Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
File: j7YgpIOO9uIbzCatNRJi11ZusnU.mft (raw, json)
Hash identifier: 5RzLreQuB7PoXqisqQHyR4WyhjgQhoTMSM87KbJqAoQ=
Subject key identifier: 72:79:D7:BE:16:A1:78:1B:57:33:27:2E:AF:3F:5A:D1:7D:5C:B2:E1
Authority key identifier: 8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
Certificate issuer: /CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Certificate serial: 0196440D5FF7936C8FB61BD32D74935A2094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 14:00:49 +0000
Manifest this update: Thu 17 Apr 2025 14:00:49 +0000
Manifest next update: Fri 18 Apr 2025 14:00:49 +0000
Files and hashes: 1: STLMqI9B0bmg1HnzIFgocG7Jchs.roa (hash: nUpzGifMhuTClZtTuwuW+kY+JzHd2eUa3fEsyXVesAc=)
2: cOhtow46e90nlng9i61VmuKnZMk.roa (hash: 9ntslscCHsPGSEl0s6DMTT/r9BfyLOJ9a2yKRC4G0hw=)
3: j7YgpIOO9uIbzCatNRJi11ZusnU.crl (hash: 7Q2z6xboiSdsXlepUrQ4kitmMMTVC6Dj7EtZJzv4pm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0d:5f:f7:93:6c:8f:b6:1b:d3:2d:74:93:5a:20:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Validity
Not Before: Apr 17 14:00:49 2025 GMT
Not After : Apr 18 14:00:49 2025 GMT
Subject: CN=7279d7be16a1781b5733272eaf3f5ad17d5cb2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:3a:98:cf:d0:e9:e4:94:2d:89:53:b5:4c:
14:46:e7:81:c8:01:33:34:20:92:60:3a:c8:71:1b:
2c:6a:b9:7e:71:74:65:b3:b6:8c:e2:73:47:2c:79:
e4:ad:3e:e2:7c:8f:ef:e2:38:b2:55:8a:ce:b4:5b:
01:74:31:71:7b:fa:dc:8b:c0:55:54:b4:aa:3d:bc:
2d:35:2a:99:8b:a6:97:f3:fc:06:bc:d7:ed:58:ba:
cb:1d:8d:ae:b3:39:3b:44:50:84:34:2a:d0:14:a2:
9e:42:e3:1c:2a:f0:4b:0b:a2:a9:ab:ac:54:ad:d0:
ac:12:2f:d2:83:28:f3:fe:fc:dd:6c:3c:a0:7a:be:
d3:0a:dd:d3:7b:cf:84:18:06:3a:93:fb:70:ba:d6:
0e:0b:cf:ad:36:3b:56:d3:81:9b:3b:97:d6:b3:73:
8a:a3:4a:19:59:98:c7:eb:10:48:88:dd:72:57:87:
13:f9:a6:50:3c:ac:a8:56:73:70:2e:d4:2a:be:94:
a5:21:d7:66:67:d6:80:3d:c4:40:aa:7f:7f:8d:4c:
48:6e:6f:c5:08:6c:9b:37:67:a6:f4:e3:ef:2e:69:
b2:25:30:3f:12:16:ee:bf:5d:1b:db:f5:f7:7d:06:
d9:0f:ba:13:8b:77:a5:c7:71:ba:f4:d4:11:c6:6e:
b8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:79:D7:BE:16:A1:78:1B:57:33:27:2E:AF:3F:5A:D1:7D:5C:B2:E1
X509v3 Authority Key Identifier:
keyid:8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b5:d1:02:39:19:33:8f:c3:f7:27:79:ba:1f:91:71:b6:4d:
d2:7a:99:c9:45:51:f0:4d:6b:e3:f9:7f:94:65:6b:4c:b4:8a:
51:49:20:6a:f9:fd:cb:75:65:1a:ee:36:40:e3:99:42:fc:07:
89:30:a7:3a:b3:e7:d4:4c:4b:40:fc:09:fc:55:5e:cc:8f:6f:
09:02:7e:1d:b3:29:a9:60:15:48:a9:ee:a5:92:ef:05:66:91:
c3:81:b8:f9:93:01:67:8e:92:ac:e7:26:7f:ac:de:e4:18:cc:
70:6a:81:ad:8d:a8:9f:ea:bd:79:b7:9b:03:0a:25:39:ec:91:
e2:2e:b5:f6:09:25:c8:13:c9:dc:15:19:d1:c4:f0:7e:0c:ce:
80:e6:4c:85:c4:22:3e:9e:70:cd:00:b5:bd:9f:3c:67:46:2d:
f7:91:18:4a:59:8c:18:19:a3:82:4b:55:47:66:fc:31:02:0d:
60:15:56:7e:82:53:5b:1e:ef:65:86:5a:3a:58:a6:3e:d3:77:
cb:bd:be:57:87:6c:e1:8b:b6:40:b2:0f:71:5f:db:9e:4d:33:
e1:21:d8:bb:ea:37:b3:c7:0c:ca:00:a4:e1:0c:90:b5:d6:08:
45:97:58:97:79:ed:36:ef:0a:8b:a6:6d:45:b4:8a:e1:da:ac:
cf:3f:c3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:41:27 2025 by rpki-client