Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
File: 7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json)
Hash identifier: 0OlIP8E+r64QmjcWqtnOMzSfFDiUX3ftVixfM+t7uZU=
Subject key identifier: 60:0B:15:BA:E1:19:65:F3:0B:33:47:EA:28:A8:23:DD:62:70:A1:6B
Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
Certificate issuer: /CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Certificate serial: 01958B16ABA832AFFB87A9894E52BC6A4EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
Manifest number: 1497
Signing time: Wed 12 Mar 2025 16:01:13 +0000
Manifest this update: Wed 12 Mar 2025 16:01:13 +0000
Manifest next update: Thu 13 Mar 2025 16:01:13 +0000
Files and hashes: 1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: XfwhQlYuQZnrn7Tn2J8FZCzPRPP8j45RD+arNSkLWww=)
2: avqINpYlzxCyV6gq20JtXLQyC4A.roa (hash: 0cl0vSjwJETExQIV/vHZXVhnvVc8V1ucpKa58O8zwHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:ab:a8:32:af:fb:87:a9:89:4e:52:bc:6a:4e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Validity
Not Before: Mar 12 16:01:13 2025 GMT
Not After : Mar 13 16:01:13 2025 GMT
Subject: CN=600b15bae11965f30b3347ea28a823dd6270a16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:7b:43:48:14:36:58:9e:6d:3f:1e:0c:85:a2:
ba:59:30:d4:b8:76:5e:6e:5f:d7:2e:87:1e:75:48:
b0:0a:0c:74:37:8b:66:88:3d:5e:af:c5:8e:34:62:
98:53:01:14:59:51:8f:7e:bb:38:d7:81:b1:95:a2:
52:e9:e6:24:ee:d4:3f:5c:c0:e1:03:dc:82:3c:a9:
a7:ea:0a:25:0f:b7:f5:9a:b3:33:13:e7:d0:62:0b:
90:d2:74:83:b7:0d:a7:e6:26:e8:dc:f3:0b:c3:fb:
44:2f:48:07:da:d8:f2:55:93:0f:b0:eb:7d:6e:13:
36:4c:d1:dd:e7:68:a4:e8:5d:00:71:99:83:88:84:
e6:56:b8:99:29:2f:bc:a1:a5:ec:b4:c5:bd:e3:6b:
fe:c7:da:b4:d3:00:f3:84:c4:17:51:5b:94:c8:35:
d4:bb:26:8d:23:2a:4b:d2:cc:85:75:66:41:37:7c:
0e:80:7d:cc:96:2d:d9:ac:ef:0a:bb:73:49:32:a0:
3c:e5:7e:94:e3:9d:87:c9:10:b6:aa:a9:d3:b7:6a:
00:5f:eb:e5:67:c1:0c:ca:d4:64:2c:95:3d:cb:b1:
0a:82:b8:b3:9c:d0:28:00:9b:e5:3b:6c:7c:c7:79:
3f:ce:a4:94:d3:3a:81:69:65:02:46:78:a9:13:73:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0B:15:BA:E1:19:65:F3:0B:33:47:EA:28:A8:23:DD:62:70:A1:6B
X509v3 Authority Key Identifier:
keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c5:0e:07:aa:c3:ac:d2:70:33:1e:11:4b:d5:96:d9:45:d2:
b4:d2:f5:a1:d3:8b:43:45:a3:86:16:47:12:ec:bd:7a:e5:e5:
d2:a3:c9:0c:cb:8b:17:47:cc:04:06:14:61:c9:6e:f5:1f:88:
73:b4:d8:39:c2:ce:16:ea:45:a2:0e:ee:62:58:21:cf:18:8d:
59:4e:9d:d9:3f:22:c1:30:de:51:b7:f3:b7:c9:46:3f:46:09:
07:c1:31:7f:31:8a:b2:4e:97:8a:ae:3b:a8:e3:82:3e:aa:1b:
cf:4e:9f:48:77:ea:3c:9f:e0:a0:cc:a4:88:98:10:fc:95:98:
37:95:91:8e:82:f7:78:00:fa:82:0a:b9:3f:eb:4e:88:7c:e8:
a3:e4:3b:68:31:69:e3:5e:e9:6d:1f:55:6b:10:5d:8d:1c:1d:
3f:35:0c:c5:03:03:ba:f0:79:84:87:f7:71:1e:41:4c:3d:2e:
10:28:7b:22:af:8c:6d:71:4d:84:b7:55:9c:6e:e2:9e:68:44:
23:44:ee:75:b2:25:63:c9:dd:80:28:43:6b:02:63:29:9e:a0:
00:a8:af:e9:7e:ec:4a:4e:59:10:23:3e:ed:49:33:13:10:c9:
b6:08:4d:df:ee:ed:ba:60:27:dc:ce:cb:fb:9d:40:02:b8:ad:
30:82:cf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:51 2025 by rpki-client