Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
File: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft (raw, json)
Hash identifier: kiHE/2higxU1rjyn6eoTANer+f2qBlBd/hI/T6wQVXI=
Subject key identifier: B8:7B:40:14:91:A9:EC:8C:29:7B:E4:5C:01:88:EB:28:7B:5D:F2:03
Authority key identifier: ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6
Certificate issuer: /CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
Certificate serial: 019658A6D637E11663198F99C158E45F8F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 14:00:50 +0000
Manifest this update: Mon 21 Apr 2025 14:00:50 +0000
Manifest next update: Tue 22 Apr 2025 14:00:50 +0000
Files and hashes: 1: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl (hash: u0wRGsY8oKrYbmP0lBWdBMhrqCX0mN0oy3tes3BJ3V8=)
2: NtOWsHokBD2D-h9w2vIY6AqcxW0.roa (hash: NgvfZzRezTm/iHnWAmu436qovNykwseNE0VLXLqNwzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:d6:37:e1:16:63:19:8f:99:c1:58:e4:5f:8f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
Validity
Not Before: Apr 21 14:00:50 2025 GMT
Not After : Apr 22 14:00:50 2025 GMT
Subject: CN=b87b401491a9ec8c297be45c0188eb287b5df203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:fb:fa:ab:52:87:e1:41:69:de:50:81:77:
07:91:fb:26:6e:87:b0:a4:ac:3b:a5:b6:da:e4:a6:
5d:cf:6a:3a:7d:40:4b:e1:da:bc:0c:9a:87:58:92:
ef:a4:98:57:a1:ba:b3:ba:84:3e:44:f1:af:38:c9:
8b:c0:3e:d6:83:2c:77:5d:b9:dd:9e:a0:09:34:8d:
2e:91:cd:e0:48:5a:dc:b0:62:5a:4d:4a:08:57:29:
eb:b6:30:5a:ad:f9:b0:81:ca:07:e8:a0:81:1b:5a:
48:30:0f:da:28:a7:e4:95:b2:f2:04:89:54:45:d3:
5d:ec:f1:92:ef:48:bd:54:62:34:be:9c:08:e0:6c:
14:65:35:55:4e:e4:cd:c2:89:78:ea:fa:ce:f8:0f:
7d:7a:78:28:63:1a:8f:ac:f1:9c:64:0b:8a:9f:ab:
bd:76:10:65:e0:4c:f3:9f:63:4f:be:24:c9:8c:23:
3e:f9:28:d9:f6:22:33:f2:f2:74:a0:37:af:c0:82:
a4:41:5a:55:74:33:9a:8c:f3:41:40:04:de:5b:af:
f1:e2:f1:23:02:ca:91:f0:68:98:ea:58:41:aa:3a:
40:dc:53:bd:9b:bc:08:2a:8c:1d:f3:e1:5e:34:f0:
87:dc:44:ff:77:ac:b9:a0:c7:2b:fb:65:80:54:29:
90:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7B:40:14:91:A9:EC:8C:29:7B:E4:5C:01:88:EB:28:7B:5D:F2:03
X509v3 Authority Key Identifier:
keyid:ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a5:a0:81:1d:13:8d:b0:28:66:54:54:28:6b:a1:7a:95:42:
ed:eb:d7:ee:7e:e2:95:b6:5c:f9:2f:83:63:5c:d6:a1:75:b0:
87:9f:1d:4a:9c:9b:ad:a4:c2:16:73:01:a0:1d:68:f7:18:0f:
b1:11:ae:5e:e4:6e:d7:85:12:b2:2f:d6:3d:af:a2:eb:46:e3:
e8:96:55:ea:83:2c:a1:d9:47:c2:1d:e1:aa:5f:74:c6:3b:22:
81:9e:fb:04:5a:79:6e:c4:f4:c8:a4:3d:01:47:c4:cb:07:ba:
57:77:a6:4c:18:ce:c4:91:13:be:84:36:ae:e9:61:87:ee:30:
a2:01:73:5a:8a:3c:96:ae:14:a0:88:5d:6a:f7:70:1f:82:99:
93:3e:fc:7f:c6:b6:62:9d:88:dc:a9:aa:43:1e:9c:89:a7:08:
09:e2:d9:f5:85:26:42:b4:d1:e5:73:2f:0a:ce:45:28:92:f8:
b6:ff:0f:8f:42:52:93:fd:6f:92:97:f3:d4:28:94:fe:35:ce:
da:a5:a5:bb:7e:79:67:55:38:8f:3f:8b:05:08:5c:01:77:ee:
a1:ea:cf:11:5b:f9:29:60:b0:4e:40:dc:7c:72:70:d1:71:c8:
96:1e:ff:e8:53:f9:20:6c:4a:72:29:7b:8b:d4:57:a2:01:c9:
2e:d9:04:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:21 2025 by rpki-client