Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
File: 7Y3fghIIo3DjpbfvjNR5fPxXdII.mft (raw, json)
Hash identifier: UVjvN3yInBZle10idfnfkPDm0roL8+5Vcby9hCUOgsc=
Subject key identifier: 98:E6:F2:56:1B:91:76:62:17:94:0B:DD:4A:25:0B:1B:03:AD:AD:41
Authority key identifier: ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
Certificate issuer: /CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Certificate serial: 0196458D4D44E1D5DD7BA0C2A8A29D7AD9A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
Manifest number: 0B76
Signing time: Thu 17 Apr 2025 21:00:10 +0000
Manifest this update: Thu 17 Apr 2025 21:00:10 +0000
Manifest next update: Fri 18 Apr 2025 21:00:10 +0000
Files and hashes: 1: 7Y3fghIIo3DjpbfvjNR5fPxXdII.crl (hash: FNfHETcitHvnQ6CVHwFPDCEZbDGxEw94VDO0wBOFRPQ=)
2: DurnQ3dAzPxoCUXWiroCcReHID8.roa (hash: k2ck5I6D1NKufGijk0qz5B1og8UdirayVzhgWYYPrYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:4d:44:e1:d5:dd:7b:a0:c2:a8:a2:9d:7a:d9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Validity
Not Before: Apr 17 21:00:10 2025 GMT
Not After : Apr 18 21:00:10 2025 GMT
Subject: CN=98e6f2561b91766217940bdd4a250b1b03adad41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:4e:83:ae:5c:c2:a5:0f:bc:90:64:da:22:
64:48:83:5e:fb:aa:4e:f6:ba:8a:c3:68:22:c7:58:
61:71:3b:6e:1e:63:ef:20:52:81:ce:37:7e:71:a5:
75:da:70:0c:47:df:cc:1b:ac:65:c4:b0:38:4e:00:
47:0a:76:2c:5b:96:8f:12:84:bd:d4:83:db:d4:2f:
72:08:26:e7:0e:25:46:a2:b3:d2:84:12:bf:92:92:
5d:fa:45:8b:f9:9c:e0:1d:ca:c1:7d:ab:40:af:f8:
7c:5d:23:6e:16:5d:79:b6:bf:9c:b6:e8:5c:56:31:
27:e6:71:8e:f7:b9:a4:c7:f3:f8:d3:16:2f:63:4d:
e3:09:33:f6:1f:fc:91:27:a7:6a:5e:90:b3:5e:8f:
5e:64:d0:9f:67:6e:1d:aa:5b:7f:0c:ae:33:de:10:
ce:81:90:ef:ea:dd:42:0e:c9:b7:fc:f9:41:00:06:
c1:24:fd:fd:a5:1a:ea:62:9a:56:55:e6:b1:39:90:
99:5f:0d:c2:99:ef:fa:c5:58:33:bd:fd:77:cd:8c:
7c:61:72:21:a5:09:2e:23:5c:6c:6f:13:1c:c6:92:
1f:60:aa:7f:12:64:4d:44:ad:19:e1:13:fb:13:5e:
03:79:0e:bd:c2:72:22:87:49:25:0b:91:90:fa:d2:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E6:F2:56:1B:91:76:62:17:94:0B:DD:4A:25:0B:1B:03:AD:AD:41
X509v3 Authority Key Identifier:
keyid:ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7f:a9:f7:6c:4f:3e:33:bb:e1:2f:cb:8d:de:13:ff:2a:ea:
ad:5a:7b:56:85:c3:4f:4e:e6:ec:17:31:d9:9d:6e:77:81:8e:
2f:71:0f:8f:43:8c:8a:0a:03:ec:7c:b7:a3:19:68:f2:a3:4b:
e1:cc:3d:af:a5:f2:15:a7:2a:3f:15:82:46:b9:2f:1d:4e:0e:
cd:95:88:de:de:0f:f7:72:65:20:0d:26:f4:dd:84:00:16:ac:
f8:1c:c3:a5:07:09:37:1b:59:43:21:55:5a:31:6f:87:b6:1b:
ec:59:c2:17:ad:42:5c:59:b0:01:0a:38:20:8b:88:84:c2:74:
3c:c1:16:41:c2:29:07:9e:b7:c0:6a:68:e7:6c:26:b1:a1:75:
0c:45:6e:11:80:d0:63:61:73:76:3e:e7:58:dc:f0:a8:a9:02:
e2:c4:6f:3f:79:1e:81:b3:27:c5:7d:37:94:4e:90:fc:03:8f:
56:ba:10:c3:c2:d4:03:29:bb:7d:47:97:14:52:b6:5a:69:20:
c9:50:59:4e:cd:3e:7c:93:d8:87:9f:47:95:e5:51:c0:b4:45:
20:d5:16:3d:5a:3f:27:32:12:81:33:03:b5:d6:03:31:f3:1c:
69:57:9c:78:73:39:cb:48:e7:b9:93:64:d0:d0:31:b5:85:a0:
8e:4a:fb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:51:20 2025 by rpki-client