Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: jDjwPfuf78dgA4DBDWM3ty+aFQpWkdHLaP4o8aluwZQ=
Subject key identifier: 1B:EF:C2:D7:43:FA:90:E1:B2:6B:42:B4:0F:58:2F:C8:4E:8B:F7:B4
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 019611D770F2CB1371C7EFFD1A7B6FACEE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 14DD
Signing time: Mon 07 Apr 2025 20:00:53 +0000
Manifest this update: Mon 07 Apr 2025 20:00:53 +0000
Manifest next update: Tue 08 Apr 2025 20:00:53 +0000
Files and hashes: 1: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: yA9NDJtnI3FgtctbmdxTBrIGpmcFIA9KLiUnUkcoYd8=)
2: QmonITNns_8Q9qn9QpgL_m0jbZY.roa (hash: lePHGLh8RQcKhBsHHefYW0245CnYH1iaj+dz5PW9vD0=)
3: jPA51IVoNgHj7WtWvD3gzuO1ESo.roa (hash: 1OIwLVWMLOnuWB49hstWycn0Dp3PUqU3H2e7UthawGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:d7:70:f2:cb:13:71:c7:ef:fd:1a:7b:6f:ac:ee:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Apr 7 20:00:53 2025 GMT
Not After : Apr 8 20:00:53 2025 GMT
Subject: CN=1befc2d743fa90e1b26b42b40f582fc84e8bf7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c2:e0:83:59:50:66:b2:2d:11:6d:01:f4:bf:
8f:40:56:d5:c3:e0:2d:15:8e:db:7c:0c:2f:6b:ab:
29:34:af:36:20:ce:66:fc:7e:af:5b:a5:4d:56:59:
ae:9b:00:53:ad:db:2b:69:c6:e8:5a:a2:6f:60:bd:
f3:2d:20:41:2e:46:84:28:2b:a5:04:10:98:03:e6:
33:e7:63:c7:1f:8e:3d:aa:1a:1d:1c:5e:bd:41:ec:
ee:26:9b:64:e7:ae:16:3c:78:77:f4:77:1c:56:c1:
b6:bf:5e:5f:06:5a:0d:55:4c:0a:0a:0d:69:ca:21:
e0:9d:d7:97:6d:ac:56:14:d1:c2:10:a3:9e:1a:7d:
96:77:39:e7:c6:97:c8:aa:ee:43:64:7d:de:88:0f:
37:02:68:f4:35:ee:de:d4:9e:13:28:48:93:2d:f3:
c3:77:b9:93:f9:82:5a:91:e1:00:b6:89:9b:39:b5:
d8:ff:dc:5e:34:51:f7:89:3d:6a:0d:74:3d:0a:93:
33:8e:9a:de:0a:c9:05:be:64:e6:40:e3:7f:25:16:
45:9a:6f:ef:66:8a:59:f3:c8:d2:d9:98:b2:5e:7d:
c1:a4:f3:8c:e4:95:eb:41:66:ce:db:6b:0e:9b:68:
f4:4b:0b:79:4a:a5:40:ff:80:72:e2:4a:26:7a:f4:
84:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EF:C2:D7:43:FA:90:E1:B2:6B:42:B4:0F:58:2F:C8:4E:8B:F7:B4
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ab:10:48:d3:06:82:17:8b:02:78:8e:4b:26:91:d9:56:65:
d8:dc:e5:40:b2:8c:a4:43:2b:d9:fe:92:40:16:0c:27:a2:36:
f9:e7:ef:5a:c3:f6:f9:38:ea:46:ed:07:06:a7:85:07:39:03:
10:50:92:11:5d:a3:8a:0f:ab:29:97:d4:13:66:e4:b1:8f:fb:
90:74:a5:36:6b:83:fd:26:8a:09:85:3f:28:4a:64:c0:f1:ae:
bd:6e:ad:58:ce:ae:13:7f:69:93:19:74:2e:a4:0f:86:ac:98:
9f:ea:f5:4f:ba:5a:3b:c7:da:fa:3f:0d:69:90:f2:08:db:a0:
54:a6:8d:b3:33:58:2d:c5:76:de:94:70:1a:22:3b:43:63:c2:
c1:c2:49:de:6e:44:df:d6:23:16:7b:08:6e:29:79:48:e5:8a:
d9:f5:37:62:89:b0:0d:0b:af:91:11:c1:04:98:6f:8d:72:0b:
1c:40:20:f6:08:dd:15:0e:00:32:ae:7e:8c:b5:78:6f:dd:c5:
e2:e1:c2:e1:ab:1b:61:2e:ea:88:9e:f2:c1:04:1b:01:3a:0a:
24:16:b9:08:3d:22:a6:92:86:2f:ce:9f:3e:47:b4:9e:16:ed:
b1:66:6b:db:3d:5a:3d:b9:fb:f0:7a:2a:80:87:d6:03:37:ee:
2d:da:b3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:38:43 2025 by rpki-client