Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: 4LklKfhusI3XD9c3969LvLfSt1pbe9IYpZ0L0fUs3X0=
Subject key identifier: 1A:BF:D4:94:4D:8E:D6:AC:AE:01:CD:ED:5F:DD:67:4A:FF:B9:49:D0
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 0196477C2D969620584EB3285466E518F1BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 06:00:42 +0000
Manifest this update: Fri 18 Apr 2025 06:00:42 +0000
Manifest next update: Sat 19 Apr 2025 06:00:42 +0000
Files and hashes: 1: 1utcwuOmOI7txytHlcapG00bDWQ.roa (hash: KoDsbv2AuvIm5mO9VxRMXrTvsRyvxgVtQhUhy9Zv0J4=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: uHKsFKFkokQzB/aZmLomEyDdaXDOhhfSggM9InNgjJo=)
3: TrlTZgPgCl4W0jfXLUtGOTnjCCI.roa (hash: SXaSky/YVlsAmsXgPwkA8PXkQ+jueu3hy97DblT9VwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:7c:2d:96:96:20:58:4e:b3:28:54:66:e5:18:f1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Apr 18 06:00:42 2025 GMT
Not After : Apr 19 06:00:42 2025 GMT
Subject: CN=1abfd4944d8ed6acae01cded5fdd674affb949d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:22:46:55:d2:6c:77:e0:78:c6:f4:62:87:
98:63:0a:4a:57:4e:a2:a0:a0:5c:7c:d5:c7:0a:52:
22:b4:29:c3:73:c2:96:3e:ec:f1:20:01:df:c9:ce:
2b:2e:63:89:0e:0c:3e:6b:9c:c1:8f:77:e8:19:a4:
64:a7:ac:9c:a9:ca:d1:ab:70:37:eb:d3:9b:67:ec:
3a:15:2b:af:76:26:0b:8a:ce:de:14:24:d8:2d:58:
71:35:fa:a7:95:e8:63:a2:2d:8c:af:8a:7f:35:8c:
f4:6e:92:30:3e:7f:26:a5:cd:6a:73:2c:9e:9b:86:
cd:18:26:06:f5:51:7a:54:41:0a:b8:d1:45:7b:39:
4e:27:c0:57:fa:e0:71:34:b7:c9:e3:0d:fc:52:18:
8b:b6:b2:64:94:6d:54:34:0c:67:0a:d4:0b:4a:f9:
5e:08:8b:d2:90:1c:2f:c1:75:1f:f1:21:71:ac:44:
76:06:e8:c7:83:de:18:3c:f9:fe:13:24:25:c4:0e:
5e:cf:f5:4c:6d:61:22:15:de:1f:40:e5:de:41:06:
dd:67:f8:e8:fe:f2:e6:a1:c6:69:87:ab:1c:8e:23:
5f:0d:98:c7:e8:ac:de:e0:0e:34:2d:bf:24:76:1f:
fc:dc:52:fd:a3:a3:b5:10:84:60:67:c7:dc:e9:c8:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BF:D4:94:4D:8E:D6:AC:AE:01:CD:ED:5F:DD:67:4A:FF:B9:49:D0
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:24:2c:23:20:3f:b4:af:10:88:8c:63:d9:4e:89:22:73:dc:
28:cb:9f:31:7f:74:e0:57:71:f3:27:1b:54:a5:e6:f0:da:89:
69:c4:1e:3d:f9:8b:a5:ce:b3:0d:1c:30:43:6d:54:9e:d7:1d:
42:d0:8b:13:9c:a6:8f:af:71:a6:7b:4d:bf:ba:2e:89:32:ef:
0e:2b:98:9e:ce:c3:7f:ed:ec:6a:3e:3b:7d:04:63:cd:25:ca:
e6:9a:3a:5b:88:2a:f5:d1:49:b6:5d:e6:8d:4b:36:77:02:2b:
b4:5d:94:fe:d2:5f:39:33:9f:3d:4d:1d:2d:9d:40:00:f4:24:
b2:d4:b1:f0:07:a9:70:64:a6:d3:0c:68:5a:ef:fc:31:1d:fd:
6e:46:a9:d8:04:ec:5c:16:25:4d:0a:ab:b0:75:37:83:8b:57:
2e:f5:9b:67:27:03:9e:9b:a2:6f:67:63:29:18:79:37:d6:23:
f3:46:ad:c7:f4:34:13:d1:95:be:12:fd:18:be:23:96:44:76:
f7:f0:ca:2d:4a:8f:35:7f:49:6f:73:91:8d:d5:52:ef:35:9d:
c4:3e:fd:34:72:3b:e0:53:71:fb:c0:53:30:c6:45:df:53:4e:
3a:90:d1:e8:ff:2a:77:6b:01:e6:5f:f3:44:54:6a:c3:64:ff:
2f:27:a7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:35:51 2025 by rpki-client