Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
File: 7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft (raw, json)
Hash identifier: DwiTTPfN7wQPp9Df+3i6OK2RfCeLtRcr+XnFAlnX8wo=
Subject key identifier: AB:58:3B:6A:7C:B9:00:69:A5:C5:DC:C5:EF:52:BD:9E:80:67:28:27
Authority key identifier: ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F
Certificate issuer: /CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
Certificate serial: 01958C6117CEE14EE1272CF54EA452370B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
Manifest number: 02CF
Signing time: Wed 12 Mar 2025 22:02:07 +0000
Manifest this update: Wed 12 Mar 2025 22:02:07 +0000
Manifest next update: Thu 13 Mar 2025 22:02:07 +0000
Files and hashes: 1: 7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl (hash: vr+6QWPx9Wym0+4h1qTxqZS7Z5ZkNWkHCHrZeGDJ5g0=)
2: tv6tClbvL3fe6dvTJo3FM5f_h3Y.roa (hash: A+tnxsTWmCeZid4USiunoHsPUSXZ+9POOmWlZ50vqKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:61:17:ce:e1:4e:e1:27:2c:f5:4e:a4:52:37:0b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
Validity
Not Before: Mar 12 22:02:07 2025 GMT
Not After : Mar 13 22:02:07 2025 GMT
Subject: CN=ab583b6a7cb90069a5c5dcc5ef52bd9e80672827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:e9:ec:9b:56:42:72:0f:e3:6f:5c:38:ac:
2d:96:7a:56:41:02:4f:70:8b:08:42:59:57:89:29:
75:27:15:ab:77:eb:05:f9:c7:4f:c2:f3:59:1f:05:
e2:68:5a:6a:a0:37:f0:8c:7f:18:77:10:5e:d4:5d:
b2:7e:b6:77:d2:89:bf:b7:27:67:4b:ed:c7:cb:94:
8d:86:da:9b:70:83:3c:ee:f5:b7:87:e5:16:d3:b2:
44:2d:6c:95:8b:e5:0e:3b:3d:86:2a:66:76:8e:53:
6d:81:4b:7f:14:36:b9:7c:d2:db:83:8d:d1:26:bf:
2d:fa:03:c2:6d:cd:51:90:53:c1:bb:8e:e6:11:56:
4c:b1:16:3e:61:6a:37:62:33:8a:9a:7a:9c:58:d8:
f5:61:28:13:c6:b3:91:c3:b0:1a:12:cf:a8:69:05:
65:04:49:b5:47:f9:80:86:d3:ad:c3:42:ad:5d:3a:
0c:73:3b:5d:0b:22:ef:22:fe:82:4d:61:06:dd:38:
85:76:8e:f4:00:e8:74:92:3d:e1:e7:eb:b8:3a:4b:
4a:ee:1e:e7:24:85:69:ea:6a:7d:67:df:23:a2:1e:
86:9a:e8:82:b4:b5:b2:7e:41:ff:55:f5:43:6e:89:
96:fb:64:62:b2:a1:26:08:8c:09:70:59:b4:ea:17:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:58:3B:6A:7C:B9:00:69:A5:C5:DC:C5:EF:52:BD:9E:80:67:28:27
X509v3 Authority Key Identifier:
keyid:ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:fd:51:16:0e:02:f7:ac:5d:d4:ed:63:67:07:24:d2:60:34:
e3:10:39:ec:3c:1d:39:ae:8b:8e:52:68:75:d4:9b:c4:8c:4d:
cd:65:3a:72:7a:f0:aa:0b:f1:31:19:e6:2e:36:15:fd:27:f9:
f1:79:01:cc:b6:ab:00:8f:32:e3:4e:a7:46:c9:7a:7a:f2:a2:
a9:17:69:2e:99:74:38:34:bd:f0:79:45:56:55:ba:3f:08:14:
f9:74:15:b5:9d:ba:75:dd:52:c7:b3:41:ba:96:5c:01:2b:88:
9c:7c:6b:a6:51:2f:ac:eb:3c:2a:13:67:62:d7:b6:77:c4:fc:
6c:68:f5:66:d9:ae:6f:b5:54:04:1c:b1:ed:ef:14:70:9f:b6:
84:45:19:ea:f6:67:55:d8:a5:5f:c9:37:ce:84:71:10:4e:2b:
60:d1:ab:4a:d1:48:8b:19:05:c9:ec:03:1e:8b:e0:d6:5a:aa:
3d:5d:f3:5d:2e:88:14:75:36:c8:a3:a4:0b:93:56:48:27:df:
1a:41:42:be:da:df:64:96:2c:ec:6a:58:32:2d:9d:54:82:2e:
22:f5:32:90:0c:5c:59:1b:01:ef:f3:8a:5b:14:a1:1d:21:df:
b9:e1:6f:0d:90:37:16:7e:9c:57:5b:e2:87:30:f3:b5:73:98:
31:7f:f8:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYRfO4U7hJyz1TqRSNwt4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzcyYzJmYTIzYmU2ZmE4ZTI4YWVhNGE3MTVkNWFjMzFm
MGNjOWYwHhcNMjUwMzEyMjIwMjA3WhcNMjUwMzEzMjIwMjA3WjAzMTEwLwYDVQQD
EyhhYjU4M2I2YTdjYjkwMDY5YTVjNWRjYzVlZjUyYmQ5ZTgwNjcyODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW3p7JtWQnIP429cOKwtlnpWQQJP
cIsIQllXiSl1JxWrd+sF+cdPwvNZHwXiaFpqoDfwjH8YdxBe1F2yfrZ30om/tydn
S+3Hy5SNhtqbcIM87vW3h+UW07JELWyVi+UOOz2GKmZ2jlNtgUt/FDa5fNLbg43R
Jr8t+gPCbc1RkFPBu47mEVZMsRY+YWo3YjOKmnqcWNj1YSgTxrORw7AaEs+oaQVl
BEm1R/mAhtOtw0KtXToMcztdCyLvIv6CTWEG3TiFdo70AOh0kj3h5+u4OktK7h7n
JIVp6mp9Z98joh6GmuiCtLWyfkH/VfVDbomW+2RisqEmCIwJcFm06hcWsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtYO2p8uQBppcXcxe9SvZ6AZygnMB8GA1UdIwQY
MBaAFO13LC+iO+b6jiiupKcV1awx8MyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hjc0w2STc1dnFPS0s2a3B4WFZyREh3eko4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83OTA2NDgtZGQ5MC00NGViLTlhOGYt
OGZhMDk4NzQxMTNlLzEvN1hjc0w2STc1dnFPS0s2a3B4WFZyREh3eko4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy83OTA2NDgtZGQ5MC00NGViLTlhOGYtOGZhMDk4NzQxMTNl
LzEvN1hjc0w2STc1dnFPS0s2a3B4WFZyREh3eko4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKP1RFg4C
96xd1O1jZwck0mA04xA57DwdOa6LjlJoddSbxIxNzWU6cnrwqgvxMRnmLjYV/Sf5
8XkBzLarAI8y406nRsl6evKiqRdpLpl0ODS98HlFVlW6PwgU+XQVtZ26dd1Sx7NB
upZcASuInHxrplEvrOs8KhNnYte2d8T8bGj1Ztmub7VUBByx7e8UcJ+2hEUZ6vZn
VdilX8k3zoRxEE4rYNGrStFIixkFyewDHovg1lqqPV3zXS6IFHU2yKOkC5NWSCff
GkFCvtrfZJYs7GpYMi2dVIIuIvUykAxcWRsB7/OKWxShHSHfueFvDZA3Fn6cV1vi
hzDztXOYMX/4EA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:19 2025 by rpki-client