Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
File: 7qq8oRa05zqZRKuXAs-YZleANYA.mft (raw, json)
Hash identifier: plDcpHiDQ+X5XinjszfvfPKIVwdpYL782yP05P6rjzE=
Subject key identifier: 33:22:BC:7E:90:B6:C3:E4:FB:63:A0:EF:B7:06:C0:EE:89:F2:37:97
Authority key identifier: EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
Certificate issuer: /CN=eeaabca116b4e73a9944ab9702cf986657803580
Certificate serial: 0194C4636EDE60E7BCF155D3AEF461A587D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
Manifest number: 77
Signing time: Sun 02 Feb 2025 02:00:38 +0000
Manifest this update: Sun 02 Feb 2025 02:00:38 +0000
Manifest next update: Mon 03 Feb 2025 02:00:38 +0000
Files and hashes: 1: 7qq8oRa05zqZRKuXAs-YZleANYA.crl (hash: hsLaSL7dnQvddX3qYX+Krg5n8kpv3tEyhvDYYRGgydw=)
2: 87MujmzYjqiHmvGtUQfVum9xgYI.roa (hash: wh9UFynd+k4p6PBt8Z51e5f4u9WZiYuFkQCOx8EtepA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:6e:de:60:e7:bc:f1:55:d3:ae:f4:61:a5:87:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeaabca116b4e73a9944ab9702cf986657803580
Validity
Not Before: Feb 2 02:00:38 2025 GMT
Not After : Feb 3 02:00:38 2025 GMT
Subject: CN=3322bc7e90b6c3e4fb63a0efb706c0ee89f23797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:91:cd:49:e7:67:8e:81:44:09:f4:69:d6:4a:
ae:5d:e0:db:cd:cd:ed:7c:62:a8:24:7c:45:70:f5:
29:0d:fe:a3:0b:d0:d0:a6:de:b8:27:b7:29:1d:c1:
6f:a4:b5:6a:61:1d:91:d2:76:79:b0:ed:83:6b:6a:
7e:c8:2d:c6:e9:27:2f:48:83:0b:28:4c:98:6e:f3:
4c:48:ef:05:89:67:81:4b:60:3c:09:a7:9d:10:76:
6a:6c:3a:07:c3:79:74:8b:83:68:b7:1a:7f:66:cc:
f7:65:45:e0:fe:9b:cd:e8:2a:3f:df:26:6f:a4:43:
5e:15:16:79:43:84:03:17:b9:46:3a:39:54:12:b0:
13:80:d2:43:9e:18:ff:09:d7:d5:72:29:d3:15:75:
1b:64:a8:a3:9e:b7:ba:a2:7e:80:c7:a3:6d:06:b7:
2e:dc:d9:c4:9e:03:72:36:eb:36:5b:f7:67:23:6f:
24:4d:46:6b:95:44:b1:c6:d3:6d:08:5c:3e:c6:27:
3b:3e:e0:3e:3a:34:dd:6a:c7:a5:31:01:85:b8:8b:
cc:14:52:aa:c7:8c:4e:b8:6d:8d:c4:12:da:aa:25:
b0:9e:2d:a9:da:df:49:1c:d2:05:4e:29:75:ba:16:
8a:23:90:e2:6b:7b:0c:69:73:f5:cf:5a:41:31:dc:
e5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:22:BC:7E:90:B6:C3:E4:FB:63:A0:EF:B7:06:C0:EE:89:F2:37:97
X509v3 Authority Key Identifier:
keyid:EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d6:64:d0:12:b8:4e:26:c0:d2:a5:89:38:4d:3a:8b:78:d0:
d9:68:fb:87:05:4f:4d:d4:0a:12:f2:54:ac:7b:5a:8d:34:5e:
1d:40:30:f5:cd:9d:fc:0d:e2:01:43:c4:7f:3a:18:ef:3c:14:
02:df:fd:dd:fd:9d:df:4e:a0:46:af:59:da:a7:38:18:16:ba:
1f:f1:65:9e:d7:d0:10:99:9d:e9:32:31:1e:cc:f2:5e:23:45:
49:63:67:67:42:9a:e8:73:f3:0c:75:85:55:a1:f6:dd:f2:e0:
d5:91:33:92:0d:0b:d2:ed:1f:a4:e0:bc:b7:15:82:11:f6:56:
cd:18:09:90:28:b9:65:81:a4:10:80:0b:23:99:1c:68:d1:3a:
ad:bb:09:3b:31:bc:42:89:bd:d5:01:e8:3d:b8:39:1b:97:82:
4f:07:93:cb:60:e4:3b:ac:ba:9c:50:45:cf:5b:a1:45:46:43:
44:06:c4:20:80:7c:e5:4e:9d:3d:2e:4d:2e:4a:a7:ef:35:8c:
34:52:e1:a1:5c:da:af:ba:ea:ee:61:b4:e6:c3:f4:b7:18:8d:
a6:e8:d2:fa:44:3c:93:74:bb:f8:ed:c1:ff:d3:65:1c:95:9a:
34:05:d4:fd:10:4a:cf:d8:4a:16:b7:c7:1c:94:03:bd:a6:c3:
c9:36:e1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:36 2025 by rpki-client