Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
File: fruIjyuZ3ply4kRuugWKuOLNez8.mft (raw, json)
Hash identifier: NDdEXQav/F2ovJ/bMdQFcCTSBN/Vrynv6h+DG5DJ+v8=
Subject key identifier: 6B:AB:ED:67:4D:01:DC:A4:E8:5A:62:5F:0A:6D:0C:8F:94:56:5C:29
Authority key identifier: 7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
Certificate issuer: /CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Certificate serial: 01965838ED18AAC7648FE386154B3A34C45E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
Manifest number: 1507
Signing time: Mon 21 Apr 2025 12:00:47 +0000
Manifest this update: Mon 21 Apr 2025 12:00:47 +0000
Manifest next update: Tue 22 Apr 2025 12:00:47 +0000
Files and hashes: 1: JN5O0QCPrYg2gGsd5bY4WvuMm88.roa (hash: Fx9qqqMuryeKb6+Rb+Dr8zIFkW7rIV44uKPsq4V2Qsk=)
2: bAMnl2_6RRTmNV4zQKgmKBPIhlw.roa (hash: V9YqmjnltEXUALOTq/OVrSw9uYwMaY1gDtJwBPznHa8=)
3: fruIjyuZ3ply4kRuugWKuOLNez8.crl (hash: WcMryEb1thzmnVBWvwx7LdnZoIpHAQLqCmlvdlzGQUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:ed:18:aa:c7:64:8f:e3:86:15:4b:3a:34:c4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Validity
Not Before: Apr 21 12:00:47 2025 GMT
Not After : Apr 22 12:00:47 2025 GMT
Subject: CN=6babed674d01dca4e85a625f0a6d0c8f94565c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:e4:33:ea:d8:6a:6c:69:36:e3:19:a7:20:
eb:6f:82:21:ca:90:3d:c8:2f:30:e2:9b:c0:f7:6e:
6c:dd:00:07:86:1e:bd:a7:02:0e:65:85:66:6a:b5:
f3:e0:9d:2e:0c:03:ab:d1:60:20:23:57:63:7f:d4:
8d:73:c5:1e:4c:14:00:61:23:7e:0c:c7:37:a7:d8:
cc:66:7a:0b:2f:d1:01:eb:3f:b8:7d:a6:0a:0b:d6:
d0:a0:d2:92:bc:7c:8e:d5:2e:df:b8:09:13:61:75:
83:32:1f:00:4e:05:64:da:01:8b:00:a0:da:b1:41:
63:ce:4c:44:17:2b:c5:15:84:55:56:23:97:55:80:
16:80:27:77:94:11:ef:e3:5a:8c:b6:19:52:4a:6b:
41:da:a7:f3:a9:47:a0:48:71:41:36:e8:7b:5c:20:
e3:0e:dc:2b:5c:21:eb:de:8b:d6:28:10:81:32:43:
65:63:89:2f:39:26:66:7b:a5:fb:bf:05:95:aa:77:
16:72:b0:8e:84:91:ad:e6:72:22:bf:d0:7a:ef:45:
03:26:92:f2:f7:43:4f:14:cc:56:7f:1b:ec:25:2c:
6a:07:41:6c:9b:f7:e3:2b:11:3a:92:84:5e:ef:a5:
0a:e7:8e:af:d8:a0:7e:19:37:3d:6a:d8:17:24:90:
eb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AB:ED:67:4D:01:DC:A4:E8:5A:62:5F:0A:6D:0C:8F:94:56:5C:29
X509v3 Authority Key Identifier:
keyid:7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d6:eb:60:8a:2e:1e:60:4d:15:7c:02:97:5c:9c:13:db:4a:
88:c0:53:ca:93:96:a0:d4:0d:87:c2:cc:1d:40:53:00:55:96:
5f:fe:e3:0d:bb:c0:86:77:0f:6a:22:90:df:f9:f2:08:f9:e6:
2f:e3:e8:c8:54:7d:73:a9:6b:c6:92:0d:37:9e:37:0b:b1:a7:
98:fa:ac:5f:c3:97:7f:42:32:da:6a:c7:15:b8:31:84:80:48:
da:28:9d:d9:40:36:01:9f:f8:d2:8e:1b:5a:4f:26:9e:5a:5e:
71:a8:7b:7f:48:2d:35:e8:37:98:10:bf:be:89:da:55:52:dc:
51:63:5e:c6:7c:65:ad:e2:4c:23:11:c2:36:f0:82:b8:16:a9:
24:e3:1e:9e:76:50:c4:7c:9e:7b:11:3a:97:59:6d:f1:c4:68:
58:3a:3c:1d:a0:07:00:2e:9d:13:f9:a4:b9:df:3a:d8:8c:ba:
25:5c:9e:0f:4b:b9:43:c7:0f:13:33:6d:ed:4f:96:44:17:31:
e0:05:09:82:27:35:b0:68:a6:f0:bf:ae:12:d8:be:0d:1f:09:
d6:34:78:6f:02:9d:f8:92:4a:64:74:cd:d2:4f:86:7e:40:9a:
f0:77:75:7b:a4:4a:db:2a:4f:73:de:bd:74:56:2c:f1:74:cd:
72:03:85:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:52 2025 by rpki-client