Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
File: 735cdfZIrGkrFLwiLiwYDIY7ReI.mft (raw, json)
Hash identifier: s1U282jb+IAt7jx065waOqJtW5JpYoLKtroE3fklVkg=
Subject key identifier: 6F:23:A1:0A:9A:7F:7F:CE:A3:B1:46:EA:24:B7:2A:F8:9E:DA:25:D2
Authority key identifier: EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
Certificate issuer: /CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Certificate serial: 0195903D91E87B71989914F64F90854F20A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
Manifest number: 0136
Signing time: Thu 13 Mar 2025 16:01:48 +0000
Manifest this update: Thu 13 Mar 2025 16:01:48 +0000
Manifest next update: Fri 14 Mar 2025 16:01:48 +0000
Files and hashes: 1: 735cdfZIrGkrFLwiLiwYDIY7ReI.crl (hash: gRM4HTyFyOTRprI8dUofH+NhvhAPM6jZP281DRRaV0w=)
2: YvnoPFlwVSBiKu9iqRFpzb0xlh4.roa (hash: FIC2N81bANGcoREXZdDhNQ3XBvgX/G7WyyZfKBc7yTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:91:e8:7b:71:98:99:14:f6:4f:90:85:4f:20:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Validity
Not Before: Mar 13 16:01:48 2025 GMT
Not After : Mar 14 16:01:48 2025 GMT
Subject: CN=6f23a10a9a7f7fcea3b146ea24b72af89eda25d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:f8:bd:f0:df:67:24:c7:ea:ce:5b:25:6a:
e5:43:db:06:c3:39:b4:19:0c:06:62:32:e6:49:2f:
23:50:d9:52:a8:99:70:19:c2:3a:5c:10:a8:4b:47:
f4:11:29:40:5c:24:8a:0e:6d:d0:e6:95:d3:9e:a7:
8a:59:db:b6:6c:1f:b3:8e:92:cf:f0:8f:a4:be:1e:
f8:94:2d:24:2e:37:60:2c:1a:02:4b:c3:5f:3a:ac:
a0:de:0b:1f:bf:60:89:a4:14:b4:31:7c:8a:89:1a:
5f:55:c8:2d:4d:4a:9b:bb:94:dc:e2:75:ea:8d:1c:
70:36:d1:c6:d3:d5:ae:b4:4a:7b:48:a1:03:63:e8:
21:04:1f:6d:03:6e:dc:30:42:22:a9:6c:59:ed:6d:
33:24:c1:3c:ba:86:d9:b7:8a:1b:17:2a:23:a9:e6:
3c:51:65:08:51:3b:bf:40:2b:ca:ca:dd:a2:f9:e3:
01:f3:4e:0f:8d:06:fb:fe:9d:d4:35:f8:8a:be:54:
07:41:d9:e7:c0:37:4f:f8:8d:81:88:c8:3b:dc:86:
da:08:96:88:a4:f6:42:da:71:6c:56:d0:d2:cf:a0:
db:fb:54:4f:15:1b:7b:19:2a:49:59:9e:33:ea:48:
fb:79:a1:ca:c3:53:bb:cc:59:9c:23:02:85:e1:50:
86:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:23:A1:0A:9A:7F:7F:CE:A3:B1:46:EA:24:B7:2A:F8:9E:DA:25:D2
X509v3 Authority Key Identifier:
keyid:EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c0:c1:0a:9e:75:3d:67:97:dc:e0:27:b8:e7:81:b6:0a:8c:
98:1b:e5:68:d8:62:60:fa:16:31:2a:02:75:23:0d:ff:87:dd:
9b:d6:9e:80:5e:77:e2:63:b6:45:db:b5:6d:38:67:68:fc:ad:
19:b1:6b:60:21:74:6d:96:e8:46:5e:9b:06:d5:f3:f3:5e:af:
d1:d8:1e:87:4a:c4:8f:f5:7c:47:f8:8b:b2:e3:fe:71:7a:de:
67:0a:1b:e8:53:b4:82:38:cf:31:a9:2d:17:0f:3e:5d:cc:4d:
a4:7d:55:ff:9a:76:d3:ec:9f:91:87:b2:b3:fe:e4:bf:7e:72:
02:4d:93:70:cd:21:dc:6c:45:6f:7b:fd:d1:01:00:44:97:a3:
ce:e4:74:83:41:ac:21:78:42:02:92:33:e6:51:ba:90:63:61:
35:a6:b5:3b:fc:74:8b:92:1e:91:42:21:74:25:cb:2a:39:f0:
fe:dc:85:8f:9f:b8:3f:77:1d:52:45:1a:a6:18:42:09:f2:73:
17:ac:34:97:c2:64:3a:ef:e8:a3:99:00:71:81:e3:7d:9a:2d:
f4:e7:fd:4c:be:ee:6e:73:b1:ce:5a:87:bb:e3:df:85:8d:9a:
74:3c:b2:98:42:3c:da:bf:b3:bf:e2:6a:1e:ae:9b:fa:89:1d:
bd:ea:cd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:28:44 2025 by rpki-client