Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
File: _7yuKykMgB1X0J0CWpNI4WcG8YI.mft (raw, json)
Hash identifier: BdXA+kzx6XIgxxSMDoNiHP+0kaQ8YoHJDzXb5xPToeU=
Subject key identifier: D0:1E:83:47:92:B8:78:9F:9B:BE:32:91:C7:8F:4A:22:BC:E5:61:61
Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
Certificate issuer: /CN=ffbcae2b290c801d57d09d025a9348e16706f182
Certificate serial: 0196447B519CBB1AA236C89A039C2FDB33CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
Manifest number: 1456
Signing time: Thu 17 Apr 2025 16:00:54 +0000
Manifest this update: Thu 17 Apr 2025 16:00:54 +0000
Manifest next update: Fri 18 Apr 2025 16:00:54 +0000
Files and hashes: 1: 8wTHmWo4SSJsVc0t3sJFniZg3X0.roa (hash: nwCEElQrpQEsbcFPrYoePVQv66vMAWow/x3hFkCdNgc=)
2: CfByYUpLy5HR5mppU__UXlpQvd4.roa (hash: J4PogzYPOjo2AP+rxBsCwdc146VrXnAE07Lu3yHc7A8=)
3: _7yuKykMgB1X0J0CWpNI4WcG8YI.crl (hash: EBu57C9Yr3t7jaB999cwErQA9tR1F49N4eWS/PTAF00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:51:9c:bb:1a:a2:36:c8:9a:03:9c:2f:db:33:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182
Validity
Not Before: Apr 17 16:00:54 2025 GMT
Not After : Apr 18 16:00:54 2025 GMT
Subject: CN=d01e834792b8789f9bbe3291c78f4a22bce56161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:73:f4:ae:90:8e:bc:96:c0:c1:23:5d:b8:
3f:6f:2c:ce:95:6b:e4:d2:2a:35:83:77:ea:06:64:
cb:0c:01:19:6c:2e:4d:60:32:15:9c:c7:69:65:16:
e2:a0:60:e5:c3:47:7f:30:46:1a:66:bb:85:d3:5b:
6b:a5:3c:5f:73:d5:a8:2b:76:aa:f6:8e:4f:08:48:
cc:e9:ce:7e:78:ee:6a:79:f0:2b:0e:20:1f:2c:6f:
81:14:2a:f0:de:65:59:7e:3d:6a:56:92:a1:2f:ed:
6a:32:2f:05:1b:a2:79:2d:41:35:81:f6:83:77:be:
0c:42:bc:83:4a:99:54:13:ec:8d:6d:b4:4e:23:1b:
01:61:02:70:d1:62:b3:21:50:af:91:d3:d4:2d:ac:
73:55:77:61:0e:33:b7:74:45:8d:ca:67:d8:b9:47:
3f:d9:20:b6:b8:47:d0:c2:c9:f3:cf:2b:d3:33:12:
94:70:ec:77:88:8a:bd:72:a2:ab:58:34:28:af:57:
b6:3b:1b:5d:b7:74:03:b6:34:86:59:e5:5e:e2:98:
52:5a:e7:14:5d:a1:ab:b1:68:0b:e7:6c:ef:c1:60:
3f:11:8a:2c:8d:41:3d:ca:1c:66:1a:67:cd:ec:09:
82:89:2e:7e:69:8c:38:3f:2c:3a:72:30:af:c5:c0:
cc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1E:83:47:92:B8:78:9F:9B:BE:32:91:C7:8F:4A:22:BC:E5:61:61
X509v3 Authority Key Identifier:
keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a7:b2:a0:0c:c8:5c:e5:f7:4d:8f:30:bd:da:04:3a:df:fb:
3c:b6:ab:8a:95:97:d2:79:91:47:da:8b:d8:44:a3:11:fb:49:
a8:78:88:f6:09:42:5d:73:8f:93:ea:2c:1e:4a:74:93:e6:89:
0c:31:44:dc:39:dc:a2:77:bf:0f:a0:97:91:c6:5d:29:9f:8c:
ea:fd:fc:c1:e0:cb:40:aa:af:c2:c1:c5:ff:26:0a:c8:8c:12:
df:c5:28:52:5d:31:e5:37:d5:26:bc:78:2c:e1:ec:f1:ce:4a:
b8:0b:9e:bc:f6:b6:a6:bd:91:93:8a:53:88:d0:52:fc:29:8c:
81:73:59:27:41:e1:57:62:a6:7c:4e:52:19:45:19:bb:63:62:
e2:f9:a8:f9:ef:f6:30:60:2b:27:ad:c0:65:99:e4:9b:0f:1f:
41:ab:59:16:d6:b8:d8:b8:73:11:1f:a2:2b:0e:3f:c2:80:7e:
66:10:15:45:ef:b8:96:d2:c4:7a:ed:46:d6:3a:59:5d:d2:b4:
de:2c:11:14:97:4a:ce:f3:eb:08:88:ea:98:6f:60:a4:1e:a3:
58:f7:e4:10:54:a4:f3:bf:ca:ad:49:93:a2:9e:92:e3:02:23:
50:12:3b:30:8b:59:93:58:27:3d:6b:ff:d5:75:80:81:4e:1c:
00:c2:3f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:42:36 2025 by rpki-client