Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier: skcKFaTejFS/8KBRtqNI2ysnpW4rTp5mOQPIx4PJTaQ=
Subject key identifier: 6A:FD:1A:E2:FC:73:4F:97:B8:D6:53:C2:7C:CE:CC:11:16:63:0E:F5
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial: 0195816E81631BD1A524855F0F683C80E5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number: 0123
Signing time: Mon 10 Mar 2025 19:00:57 +0000
Manifest this update: Mon 10 Mar 2025 19:00:57 +0000
Manifest next update: Tue 11 Mar 2025 19:00:57 +0000
Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: 20cDSyIu3BFGwNF6CEmVrY/qzDrX9iNASSgf382BGRA=)
2: gylVxgv2wVCzGr0PfDa1DOljS0w.roa (hash: LJzn39XG+RijMzRlRM7pRtoqSA79D4mMA2x3jy4QHzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Mar 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:81:6e:81:63:1b:d1:a5:24:85:5f:0f:68:3c:80:e5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Validity
Not Before: Mar 10 19:00:57 2025 GMT
Not After : Mar 11 19:00:57 2025 GMT
Subject: CN=6afd1ae2fc734f97b8d653c27ccecc1116630ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:86:1e:52:e3:a1:9c:ff:a5:a0:8d:31:0d:d8:
eb:ba:56:2d:8f:5c:f0:af:11:9a:e2:46:a2:59:75:
cc:6c:23:52:73:d2:cc:c4:33:68:08:3f:67:f9:ea:
0a:d9:e6:32:f1:18:e1:bd:a4:a7:68:69:5e:92:f0:
07:69:76:ec:00:59:41:8f:12:6a:ca:59:4b:78:9c:
bf:28:43:10:7d:29:d3:4c:44:c3:bc:68:fd:77:7a:
45:e1:0a:f2:6d:3b:f2:37:c0:92:f0:df:e4:51:b1:
5f:3d:18:a5:47:ff:77:6b:89:7c:c4:0e:e0:eb:54:
02:e6:82:f0:25:dd:89:84:15:3d:d5:e1:b7:44:d7:
76:53:da:4a:34:df:9f:09:6c:db:91:b5:33:04:ef:
1f:8b:03:00:41:65:36:0c:99:54:1d:e2:93:df:81:
ba:1f:eb:d2:46:9f:ac:d2:69:ec:69:c7:e7:29:2d:
13:37:4f:b3:d5:fb:8e:28:0f:ce:cd:60:bc:f4:83:
90:db:47:ea:f1:c6:97:46:88:98:9b:f0:c2:c3:61:
f3:8f:f6:46:cf:2b:93:ea:a6:5f:bc:73:0e:bb:56:
0e:a6:53:97:e3:e9:0f:83:7f:56:43:bf:9e:e3:e3:
a4:6e:ec:51:be:2f:c4:be:12:8e:39:44:27:80:d1:
31:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FD:1A:E2:FC:73:4F:97:B8:D6:53:C2:7C:CE:CC:11:16:63:0E:F5
X509v3 Authority Key Identifier:
keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c0:af:ca:e5:86:e1:0c:8a:70:5a:2a:6d:ac:a2:72:d4:22:
cf:4d:24:da:c2:b3:0f:70:77:bb:b7:df:90:65:97:80:80:7a:
90:33:3f:ab:64:7f:94:4c:fe:fd:69:14:da:63:a8:75:f3:1b:
a2:5a:63:cb:13:64:82:1f:1a:9e:2c:88:95:b6:be:ff:3d:62:
c3:45:22:6a:0e:b2:ae:08:61:e7:b1:a3:5a:58:82:35:70:72:
46:50:1c:cb:08:63:62:81:09:ef:ff:08:f3:28:33:4d:29:38:
6b:ab:1a:2e:59:40:f4:d1:e9:ec:da:1e:46:b7:4b:7d:58:bd:
69:f2:d6:42:6a:8b:43:c9:51:33:36:f4:fc:05:9b:82:5d:03:
50:50:35:e5:1d:44:cc:01:4b:3b:1c:e2:bb:63:a6:91:da:bf:
8d:1a:aa:b5:3f:58:69:81:a2:df:00:2f:2c:b1:79:ca:00:c2:
00:b8:a4:d2:fe:1d:c3:bc:92:d6:db:5a:e5:10:70:f9:d6:a6:
99:c1:5d:03:cc:4b:3c:c0:f8:22:78:2d:8b:8b:46:3b:99:dc:
91:b6:0c:89:78:0f:29:31:bd:a7:b2:7d:09:87:4e:a5:1b:2a:
cf:0e:a8:0e:97:9d:82:db:77:82:15:0c:48:bf:f5:84:a9:eb:
e5:dd:9e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:12:09 2025 by rpki-client