Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier: wEBOmPaLV5eZLuZq5a1zFL07HT9Y36bYKf+qrgbnsfM=
Subject key identifier: 9B:B9:22:48:88:AB:7A:1F:25:D5:1E:7C:AA:8C:35:50:25:46:5B:F4
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial: 01963FC23D4AEFF43A5D1C8DEBF276B10138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number: 123D
Signing time: Wed 16 Apr 2025 18:00:16 +0000
Manifest this update: Wed 16 Apr 2025 18:00:16 +0000
Manifest next update: Thu 17 Apr 2025 18:00:16 +0000
Files and hashes: 1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: qBNY+2kC+423Yf7mBYEXKIRCp4FNWI9eCIKMLfd5gYM=)
2: RFaAPpt9TXRuZiSBVJ4x95FnZpg.roa (hash: r/BjBoSYQEd6zQy913IAV7pMwCR1j9bdd+qgN4vkxf4=)
3: mw-NfFERPD2qaYVgEjUcNQ0zcPs.roa (hash: AZitnGA9oKjnHTuxpFFMdyJwJocQCVTArIP5ASVi2R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:3d:4a:ef:f4:3a:5d:1c:8d:eb:f2:76:b1:01:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Validity
Not Before: Apr 16 18:00:16 2025 GMT
Not After : Apr 17 18:00:16 2025 GMT
Subject: CN=9bb9224888ab7a1f25d51e7caa8c355025465bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:bb:99:e2:bf:46:71:f0:9a:96:28:c1:83:
80:31:dc:73:ec:1b:f4:a0:2a:49:22:02:72:af:e5:
3d:b1:a6:ad:7a:51:63:c0:75:e6:d9:32:ee:10:1f:
b1:c3:d8:4d:06:49:2d:d6:56:38:08:19:7c:19:e2:
ad:4d:99:f0:a5:32:33:08:c4:24:29:7c:58:b2:4c:
4f:26:b9:16:9d:f7:57:60:a9:26:9b:19:8e:3c:79:
24:b2:e1:3f:29:62:ad:9b:e6:f3:f8:ff:01:1a:b5:
d8:c8:f3:ff:17:a1:e0:b2:58:59:59:05:06:25:fd:
42:b3:fd:01:87:12:30:c7:7f:31:51:f6:9a:4f:5e:
47:9b:d7:76:c4:82:6d:9d:e7:e0:de:b0:03:5f:29:
77:3a:4c:b2:e3:5e:51:87:57:6a:21:29:6c:e1:62:
db:5d:dd:49:a2:6d:36:8b:98:49:a2:70:cf:fe:8a:
67:df:c3:5d:ef:6b:9b:70:de:58:dd:b1:a1:e6:64:
ad:72:b2:6a:d0:d2:b9:79:b7:6c:c5:48:2b:e2:8f:
80:a9:5e:fe:fd:ca:c1:56:85:ca:7b:55:dd:4d:2e:
81:ee:72:9a:ca:d2:58:a1:7a:92:44:32:d1:1c:f3:
34:81:77:20:b9:b7:52:3b:e7:81:21:d6:56:ff:2a:
c2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B9:22:48:88:AB:7A:1F:25:D5:1E:7C:AA:8C:35:50:25:46:5B:F4
X509v3 Authority Key Identifier:
keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:12:b6:03:25:29:8c:b5:ac:ff:12:db:28:9b:d5:da:6b:18:
d1:01:26:c4:3c:0b:ba:60:f1:6e:6d:a5:48:63:d5:89:c3:dd:
7b:77:90:4d:45:76:65:ee:39:8e:35:6e:cf:5e:83:76:a0:7c:
3f:ed:de:e2:45:c0:e1:c2:2d:a6:6a:e0:d4:53:6c:83:8c:95:
4f:c8:56:2f:33:1d:6c:5b:04:03:a6:6d:77:60:6e:3f:e9:16:
5b:fc:78:c2:72:76:49:34:d0:e5:1f:f4:0b:b9:cc:53:ea:e9:
72:d5:43:74:c5:41:18:e9:58:ab:06:70:16:41:e3:91:63:f6:
9e:86:b8:7f:e8:a1:ea:c4:3c:14:b4:37:7d:9a:2c:15:bc:b1:
1d:0f:10:35:11:0a:24:f0:28:46:ec:cc:c1:aa:0b:00:07:3a:
05:61:9e:63:d5:ff:53:7e:7e:5d:a8:32:df:d4:0f:fb:a4:4c:
0b:55:f5:02:66:78:14:59:5d:90:eb:11:fc:3f:e2:53:c6:85:
17:73:b1:11:06:da:a4:84:d1:4e:c0:ab:39:c5:8f:59:a5:a1:
82:5f:ba:be:cf:4a:2e:6f:0d:07:8e:42:7a:33:c8:19:b3:ff:
62:38:22:96:1e:1c:c6:87:0c:8b:d2:a8:8e:38:e2:12:7a:d8:
b9:82:7c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:23:40 2025 by rpki-client