Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
File: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft (raw, json)
Hash identifier: momaivVxhTNFCdA6Uk2eRphUQGeXOEt3+0zQS9wKA2g=
Subject key identifier: C8:23:11:E4:4F:B9:9D:64:8C:02:34:68:31:CA:66:1A:19:1D:86:2D
Authority key identifier: EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25
Certificate issuer: /CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
Certificate serial: 0196594B9E5A02F1997ED9B6178AF3902E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
Manifest number: 0889
Signing time: Mon 21 Apr 2025 17:00:50 +0000
Manifest this update: Mon 21 Apr 2025 17:00:50 +0000
Manifest next update: Tue 22 Apr 2025 17:00:50 +0000
Files and hashes: 1: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl (hash: Ld8TLqF+NMQtUPHwUqhD2ZAM0m2VcxR6MxeZo77Xw1w=)
2: e64v2Sa7kZCTmVuIe0U1EA1y5UE.roa (hash: 4+uTyAtFS8DAUClwiFHwirOIVJLgQjU/10EzULT806g=)
3: hiAVbhcO1TwVpozBkcEWuw9CQcA.roa (hash: cM6xE/ZqL2V37JUXZnVYtBWEG50dOsPtinGWqXaIJmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:9e:5a:02:f1:99:7e:d9:b6:17:8a:f3:90:2e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
Validity
Not Before: Apr 21 17:00:50 2025 GMT
Not After : Apr 22 17:00:50 2025 GMT
Subject: CN=c82311e44fb99d648c02346831ca661a191d862d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:d5:a1:78:d7:f2:23:9e:21:ec:6a:3a:96:
05:fe:cc:4c:8b:c6:42:89:88:46:6e:b2:c7:be:0a:
13:20:89:68:c9:77:47:76:fe:99:95:3e:30:5b:1e:
72:bc:c5:9f:d2:74:6b:27:af:b2:9f:fe:32:de:7c:
4a:d3:92:c2:be:51:34:96:3f:ea:ee:06:91:3a:85:
85:92:1b:24:85:a5:cb:66:ff:b5:1f:dd:67:bd:1b:
72:da:10:08:e3:9d:20:aa:88:4d:09:49:27:89:fe:
ac:90:38:42:0b:7a:4a:9c:be:4d:d7:47:c4:9a:1b:
04:f2:c5:7f:84:ba:0d:b3:31:5d:82:72:43:80:b2:
12:bd:ef:85:02:54:10:78:66:75:6b:87:47:93:fb:
1a:5a:d1:5f:35:8e:f2:b6:f2:0e:c3:ac:a5:94:d5:
b3:ce:b5:ad:b0:22:ee:12:f2:41:2e:85:50:73:9f:
51:5a:85:db:17:f8:69:a7:06:65:a9:e9:26:0e:6d:
d3:26:6b:35:dd:2e:5c:ab:0f:ff:53:e3:ef:f2:57:
4b:7a:04:97:6a:d3:36:f2:bc:b4:e3:f9:68:b8:22:
4a:35:1c:03:7a:9b:2c:58:a7:c8:2d:56:e7:56:40:
46:97:5f:64:4c:d6:b0:25:a3:3a:5f:79:02:60:5e:
d1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:23:11:E4:4F:B9:9D:64:8C:02:34:68:31:CA:66:1A:19:1D:86:2D
X509v3 Authority Key Identifier:
keyid:EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5e:5f:49:f4:2f:ad:d2:2b:bb:df:8b:35:64:c6:4d:47:97:
f4:24:ee:04:1f:1c:29:06:c8:6e:54:86:2d:e5:bd:6d:16:9a:
64:3c:da:9a:04:0a:04:f3:73:b9:9f:5e:c9:fd:ff:6c:2d:fb:
3c:eb:08:9f:c2:f4:5b:79:37:07:50:80:3b:5f:b3:97:0a:ec:
0b:c2:11:2d:1b:7b:f1:1f:16:1c:f9:5f:4e:90:49:eb:4d:8d:
30:29:11:d6:c3:1f:6f:ac:90:31:f4:8b:c0:5b:69:0a:14:f6:
ae:69:69:84:c7:e4:89:ef:23:b3:f2:91:75:da:5b:87:7d:31:
3d:df:24:c9:3d:21:41:19:1c:22:43:70:a4:38:26:f0:be:b9:
5b:ec:73:0c:fe:c7:5e:3c:f3:96:6c:83:83:ab:af:4e:27:e3:
af:9c:30:45:d3:43:18:47:2c:54:c2:d4:dc:e8:47:92:6f:f6:
7a:6a:c3:bb:5d:fa:09:81:ae:6d:15:0e:29:3e:76:2a:0e:95:
53:83:4e:a6:f0:41:19:3d:c5:ed:e7:95:04:a8:ce:29:58:50:
98:38:25:f7:f3:ef:f7:c1:1a:ab:49:86:b8:d0:7c:a4:17:d8:
4d:05:ee:00:3a:c8:33:24:09:6c:b9:36:8c:1d:fc:a2:c3:9a:
39:f5:71:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:15 2025 by rpki-client