Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
File: DS7-O2P6myp5MsW17IVLcMPxiDk.mft (raw, json)
Hash identifier: RjNv+vnZYTI4BwVrmYJD+MBoxh4DWHz88vwCwDIP5cI=
Subject key identifier: 3F:FC:6F:AD:8C:28:8E:B5:39:76:80:EE:9C:0F:E1:0A:02:F3:EA:8E
Authority key identifier: 0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
Certificate issuer: /CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Certificate serial: 01964E22F9980B217970F48593DA05ACD5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
Manifest number: 03E8
Signing time: Sat 19 Apr 2025 13:00:37 +0000
Manifest this update: Sat 19 Apr 2025 13:00:37 +0000
Manifest next update: Sun 20 Apr 2025 13:00:37 +0000
Files and hashes: 1: DS7-O2P6myp5MsW17IVLcMPxiDk.crl (hash: IfVTiW/AC95ep9+H1pZj1eXu4HrUVbQIgdEAeZ94zbk=)
2: Q_EK-erWHPnTXBrHVmcWbytpcis.roa (hash: mtRhYkTuoZWGkXxI5IGoHrOZ3J63Idzep2wBOshAzrk=)
3: rjoKSFT64wx9I01-lQ0W0ynohgU.roa (hash: kjj+Ef2J/by9CyPkpbVAwiAkNqP+TYAiZ/aCdSXrkAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:22:f9:98:0b:21:79:70:f4:85:93:da:05:ac:d5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Validity
Not Before: Apr 19 13:00:37 2025 GMT
Not After : Apr 20 13:00:37 2025 GMT
Subject: CN=3ffc6fad8c288eb5397680ee9c0fe10a02f3ea8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:08:4b:5b:6d:ff:d4:2a:55:2d:bd:5f:12:
63:3a:2e:41:e5:84:36:bc:6b:29:93:ad:ab:09:b0:
fb:e6:37:02:cd:44:dc:ab:87:28:36:b6:73:bc:e7:
97:19:f8:24:ec:65:c4:b2:1e:77:4a:cf:14:9b:10:
5b:2f:ac:a2:14:c1:2b:19:f8:6d:c8:40:ff:7f:bb:
82:f5:80:80:b2:cb:97:4f:54:7e:4f:45:b3:a3:69:
dc:69:1f:fc:45:8b:8a:b1:3d:e3:6e:0d:ab:4f:0d:
75:88:96:e4:bb:54:a1:29:ab:75:89:df:32:c8:28:
f9:a5:7c:f0:35:2c:ee:52:5e:fd:3a:da:83:3e:b1:
08:5d:f7:53:80:c7:08:46:db:09:3a:ce:1f:92:ae:
60:b5:b8:7e:c6:3c:80:eb:64:02:2b:04:47:11:f6:
86:ab:8e:c4:29:14:86:30:35:9f:48:45:e6:5e:d9:
09:b2:20:b0:6a:dc:53:9d:4f:3c:12:10:30:9c:b6:
dd:fe:53:4e:91:12:47:ff:ae:14:7f:63:06:81:c1:
4b:f6:55:67:7b:f3:2b:82:ec:d4:d2:a9:50:cd:01:
a5:3c:67:b0:04:65:27:6b:db:25:3b:6d:13:ac:84:
a4:8c:6c:d4:ba:46:d9:0b:9b:0a:63:51:08:53:72:
44:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FC:6F:AD:8C:28:8E:B5:39:76:80:EE:9C:0F:E1:0A:02:F3:EA:8E
X509v3 Authority Key Identifier:
keyid:0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6f:89:f6:26:ea:6e:a5:3f:dd:97:a1:45:47:3f:9a:14:25:
24:05:cd:76:40:4b:7d:6e:c6:1f:d6:f6:54:c6:90:04:67:8e:
16:a5:99:79:54:6f:f2:62:2c:a0:89:26:b9:89:5e:49:f6:e7:
1e:3f:85:c0:ff:27:14:3c:2e:18:83:2e:b3:d2:a8:1f:22:86:
15:89:34:4a:d8:ec:7c:42:42:f4:f0:b1:4f:d4:26:a7:e5:bc:
c1:7c:24:e6:2d:0b:7b:23:24:4e:9e:be:1d:22:bb:12:08:d8:
1f:65:d8:ba:76:60:03:b9:d2:2c:1b:8e:d3:b3:7c:87:22:85:
fc:61:91:40:53:ff:55:a4:ee:12:98:39:a7:0a:e4:5c:1e:f5:
52:c4:b7:c0:bc:3c:04:df:bc:c4:4b:3f:f3:b2:62:c0:d1:f1:
9d:ec:18:54:67:78:7b:97:12:f0:f1:59:bc:35:4c:3f:a4:e7:
d9:03:f0:ea:5b:34:9e:9b:96:c7:c6:7b:79:79:cc:bc:eb:42:
34:0a:85:26:41:7f:98:fa:a6:15:b9:8d:5a:92:ed:5d:ce:3f:
4b:5d:2f:42:6f:af:78:ff:05:24:6a:0b:53:ad:55:22:9b:3e:
da:14:35:fd:38:d0:e9:aa:4f:ea:21:c1:f9:d0:0c:da:17:cc:
83:16:72:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:11:54 2025 by rpki-client