Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
File: 7hsImeOKlrVPxMvNEO9TnFTtTTg.mft (raw, json)
Hash identifier: JeWq3cOi56IwoWARp1p6u68Z7xUC9sRroiQyFo+FvFs=
Subject key identifier: 2B:1F:15:C5:C5:DD:F2:63:5D:2F:8B:2A:03:9B:7E:23:46:49:61:ED
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial: 019654C99B7D1B4A370A217014545C0B3D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 20:00:20 +0000
Manifest this update: Sun 20 Apr 2025 20:00:20 +0000
Manifest next update: Mon 21 Apr 2025 20:00:20 +0000
Files and hashes: 1: 7hsImeOKlrVPxMvNEO9TnFTtTTg.crl (hash: p08pYioLLdOE0+caPKMcMkf5s4wKt2tyYUfRbprJ3ss=)
2: D0b1nmB_L5VEWf6cceZCeBQxCQo.roa (hash: 5aiQU00dPQtZA6c9t9iAvI3R/XjZbywVf6L+3WprENk=)
3: aayTQzRiJq9tAMzk8swFje4kTOA.roa (hash: sZC16XAD3EcE1zhIDvKbW1It71XSPS2OvJcF/8voOKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:9b:7d:1b:4a:37:0a:21:70:14:54:5c:0b:3d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Validity
Not Before: Apr 20 20:00:20 2025 GMT
Not After : Apr 21 20:00:20 2025 GMT
Subject: CN=2b1f15c5c5ddf2635d2f8b2a039b7e23464961ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:e7:22:c0:7d:d8:21:1d:6d:9d:19:8c:78:
bd:72:ed:c0:86:49:78:e7:d3:0d:f8:fb:e3:fb:f9:
a9:a2:ce:ce:2a:51:e9:21:79:50:bd:f0:41:4c:39:
4f:c1:e5:dc:94:c0:da:66:29:26:f7:93:c4:d0:96:
d5:4c:a5:d3:60:c0:9c:09:a8:31:6c:e2:ba:de:10:
84:9c:4f:2e:2c:2b:2b:25:56:1d:33:2c:79:f9:c1:
0d:1e:2d:87:71:42:67:9a:f3:60:52:df:e0:b9:0b:
48:fd:05:d4:26:e8:e7:48:63:3b:3a:ca:23:48:9c:
cf:6c:04:59:25:c8:30:2e:81:c2:6e:f7:5d:1b:94:
f7:c6:cc:30:33:b0:8c:91:e6:23:25:04:6e:ee:86:
fd:de:b4:ae:4c:9d:f6:41:3d:0b:a4:5b:81:8f:8c:
b6:e1:ad:d7:7a:be:dd:2b:33:8f:aa:ab:a3:43:b8:
ce:e9:43:6f:3d:16:40:9d:01:25:4b:18:bd:b6:d5:
de:d1:40:5b:89:91:01:7b:4d:83:b8:5c:0c:14:47:
a8:20:20:b8:12:c6:20:02:12:36:e0:db:3b:c1:28:
03:66:ac:a3:00:50:16:24:22:15:ea:84:6e:a0:e7:
af:68:90:4b:35:2f:a5:9f:ee:7e:e0:d3:10:39:d5:
3e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1F:15:C5:C5:DD:F2:63:5D:2F:8B:2A:03:9B:7E:23:46:49:61:ED
X509v3 Authority Key Identifier:
keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:26:d4:f1:93:c2:41:7b:74:d7:0f:ee:bd:4e:53:f3:32:bd:
a1:29:7f:e7:4d:64:68:17:c1:46:38:64:87:a6:f6:4c:94:7d:
35:49:c7:6c:4a:95:63:52:b4:24:b9:69:6b:fd:07:5d:05:b9:
b6:37:7c:05:87:fe:0e:42:fb:31:8c:d4:a7:6a:74:5c:cd:2d:
bc:02:5b:05:d8:6a:dd:99:91:de:1e:cd:05:33:3a:09:fd:2a:
f1:ba:ba:49:cb:ea:0e:e6:a9:f9:a0:ca:a6:f2:2b:70:27:a1:
2f:bd:63:6c:2f:b6:4d:d1:2d:43:49:f6:5c:37:0a:a6:da:6f:
43:12:69:01:74:69:36:f8:8e:f4:01:46:61:a1:f4:7b:24:69:
7d:69:ff:cc:2b:3e:71:b9:d0:52:22:3e:88:82:34:49:76:12:
2d:c8:b1:e8:7c:41:4b:e4:5f:30:5a:b2:a2:66:e6:91:8b:55:
9f:11:b8:25:02:56:a9:07:06:1d:9b:99:88:d9:89:b7:f6:1c:
f7:a9:33:64:92:fa:2b:bd:41:b9:5f:ec:f8:94:42:3b:31:e5:
2a:8b:02:c2:99:6f:31:ce:9d:e7:9f:49:8c:c0:87:8c:56:5f:
e8:78:ee:d2:f2:d2:08:7f:03:9c:a8:93:b0:4e:be:45:3b:4f:
6e:89:76:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:39:03 2025 by rpki-client