Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
File: j7YgpIOO9uIbzCatNRJi11ZusnU.mft (raw, json)
Hash identifier: t0cvnzarLfpByRG/ZDDyX8sHarqNR/1YNIn2+UT4gjI=
Subject key identifier: DF:0D:8D:29:4C:4A:B7:8B:3F:5C:2E:48:1F:43:94:48:F8:E2:DF:1F
Authority key identifier: 8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
Certificate issuer: /CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Certificate serial: 01959073F55B48FA0FE6B566FB3EF1D7AE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
Manifest number: 1499
Signing time: Thu 13 Mar 2025 17:01:13 +0000
Manifest this update: Thu 13 Mar 2025 17:01:13 +0000
Manifest next update: Fri 14 Mar 2025 17:01:13 +0000
Files and hashes: 1: STLMqI9B0bmg1HnzIFgocG7Jchs.roa (hash: nUpzGifMhuTClZtTuwuW+kY+JzHd2eUa3fEsyXVesAc=)
2: cOhtow46e90nlng9i61VmuKnZMk.roa (hash: 9ntslscCHsPGSEl0s6DMTT/r9BfyLOJ9a2yKRC4G0hw=)
3: j7YgpIOO9uIbzCatNRJi11ZusnU.crl (hash: Lx+0RMnTTiB/k33FIX6wGg5DDJgHtuNTuQIxD4F/TQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:73:f5:5b:48:fa:0f:e6:b5:66:fb:3e:f1:d7:ae:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Validity
Not Before: Mar 13 17:01:13 2025 GMT
Not After : Mar 14 17:01:13 2025 GMT
Subject: CN=df0d8d294c4ab78b3f5c2e481f439448f8e2df1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:e2:1d:8b:2c:56:68:fe:c5:dd:a1:cd:fd:
f4:8c:6c:c6:ac:ec:45:ee:bf:8e:3f:9a:7f:28:64:
9b:55:23:29:2e:64:3c:bb:7f:2b:d5:ab:94:81:74:
c2:e5:3c:a6:c6:58:48:6f:1e:de:3c:c7:bd:f3:9d:
a5:3f:fe:31:cf:50:4d:18:8e:9c:3b:4c:d8:97:1b:
2b:53:6d:b1:cf:7f:9f:13:ea:8d:b9:9a:a4:4a:8f:
fc:62:87:09:ae:65:3a:16:2e:6e:30:d1:3e:ba:23:
2b:30:3e:fc:aa:8e:06:03:ee:4f:f3:01:8f:b5:93:
07:c4:27:8e:7c:27:ea:d3:5d:87:8c:fa:0a:da:83:
95:b6:4a:77:34:8b:e9:a5:c3:ae:6e:96:4a:92:e4:
fd:dc:1b:71:b2:63:d3:60:64:ee:3b:ea:eb:e8:dc:
fc:08:14:3c:28:1f:52:9d:c7:1b:9c:31:49:3e:00:
75:9c:f2:39:00:c9:6a:67:1f:bc:6c:2a:5e:5e:20:
0b:6f:72:ba:4e:96:57:fb:a0:0f:f7:39:33:a1:bf:
3e:c9:cb:f1:fc:e4:2b:4a:b5:ce:38:ee:88:da:29:
3d:f2:27:5d:dc:1d:ae:07:78:0a:e6:c1:ce:ea:b9:
2a:b1:f2:2e:c2:2f:3e:c5:df:95:fd:ac:1c:e6:cc:
7a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0D:8D:29:4C:4A:B7:8B:3F:5C:2E:48:1F:43:94:48:F8:E2:DF:1F
X509v3 Authority Key Identifier:
keyid:8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f0:cd:7b:f4:dd:0e:5a:c2:5b:45:f3:eb:3a:27:87:98:15:
71:a0:2b:80:56:99:b8:74:ff:56:a1:da:e2:ae:ea:3e:88:db:
c8:70:33:44:14:7f:92:0a:08:a3:f6:28:db:0d:20:fb:83:a7:
28:f8:2b:1b:8c:c9:0d:53:b8:dd:0d:88:15:c5:b5:34:72:bf:
73:e7:18:af:99:c0:40:84:0b:93:bd:b7:ae:9a:ff:a0:32:f6:
8f:ca:7d:b8:38:26:ba:a1:88:43:63:bd:e6:1e:a0:c7:e2:72:
55:88:55:e1:df:95:14:31:2c:43:34:88:e0:44:d9:24:3f:3a:
5e:73:f8:4b:3b:51:68:a3:46:e6:3e:ad:be:86:fe:49:40:bf:
d0:da:36:b0:cd:47:68:b9:3e:67:73:58:19:cf:bd:93:60:bf:
75:86:dd:50:fa:e8:18:a7:73:98:00:b5:3d:21:e6:79:8a:49:
03:65:47:5a:71:35:21:08:b3:91:b4:81:ff:ab:e4:0c:16:c4:
aa:4d:48:32:cd:e6:e1:34:4b:4b:8f:5a:78:2a:90:69:aa:15:
c4:0c:68:07:85:74:e7:3a:e9:cb:a4:d7:c2:69:65:ee:86:b8:
f5:b9:00:6e:43:13:32:46:02:ed:5e:6e:aa:fa:85:d4:06:aa:
de:80:db:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:22 2025 by rpki-client