Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
File: 7rtMC0r2FchaPNze1LfrtmYxG0g.mft (raw, json)
Hash identifier: fWprQAq23HTKZ7eCjpVqIazKbZtSEyTu5LecpO0lpXg=
Subject key identifier: 39:04:AC:8D:AA:82:F4:15:50:69:46:46:16:E8:A9:5A:0D:B0:EE:E5
Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
Certificate issuer: /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Certificate serial: 01965047EE434CB4361A091B23F92C001A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
Manifest number: 148F
Signing time: Sat 19 Apr 2025 23:00:13 +0000
Manifest this update: Sat 19 Apr 2025 23:00:13 +0000
Manifest next update: Sun 20 Apr 2025 23:00:13 +0000
Files and hashes: 1: 7rtMC0r2FchaPNze1LfrtmYxG0g.crl (hash: JOq75ygXdYHZ+ICssPtw+RttraIYc7ano4lynEviFpI=)
2: M845Ruk9WEAHqWqH-UFvn2XtdEI.roa (hash: 9d5WTncP2804xxZsRBfSA7+CL58Ibq4eGoAP961Gtgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:47:ee:43:4c:b4:36:1a:09:1b:23:f9:2c:00:1a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Validity
Not Before: Apr 19 23:00:13 2025 GMT
Not After : Apr 20 23:00:13 2025 GMT
Subject: CN=3904ac8daa82f4155069464616e8a95a0db0eee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:3b:22:c0:90:5c:82:cb:57:d3:62:45:d0:
d1:af:7e:5c:7b:16:52:52:5b:21:88:3a:7e:e2:9e:
90:02:78:5c:c9:75:89:7f:1f:94:e5:49:55:67:3c:
d6:5a:6e:19:1d:91:9f:49:bf:2f:95:6e:34:8a:37:
55:0b:93:b9:46:30:15:02:41:10:0d:d9:85:37:f8:
b2:2f:24:91:24:2c:6b:6f:ec:c8:18:a4:f0:df:60:
f8:fb:19:cd:ab:09:91:0c:8e:a0:0e:b4:70:b8:bf:
6e:57:1a:fc:e5:64:2f:9e:18:53:9a:61:93:0e:99:
f1:c8:a0:70:c9:05:1b:4f:f1:ad:3b:35:92:9f:1b:
26:79:ed:3a:3c:99:c1:c6:43:ab:fd:63:af:f7:4f:
30:c5:9d:47:c8:88:f1:6d:6d:24:68:81:68:ad:5f:
90:ae:5c:fa:77:87:b3:71:d9:96:08:e7:e9:85:dd:
85:e5:24:f5:d1:02:b9:2a:33:db:5d:e5:fe:98:e6:
81:74:cb:5e:f5:47:01:ec:65:62:1c:7b:26:b2:2b:
4d:de:83:2d:5a:a5:a7:45:48:7f:f7:f9:e4:d5:ad:
b0:d8:01:dc:e1:69:f9:1c:33:7c:36:cd:1c:f3:12:
fd:d8:1b:2a:69:2a:11:68:01:43:91:9e:d4:17:04:
09:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:04:AC:8D:AA:82:F4:15:50:69:46:46:16:E8:A9:5A:0D:B0:EE:E5
X509v3 Authority Key Identifier:
keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:84:ca:71:20:3a:ff:57:06:d4:dd:93:9f:32:18:6e:a2:eb:
9f:1a:11:e8:de:1b:82:01:96:91:ac:94:c5:50:7e:e1:09:70:
ef:c5:96:6e:c9:9d:c8:09:d5:06:68:c6:38:25:a1:2c:8e:a6:
28:09:b8:0a:29:ea:af:8c:59:8b:aa:59:98:2e:2b:f8:65:ca:
d4:34:f2:0f:d8:47:8e:4c:27:ff:d6:fa:de:52:84:5b:18:ff:
c3:86:77:b8:ee:f6:01:09:e7:ce:c5:b4:1b:fe:8b:4b:ee:ee:
27:95:a8:17:2f:3f:70:64:ea:ad:0e:fd:5d:b5:8c:ed:c4:77:
c0:3e:0d:37:5f:ac:0d:d4:32:40:70:b0:13:5c:57:ee:3a:26:
fc:6c:22:0b:f7:78:02:65:d0:1a:0c:ef:cd:26:8c:78:91:c3:
84:d6:4e:91:21:30:51:0f:05:14:11:bb:49:68:02:5b:f5:ca:
c0:c4:0e:6b:3f:ca:6e:da:08:0d:c8:02:74:b9:61:d5:74:1a:
dd:d3:67:21:f6:2b:3d:33:cd:99:84:79:07:19:bb:40:0e:20:
d3:1c:85:aa:a4:6f:d3:a2:e8:b1:00:11:f7:63:70:f8:df:be:
0c:a9:0c:a7:6c:8c:91:b8:48:35:5e:76:b5:f5:90:a7:9f:d3:
62:15:c3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:24 2025 by rpki-client