Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File: 7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier: lJiz+krQEAbWS5R5jXIC+NU/i+8C29dmxXwHh3gRO88=
Subject key identifier: 52:98:69:8F:A8:70:81:F6:9F:8B:42:03:20:01:94:75:A7:C1:2E:05
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 01964EFECC5456225E9934378F7113C3771E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number: 0CC8
Signing time: Sat 19 Apr 2025 17:00:43 +0000
Manifest this update: Sat 19 Apr 2025 17:00:43 +0000
Manifest next update: Sun 20 Apr 2025 17:00:43 +0000
Files and hashes: 1: 5YlDtF7Ig5TmbuS_NoCvq0dSUvM.roa (hash: O5AF3h5GUvVjXi+fdnM5KUl9Mafj4SPh9elj1bhbK30=)
2: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: VURaZqLg3uYjo2AlQ3WOxYVKbcotfRd4S+Zk9nwMvtk=)
3: jAeBGrf8BFIRbqKfW6MMAFHsAAY.roa (hash: XkntMpJexF4yO1fbtCkxhPtOe5hHQjbro7XU8mxBw50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:cc:54:56:22:5e:99:34:37:8f:71:13:c3:77:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Apr 19 17:00:43 2025 GMT
Not After : Apr 20 17:00:43 2025 GMT
Subject: CN=5298698fa87081f69f8b420320019475a7c12e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:59:c4:0a:1b:10:cb:37:b9:5e:4f:3c:0c:38:
28:7d:a4:d2:26:b7:27:cd:42:7b:1e:73:a0:ee:08:
f5:c6:02:56:ff:2c:55:5c:98:53:49:53:de:20:e3:
82:85:86:5e:8a:54:65:65:fe:5a:d7:10:ce:00:83:
12:85:f4:8f:35:a6:bc:ff:7c:05:76:ad:59:01:c1:
d9:cc:ec:b2:9f:61:b2:09:68:70:87:c1:4d:fb:f9:
b2:6a:0e:42:18:de:1c:e9:3e:8c:01:da:2a:3d:34:
ee:8d:ed:3e:cc:57:4d:2e:31:52:fe:98:a3:e8:69:
ea:96:c0:ca:03:bd:0c:89:15:d6:0f:8e:fb:f1:e1:
9f:f5:4d:a6:85:90:d1:f2:b8:8e:82:62:d4:3f:1d:
f5:57:bb:67:95:10:75:19:3f:5f:0d:3e:79:fd:bb:
91:e3:dd:b1:2f:25:b8:d8:df:6d:73:d2:6c:41:8c:
40:09:b6:d1:27:75:60:b2:a5:1a:78:88:7b:fe:6f:
6d:a7:20:d0:62:7b:81:89:f1:a7:81:94:e5:52:43:
27:df:aa:08:67:97:82:c1:51:38:32:d6:36:26:81:
69:28:c2:70:9e:79:24:08:c3:20:97:eb:f8:46:40:
ef:ce:74:65:8e:54:5e:b7:1b:49:23:3f:78:05:89:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:98:69:8F:A8:70:81:F6:9F:8B:42:03:20:01:94:75:A7:C1:2E:05
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:d2:3b:c6:a7:7e:ef:ef:aa:af:30:0e:9e:a8:b1:e4:9a:75:
c4:ea:58:04:7d:50:55:67:87:05:30:38:a6:ee:da:1d:2b:e1:
a8:fa:97:ec:92:c0:53:12:98:65:cc:eb:93:38:aa:35:a1:ce:
32:2d:0f:ae:25:15:5e:8e:1d:2d:71:24:31:00:d1:de:3e:3e:
0d:07:14:04:0a:51:d4:d1:82:33:f0:3f:dd:df:9a:e2:d5:ea:
d9:45:d5:de:15:6d:88:25:83:7e:e9:34:e5:37:bc:b5:93:5e:
98:bc:c2:b3:86:9a:67:d4:34:bc:c5:15:d8:44:8b:ca:bf:50:
7a:3a:4a:e2:52:c2:36:cb:01:f7:93:12:f6:16:7f:c0:e2:36:
d6:83:c4:7e:34:2b:0b:15:e5:9a:9c:4e:79:d8:35:ac:5f:ff:
a6:61:07:9c:83:86:01:39:41:f6:50:cf:d4:0e:4b:0b:12:69:
56:4a:85:7b:4b:63:57:9a:ac:20:58:9e:1c:48:33:00:20:84:
3d:51:f9:c0:d6:82:71:a1:57:bd:e3:e9:ff:2a:e9:62:42:ed:
9d:ae:19:86:27:2e:9a:79:80:f0:ec:a2:b1:32:2c:38:05:4b:
5f:d3:f6:0d:1e:e7:69:35:10:3d:55:5d:1e:59:e0:61:c3:09:
be:68:16:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:44:21 2025 by rpki-client