
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
File: r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft (raw, json)
Hash identifier: GhI4a9emw+Tzof3v2mrwGgFyu74+ts3Dgk7GruHyhD8=
Subject key identifier: 7D:A7:36:48:2F:BC:69:37:C7:BF:A4:00:ED:4B:03:71:EC:97:18:00
Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Certificate serial: 019654C9980C0BE4BF0E16B8C502D4442702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
Manifest number: 11EB
Signing time: Sun 20 Apr 2025 20:00:19 +0000
Manifest this update: Sun 20 Apr 2025 20:00:19 +0000
Manifest next update: Mon 21 Apr 2025 20:00:19 +0000
Files and hashes: 1: BMtrajiT8kc1Pg7kzTaWX9dZggk.roa (hash: OKRwb7gvAgyjstxUa1W7+46wLP3OqM3yM6o0/CqxEn0=)
2: r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl (hash: CIWtqz1qrafhxsVsZyBYAViriekxJiCE6UkGdbaWodo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:98:0c:0b:e4:bf:0e:16:b8:c5:02:d4:44:27:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Validity
Not Before: Apr 20 20:00:19 2025 GMT
Not After : Apr 21 20:00:19 2025 GMT
Subject: CN=7da736482fbc6937c7bfa400ed4b0371ec971800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:82:3f:ca:fd:28:37:c9:0d:c7:8c:f0:db:76:
df:55:d5:8a:db:b9:dc:69:f6:ff:62:09:a5:a2:1e:
97:e2:26:83:be:ed:24:e0:98:80:73:eb:33:04:fb:
f1:c8:7d:be:09:39:a3:ef:2e:39:93:86:30:4e:6c:
f9:be:59:b4:ad:f4:69:c0:2f:d5:49:5f:13:a0:db:
e8:4b:8e:9d:f7:21:23:5f:87:a0:d3:8f:33:ae:d4:
1e:8b:1b:61:6a:46:67:62:eb:56:07:32:2d:72:c4:
34:5f:1e:22:20:75:46:0b:37:8b:1b:c0:12:e4:18:
e6:0b:e6:a6:49:2f:82:be:18:52:b3:a0:a2:bf:65:
d6:6d:14:67:3f:45:90:6e:36:5c:1b:f2:66:6a:37:
a1:27:67:06:61:0f:b8:a7:e5:ec:ad:e7:2c:72:23:
e4:32:de:fc:34:96:de:06:14:e6:fa:1f:81:d7:90:
65:7f:47:f7:00:78:92:8a:ce:d6:c8:d3:f2:9e:88:
cf:3c:1b:b6:c0:78:01:4f:7c:e9:93:ca:ea:c1:74:
aa:97:e1:16:e2:f5:e9:e5:92:9a:33:2c:20:e2:37:
73:54:10:a9:bb:a0:16:c0:d0:34:f9:52:5d:e1:f5:
0e:d1:b9:8c:f9:bf:12:95:43:95:7b:65:60:6a:cd:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A7:36:48:2F:BC:69:37:C7:BF:A4:00:ED:4B:03:71:EC:97:18:00
X509v3 Authority Key Identifier:
keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:93:26:a8:e6:b3:9c:3f:3e:08:69:d2:fe:54:47:ff:4a:8d:
c1:fb:1a:9f:79:68:8a:8b:9d:15:9e:c4:7d:36:cb:f3:c0:5c:
94:8d:c4:6e:54:89:02:f1:13:51:28:64:3d:40:ca:6a:f3:a1:
39:a3:c2:d2:90:ff:ec:2f:a7:e9:c0:ee:48:78:0b:1d:92:bc:
f8:09:80:4d:70:4f:a3:48:52:a8:39:97:f6:af:dc:3e:ef:4c:
b2:b6:0f:cf:ee:4a:0a:1a:1d:51:c3:0c:8d:4d:3a:fb:ef:20:
7b:84:94:b9:36:f8:34:83:91:c0:3e:28:56:55:a5:2b:98:2e:
82:fc:27:dc:fa:fe:61:cd:50:51:9a:09:0e:cf:87:d5:35:6b:
ca:8f:f6:df:99:cb:72:2e:c3:41:6f:af:49:11:e1:c7:e5:95:
3e:45:e3:32:4f:84:07:4a:27:f7:e4:53:4a:b3:66:82:f9:99:
75:5a:64:54:94:24:d4:30:91:6f:a9:fc:b6:29:8f:b4:45:0b:
16:4f:03:f4:e6:13:a9:e7:cd:67:f8:bf:37:93:4d:9b:a7:a1:
d1:e0:ea:32:e3:21:07:9c:ea:43:b7:70:e8:be:d1:7c:d9:9c:
98:b4:2b:b1:8f:cb:d1:d8:ab:3e:3d:d0:d8:dc:05:7d:58:06:
e9:10:06:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:54:49 2025 by rpki-client