Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
File: 7vvoNpp7vAOob75jm376oCtxcoc.mft (raw, json)
Hash identifier: j3RjhO1drDHaFQ880QN/orGqWfk/xcBMExui2h+8jJ8=
Subject key identifier: 7E:B9:3F:45:FB:79:1D:B0:A2:D8:0B:66:CB:D4:D0:5F:31:C1:C4:8B
Authority key identifier: EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
Certificate issuer: /CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Certificate serial: 019510FDBF9F1D8B7BF39F27C6C67C2F809F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
Manifest number: 0B3D
Signing time: Sun 16 Feb 2025 23:00:19 +0000
Manifest this update: Sun 16 Feb 2025 23:00:19 +0000
Manifest next update: Mon 17 Feb 2025 23:00:19 +0000
Files and hashes: 1: 7vvoNpp7vAOob75jm376oCtxcoc.crl (hash: pa+2iY/DYIDNplBqLT5TIBqif4h7lxPVgFegLX++aEY=)
2: _VrWIzeeb6E8sDSdAStFjFktgds.roa (hash: XW7KS/0ycwvajLuTV4nzdbjjjJAo77rPpbsld42wLs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:bf:9f:1d:8b:7b:f3:9f:27:c6:c6:7c:2f:80:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Validity
Not Before: Feb 16 23:00:19 2025 GMT
Not After : Feb 17 23:00:19 2025 GMT
Subject: CN=7eb93f45fb791db0a2d80b66cbd4d05f31c1c48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:da:99:ff:53:6f:11:7a:6f:61:2d:0f:e7:
06:1a:cd:c1:da:ea:54:8f:08:0f:4d:a0:f7:ce:db:
a3:03:41:28:e7:35:2a:93:2c:06:3b:d4:78:81:04:
dd:b7:43:bf:1f:99:4b:f2:9c:48:4e:47:fa:b5:40:
e4:25:9c:3b:44:bd:59:bc:47:23:6e:5e:ea:c4:89:
df:b0:04:a5:2e:33:06:d2:e8:81:a2:83:af:ff:87:
e8:ba:e9:d3:de:f4:73:80:ff:a1:51:bd:d5:d7:e0:
c5:ee:64:84:28:c2:12:f5:a5:df:0b:9f:aa:41:ec:
f1:8f:37:fa:e3:db:94:8d:c5:03:02:66:26:8d:4b:
8f:27:1a:71:5a:1b:0d:7d:19:63:58:a4:95:75:87:
c0:f4:91:d4:f6:01:bc:45:4b:5e:1c:f7:b3:5b:53:
20:1d:84:81:4f:8a:8c:26:15:1c:45:a6:07:c2:f7:
05:7f:39:c5:43:a8:35:be:69:b0:90:79:e6:e3:d9:
8d:bd:c0:17:1c:89:d9:97:a3:7b:1e:c7:b4:7b:2d:
b7:a4:5e:24:ba:5d:ce:23:c1:9e:4c:e2:95:03:a1:
e6:8c:ef:2e:6f:0a:44:2a:15:a2:37:9b:f4:c3:86:
36:bf:64:15:29:11:31:db:15:6a:d8:c3:29:30:41:
12:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B9:3F:45:FB:79:1D:B0:A2:D8:0B:66:CB:D4:D0:5F:31:C1:C4:8B
X509v3 Authority Key Identifier:
keyid:EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:64:10:7f:ed:e4:8a:ed:6f:8a:60:ba:a9:1a:88:f9:a0:69:
b1:b8:e0:5a:b0:78:0b:a5:6b:3e:bc:6b:7c:27:b7:c8:de:59:
cd:c1:60:a4:f0:ca:63:19:ec:67:ac:ae:d1:ae:d4:c5:ed:5e:
6b:eb:64:12:e9:b4:f6:73:75:1a:5a:a8:88:eb:63:73:d5:14:
7e:ac:ed:f6:ee:70:49:1f:bd:a3:6e:f3:f4:79:73:37:00:08:
08:33:a8:04:2e:87:86:3d:2c:c1:7c:96:ce:d9:68:62:4b:f9:
ff:24:16:81:6b:2d:7c:45:d0:dc:db:5e:d3:4d:b5:e8:7e:66:
45:4e:b5:47:a2:2a:48:ce:b7:1d:91:b7:61:69:7f:38:53:ae:
54:48:f4:85:01:5a:2c:c3:86:ad:fa:cf:3a:d6:da:ef:b1:21:
be:f2:af:c3:08:fe:cf:4b:2b:3b:83:af:04:86:57:e1:ef:7d:
c4:0d:22:a9:a7:1d:92:d7:d7:9d:3e:ff:ff:7d:63:d7:e6:33:
e3:8e:14:f3:df:de:a5:b4:85:26:b2:02:a1:0b:1a:a8:a3:9a:
e8:8f:64:e3:c1:55:99:63:9d:b6:6d:6a:6a:0a:b6:42:f4:55:
33:0c:5b:8d:c0:31:13:ab:9a:f0:36:5a:e7:ac:a0:fc:93:15:
a2:51:1a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:24 2025 by rpki-client