
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
File: r7oQsKZ20-H6tWUoQw-siRoINlI.mft (raw, json)
Hash identifier: r+JpKhQb5ukELUhsDJJJfc+q/yYdqUaiUKk83TJ2di0=
Subject key identifier: C3:99:7E:93:FE:72:6E:84:C2:98:DE:15:30:AB:89:75:40:DA:0E:49
Authority key identifier: AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
Certificate issuer: /CN=afba10b0a676d3e1fab56528430fac891a083652
Certificate serial: 0196534957FE57FCA9494F0AA280771DB98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 13:00:37 +0000
Manifest this update: Sun 20 Apr 2025 13:00:37 +0000
Manifest next update: Mon 21 Apr 2025 13:00:37 +0000
Files and hashes: 1: KrPbG6M_7Mm1PtcHhZI4wknQI1M.roa (hash: tjtqRRJLnNhIS/xM5FVWwtZTtirmBRvu7piQDYGy3mE=)
2: r7oQsKZ20-H6tWUoQw-siRoINlI.crl (hash: 4ufLEgBt77YQaR8n2rspXW/Sxf/pZZv9QiMAMzP46Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:57:fe:57:fc:a9:49:4f:0a:a2:80:77:1d:b9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afba10b0a676d3e1fab56528430fac891a083652
Validity
Not Before: Apr 20 13:00:37 2025 GMT
Not After : Apr 21 13:00:37 2025 GMT
Subject: CN=c3997e93fe726e84c298de1530ab897540da0e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:5c:2f:08:9c:f4:c1:a6:4d:93:a3:28:e5:
d7:c2:2c:e2:f3:1d:9b:fd:d1:58:16:c7:01:85:2a:
8f:31:5b:61:50:04:5d:0c:96:af:9d:af:db:91:e6:
a1:eb:41:67:d2:cc:f9:a4:c2:c5:38:52:eb:c3:16:
0f:f5:e8:19:df:69:26:58:4e:1a:dd:d2:3a:ec:04:
10:7b:1d:df:c2:d8:e2:e4:32:a4:b8:16:ca:b5:26:
18:22:49:af:6c:f6:1c:57:7c:f8:ca:b8:9f:52:17:
d7:1b:4e:f1:25:82:fc:80:99:60:cb:f8:c6:56:1d:
bc:b5:d1:1d:02:02:72:1d:6c:1d:f5:d8:62:ac:7f:
5c:aa:e9:fd:15:10:fd:3a:38:d1:92:19:88:dd:0e:
af:85:00:c8:9f:14:af:e9:a5:d9:32:61:52:be:33:
0c:5e:26:cf:69:5c:74:c2:54:f4:c2:37:ea:81:d0:
a5:2e:d4:3f:cc:6f:96:54:46:cc:95:f0:f3:c7:ae:
39:b2:6b:24:fd:3d:83:79:42:ae:80:fc:21:93:9f:
25:bd:8a:7e:97:b6:f6:8d:76:27:94:27:02:02:42:
f0:6e:49:d6:30:39:ff:c5:c6:b5:cc:26:0f:eb:c8:
66:d9:63:0c:1d:53:b9:7b:69:c4:bd:30:23:6b:8f:
b0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:99:7E:93:FE:72:6E:84:C2:98:DE:15:30:AB:89:75:40:DA:0E:49
X509v3 Authority Key Identifier:
keyid:AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b3:85:f5:09:98:47:27:cf:0a:cb:3d:bf:45:60:b3:c5:b5:
02:1e:79:af:d7:74:a8:6e:23:20:5f:af:47:85:44:d1:67:05:
82:90:6b:bc:dd:c7:70:0e:3c:62:df:8a:af:7a:00:ae:d6:7a:
b1:3b:32:6e:8a:c5:61:a4:c2:06:7f:96:d0:ad:7b:98:54:29:
36:6d:d4:19:4d:92:4f:d7:49:51:0d:14:fc:fc:19:d0:e3:85:
f8:30:d8:be:cc:21:5a:dd:91:c7:ba:db:7b:c6:02:43:5f:47:
42:f9:29:68:15:d2:63:b5:5c:53:09:89:5d:df:78:06:13:b0:
de:5b:f7:a6:1b:05:90:aa:f5:7b:c3:5c:69:66:98:ba:4b:04:
61:d2:a8:03:f7:b8:76:65:ba:8f:5b:f1:83:44:6a:13:55:8e:
dc:34:87:e2:e0:f6:3c:39:ec:bc:06:17:de:66:e5:e6:79:9e:
9f:11:b7:fc:ff:ef:f9:49:46:23:b8:b6:85:f2:47:c5:64:bc:
9e:58:15:be:9f:33:00:bc:59:fa:dd:6f:d9:a4:8b:11:b1:fa:
4e:2a:c2:1e:4a:35:f3:3d:ab:ed:80:e6:8c:9e:a6:54:69:f1:
56:3a:a7:af:05:e9:a7:28:59:5b:9c:27:47:85:3c:d5:85:41:
a6:31:87:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:38:21 2025 by rpki-client