:26:4d:32:
0b:b9:5a:14:90:c0:30:eb:02:38:39:f3:c0:ac:c6:
49:c2:ec:16:0e:57:37:a2:0c:9b:4f:f1:7f:66:d8:
7f:ba:f1:34:cd:95:f0:93:93:96:3f:14:fa:9d:c1:
01:9d:88:96:fa:15:1f:d8:ae:45:53:73:b2:d1:42:
eb:b3:81:12:88:f0:e2:6f:40:27:6f:8a:a1:0c:c9:
e6:12:12:da:a2:e2:89:8d:79:79:76:f4:a9:38:03:
0c:87:8b:01:73:89:36:b9:47:f6:42:ed:95:2e:83:
ed:09:d0:55:3d:7c:3e:10:99:81:b2:40:3c:9f:70:
55:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FD:79:78:58:E7:DB:BC:C0:6A:36:BA:D8:32:F2:C1:9D:A0:D0:04
X509v3 Authority Key Identifier:
keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b7:fe:da:b6:e1:24:ba:60:95:6a:79:05:b9:3b:de:b0:9c:
ba:e7:3b:ba:a1:55:6b:23:ed:56:cb:63:97:6d:ad:5d:35:d6:
1a:c1:42:cb:64:e8:c6:a0:37:4b:7d:c2:8c:3c:c4:56:64:e1:
72:02:a2:2c:22:f6:27:0c:0f:df:2f:c3:3b:0f:be:a3:a4:e4:
a9:1e:bb:92:75:eb:3f:c9:68:7e:ab:64:e1:d4:94:e6:43:22:
18:c8:97:b6:92:fc:aa:2e:e5:9a:44:ae:85:7c:b0:6a:e5:6d:
da:f4:1d:84:c1:a8:cb:4f:7b:58:92:b1:ad:1b:98:5f:7e:f9:
65:ce:cf:97:11:5f:7e:df:36:6c:a8:08:4d:4c:32:85:a3:7c:
02:be:b7:b9:51:1b:6a:7b:7d:8c:13:8d:5e:09:82:be:a4:c0:
5f:3b:1a:d4:57:c2:94:b5:5c:6b:56:86:06:c3:49:0d:e6:eb:
4c:dc:ef:5d:fe:33:09:77:d8:a1:cb:7a:b2:78:41:ea:e2:e4:
5c:72:7e:f8:3b:5c:6e:95:3b:8c:11:4e:bb:b7:ce:2a:48:9b:
36:b8:d0:e4:fe:d6:73:ad:4a:25:9c:a2:b9:fb:12:81:ab:b4:
9b:cb:97:b9:31:a9:8d:bc:d9:ee:85:27:26:cf:db:84:43:9e:
e8:8a:54:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:55:34 2025 by rpki-client