Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
File: 7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json)
Hash identifier: itZTt4WKLaRrnF0qmiJZlUEFFUQbII5id6A3QwtaeWE=
Subject key identifier: E9:E9:B6:EA:BA:E8:5C:E7:23:FE:BA:AD:47:5D:DC:1C:78:47:5F:6F
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Certificate issuer: /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial: 01958B4DCCAA04B33EF5739C24FAB87964F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
Manifest number: 08A3
Signing time: Wed 12 Mar 2025 17:01:26 +0000
Manifest this update: Wed 12 Mar 2025 17:01:26 +0000
Manifest next update: Thu 13 Mar 2025 17:01:26 +0000
Files and hashes: 1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: g8PBZwsGHIeVKaGdKvXAowG2KKbzTWMUDt2RlDO+n3o=)
2: X1JkS3uwHtAkqyPH5ViWJPHV9Uc.roa (hash: txiqMZuBc/HjQ/EutSSi10aRPrL/flvGPy+EKHQ4msY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:cc:aa:04:b3:3e:f5:73:9c:24:fa:b8:79:64:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Validity
Not Before: Mar 12 17:01:26 2025 GMT
Not After : Mar 13 17:01:26 2025 GMT
Subject: CN=e9e9b6eabae85ce723febaad475ddc1c78475f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:13:6b:0a:a7:e7:d6:16:4e:70:03:54:a7:
f6:2f:5a:79:27:e5:92:d7:99:82:5b:54:9d:f5:70:
2a:49:ae:a5:4a:31:c2:8f:bb:c4:7e:69:c7:f5:7f:
72:33:03:98:d6:67:97:ef:7b:f8:bf:23:4f:14:55:
61:7e:e1:1d:7d:3f:7c:ed:a8:8b:c7:88:78:23:1c:
09:51:43:17:2e:04:83:47:25:1f:ec:31:35:11:5c:
dc:66:c7:98:f4:f6:20:64:75:bc:32:4e:d5:ed:92:
ce:e1:78:0a:f6:21:ec:8f:94:80:06:da:e7:99:08:
ad:a9:4e:25:cd:49:c0:f2:60:46:41:6d:cd:d5:8a:
1b:e2:03:d7:3b:64:76:23:cd:0d:27:fe:10:49:da:
28:1c:ef:ee:90:17:97:d6:f1:50:a5:d7:a7:e4:2e:
38:f7:a7:61:eb:1c:f9:49:92:ab:34:32:30:92:e9:
e7:25:56:77:69:4f:ee:f0:3f:4b:d5:dd:82:82:8d:
b2:7f:63:41:1b:c1:7a:e5:4c:5e:22:66:68:20:6f:
8d:4c:69:42:89:85:1c:fb:b2:cf:2a:65:21:d8:60:
cc:b3:bf:9a:be:e2:8d:fa:43:ec:d3:25:79:65:95:
90:05:77:c5:18:a0:fb:aa:b7:55:db:83:10:a8:bd:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E9:B6:EA:BA:E8:5C:E7:23:FE:BA:AD:47:5D:DC:1C:78:47:5F:6F
X509v3 Authority Key Identifier:
keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:52:fa:24:4c:0c:7f:71:77:92:52:fc:ed:65:b6:3c:69:5f:
6a:1e:3a:3d:c1:a6:d2:9d:78:be:e1:d6:b8:7a:e6:b1:fc:14:
e3:92:a8:b3:d6:2d:58:42:58:d5:38:e1:f5:00:4c:37:12:14:
3b:1b:aa:7f:32:88:c2:4b:93:25:0b:40:31:ab:e3:9b:00:5c:
94:ca:c2:9e:5d:74:7b:9d:af:35:71:5c:c6:d8:53:40:27:b3:
72:dd:0a:84:bc:ea:f5:b7:31:38:34:a8:fc:28:53:4a:1b:16:
ac:65:32:0c:ac:17:2f:65:2b:d9:03:83:54:81:04:c1:de:f9:
c4:06:08:ed:bb:f9:67:e3:f6:ec:e7:db:ee:1d:f8:0c:f4:ee:
7a:6c:c4:80:a5:12:43:71:d8:4f:b6:da:c4:6d:3d:ac:6d:38:
28:a1:93:97:46:07:1c:47:79:06:77:06:d3:a1:d2:dc:b4:7d:
97:6b:6a:10:5a:78:b6:ed:ab:5f:45:ef:81:72:3e:df:f5:fb:
a8:6b:46:61:30:ac:d6:1c:0a:d6:da:3d:00:4c:9c:a8:66:83:
d3:9d:fa:78:c5:65:5f:10:3e:73:1d:21:2e:0d:ae:4d:90:e7:
30:0b:05:60:cf:54:8a:8c:95:5c:76:0a:0b:79:cf:d1:b8:0d:
0d:61:d4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:55:43 2025 by rpki-client