Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
File: 7hsImeOKlrVPxMvNEO9TnFTtTTg.mft (raw, json)
Hash identifier: l9+L3w+biudMtNLn/0WCbJdJAz6kd1EVcpz6LnAXycs=
Subject key identifier: C4:9A:FB:26:00:E2:7C:71:BB:33:88:3A:41:6E:56:49:AE:8C:E2:CF
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial: 01958FCF138B4A8CFEEB2FEA880958D600B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
Manifest number: 149A
Signing time: Thu 13 Mar 2025 14:01:07 +0000
Manifest this update: Thu 13 Mar 2025 14:01:07 +0000
Manifest next update: Fri 14 Mar 2025 14:01:07 +0000
Files and hashes: 1: 7hsImeOKlrVPxMvNEO9TnFTtTTg.crl (hash: MzlJwBFCScvazCUF3UD+QXy5bCkJ5bt/kk915Z1FOv8=)
2: D0b1nmB_L5VEWf6cceZCeBQxCQo.roa (hash: 5aiQU00dPQtZA6c9t9iAvI3R/XjZbywVf6L+3WprENk=)
3: aayTQzRiJq9tAMzk8swFje4kTOA.roa (hash: sZC16XAD3EcE1zhIDvKbW1It71XSPS2OvJcF/8voOKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:cf:13:8b:4a:8c:fe:eb:2f:ea:88:09:58:d6:00:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Validity
Not Before: Mar 13 14:01:07 2025 GMT
Not After : Mar 14 14:01:07 2025 GMT
Subject: CN=c49afb2600e27c71bb33883a416e5649ae8ce2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:e8:fd:e3:53:09:d5:b8:4a:96:cb:45:45:
bf:f1:3c:0e:24:e5:23:4a:8a:21:00:73:f2:9f:69:
0c:fd:01:30:d6:44:51:8d:c7:57:a1:f5:bf:c0:bb:
e4:1f:27:ff:b5:9e:84:18:55:7b:f1:b2:af:58:59:
68:9e:90:80:a0:8a:eb:02:84:44:7c:f2:ef:22:9e:
dc:1f:5f:46:f7:a4:14:8c:96:0e:1c:93:dc:85:10:
87:d7:10:3f:4e:0f:e6:96:af:e1:36:6b:86:b7:89:
25:6c:2b:46:90:bb:86:ea:e9:08:ad:7f:78:6d:eb:
7d:23:a6:de:7a:bc:ca:63:78:69:61:5d:41:98:2a:
99:86:a7:13:5f:5e:a0:f3:f8:3a:d0:2c:f9:7d:99:
f3:eb:93:80:5e:ff:4f:ad:a7:55:52:c5:6b:a8:7f:
0f:f9:a6:92:a3:28:50:d0:1f:50:2e:b8:ce:50:1a:
4f:8d:94:34:d1:e2:5a:e9:38:d6:8b:64:35:4d:a2:
62:4e:a7:a3:0c:3d:cc:13:0f:79:4c:ee:48:85:72:
95:30:34:c1:46:9a:67:ca:bf:65:36:64:13:1f:1f:
96:c5:98:37:7a:4e:ce:2a:2a:af:9b:91:9a:1e:f3:
b1:50:f9:90:95:2b:d4:79:48:2a:50:54:f4:2e:e1:
eb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9A:FB:26:00:E2:7C:71:BB:33:88:3A:41:6E:56:49:AE:8C:E2:CF
X509v3 Authority Key Identifier:
keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ad:ae:d2:f0:17:d1:07:3f:73:c1:06:ff:c6:b4:12:a0:1b:
1f:da:21:3a:e2:42:f2:94:26:19:3a:78:7a:c6:3f:4f:01:94:
d2:ae:4a:63:ac:b6:f8:df:c6:a8:80:9c:f8:65:5a:4e:2c:f7:
e7:84:73:57:e2:fc:e1:6c:7b:62:06:39:1a:de:2e:cf:86:d4:
a8:ca:94:e3:da:36:ec:1e:d9:d6:a8:53:4b:f3:c3:26:a4:ac:
6f:52:62:ab:e7:cb:ff:66:84:12:43:24:52:f8:26:f9:24:af:
11:92:c5:d6:67:63:7e:54:1b:95:8f:01:ad:df:b8:62:3d:42:
be:70:0a:4d:10:53:e5:11:18:eb:08:63:d2:ff:01:0b:74:b9:
51:c3:ee:d0:48:15:ae:73:9e:17:d9:03:7c:1b:87:2f:91:49:
0a:4b:da:c5:a3:8f:7e:3f:2a:8f:b0:ac:bc:54:73:69:f5:80:
14:1c:ad:18:68:08:18:6b:79:54:f4:d8:0c:62:95:ca:6d:82:
5e:c0:38:c7:0c:5f:0e:ec:5e:19:00:12:81:b6:5c:d1:42:e7:
de:63:2d:5b:dc:5e:ae:45:3b:8f:83:c2:99:0f:7a:d8:d2:54:
a1:97:3d:96:81:7f:50:51:d6:ea:e1:19:85:67:27:0b:69:7b:
02:1e:32:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:44 2025 by rpki-client