Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
File: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft (raw, json)
Hash identifier: FOCOFcSPHVrhPA1ClfwHwcQVPwgeXVPDDeMURWkbvfc=
Subject key identifier: C4:60:6B:F1:32:43:A7:CB:86:CA:C1:40:B4:2C:1E:68:0D:97:03:D2
Authority key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
Certificate issuer: /CN=ee82395001b03c663509909979dfb78445b3d9c4
Certificate serial: 01965E03A8E37E518D667A277218D765F3B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
Manifest number: 1504
Signing time: Tue 22 Apr 2025 15:00:20 +0000
Manifest this update: Tue 22 Apr 2025 15:00:20 +0000
Manifest next update: Wed 23 Apr 2025 15:00:20 +0000
Files and hashes: 1: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl (hash: Ky8anl0yXXiS6ksQM0lLhvm3rRdnfq13iOhEdfCyHUU=)
2: ucKWTlPN-FuM9B9rpIaHmjJB0uU.roa (hash: NuV8RJZOUsktn6zLXnq7yOANvHrLINcgvHUFAyEOS84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:03:a8:e3:7e:51:8d:66:7a:27:72:18:d7:65:f3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee82395001b03c663509909979dfb78445b3d9c4
Validity
Not Before: Apr 22 15:00:20 2025 GMT
Not After : Apr 23 15:00:20 2025 GMT
Subject: CN=c4606bf13243a7cb86cac140b42c1e680d9703d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:c8:0a:34:8c:b7:bc:b5:80:27:6c:f8:a3:
92:60:de:86:7f:a7:60:79:41:5a:b2:1f:fe:7d:19:
a3:98:9f:09:4b:8a:3e:96:1b:4a:d4:2b:80:3d:b6:
cd:ca:b5:1f:2b:5c:cc:ca:d6:43:df:c0:6f:08:6e:
94:18:32:51:77:c6:97:9d:da:0e:eb:1f:41:2d:2f:
8c:59:92:28:96:62:85:89:25:a8:1e:3f:b0:99:19:
d3:5a:cc:a5:3a:a6:aa:ed:0e:34:85:ab:79:bf:66:
7d:51:c9:67:e8:a0:24:ac:cf:6f:0f:58:12:3e:7b:
be:4c:ae:09:ab:69:89:8c:a8:2c:3f:f5:18:b4:bf:
89:0e:68:d1:f9:c7:f4:80:63:fc:a9:d8:11:30:ee:
4c:38:d8:25:ed:89:5e:df:cb:98:e9:19:3c:12:c4:
06:49:c0:70:fe:1d:94:83:52:4d:8d:cb:ba:b8:ce:
f8:72:6c:5c:5e:65:74:b0:06:5e:8e:82:dd:19:b5:
5e:51:11:2e:17:6b:cc:55:02:91:88:18:8a:98:9d:
25:29:94:32:18:44:d7:d0:b9:f0:d0:98:00:7a:f7:
eb:0e:2f:b4:5d:2b:93:b8:99:66:33:86:52:cb:cd:
9b:01:aa:8f:34:d4:37:ef:80:67:55:ef:ac:79:ab:
33:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:60:6B:F1:32:43:A7:CB:86:CA:C1:40:B4:2C:1E:68:0D:97:03:D2
X509v3 Authority Key Identifier:
keyid:EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:05:e2:4c:4f:78:01:5b:f8:d6:8c:2b:5f:0c:fc:68:55:8e:
ff:01:93:2b:71:1e:94:bb:83:79:d3:5b:72:7d:da:3f:5a:e0:
e1:5b:5f:55:b5:83:47:86:92:df:b1:3f:71:8f:2e:08:df:bb:
af:14:72:ae:fc:74:49:14:60:69:9a:c9:2c:a5:65:5c:19:ac:
16:1e:d3:0e:df:cb:c8:89:2a:83:f3:8e:94:3e:ae:f7:ac:fc:
3f:31:1a:fa:9b:5e:e1:c4:78:69:b5:56:7e:a8:cc:b9:d0:d8:
b8:28:94:62:14:7d:e5:71:ce:8a:a1:84:4c:19:7c:8d:42:c1:
8b:88:8a:43:a4:d0:2d:ab:37:15:5c:a1:47:bc:fb:18:81:e8:
56:1b:c0:f3:70:7b:d4:f2:97:93:1e:c9:c2:6b:f7:98:90:59:
54:0f:9a:cd:b5:5f:b8:54:68:e0:8c:38:47:f9:6e:9f:83:bb:
21:e9:98:a7:a4:dc:57:ec:06:0e:bb:88:7f:3d:70:ec:af:9d:
e8:20:0b:50:97:c3:5f:bb:fe:ad:92:ba:21:dc:48:2f:6f:6f:
38:cc:cd:90:6d:09:ef:fb:a9:5e:a7:04:fb:2e:57:58:37:bd:
24:61:06:62:5a:56:0d:d4:ed:9e:26:15:39:5d:0c:7d:52:7c:
09:10:98:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:15:59 2025 by rpki-client