Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File: p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier: ZXmk343s6Dex0pd/sPXdPQDqP3W+IHVQlbevalo74xE=
Subject key identifier: DB:DE:33:C2:A5:DF:36:45:F9:F2:5A:83:AB:77:5D:E6:51:FF:66:64
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer: /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial: 01965EDFA91AD02FD677F6664B1A105AD4A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number: 1214
Signing time: Tue 22 Apr 2025 19:00:38 +0000
Manifest this update: Tue 22 Apr 2025 19:00:38 +0000
Manifest next update: Wed 23 Apr 2025 19:00:38 +0000
Files and hashes: 1: N0eHqNrggmbXdN8YP7o5Fb0Yns0.roa (hash: qT9/mEc5C1UH5p/xUpYvOvJn3BjOEx+x0C4t/XVyfCg=)
2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: q65buRKMJPUMway8F3wp/fCBMzZTU8tsPVT0tphsnsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:df:a9:1a:d0:2f:d6:77:f6:66:4b:1a:10:5a:d4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Validity
Not Before: Apr 22 19:00:38 2025 GMT
Not After : Apr 23 19:00:38 2025 GMT
Subject: CN=dbde33c2a5df3645f9f25a83ab775de651ff6664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e7:5c:19:5b:8c:bb:50:ad:0d:0f:c6:da:c7:
47:a1:62:4a:a8:04:3e:3c:ee:94:ee:90:a7:80:45:
6f:e6:07:cc:b5:0a:e9:b8:da:df:e6:a7:16:e5:88:
66:c8:dd:26:36:1f:22:bd:79:b1:6b:09:f6:c9:f5:
2a:d8:a7:6d:c9:4f:03:c5:dd:ba:c1:71:a1:df:a9:
18:51:8e:77:61:21:3a:42:63:70:a4:e6:85:08:c3:
38:19:03:c0:c9:d8:71:c6:64:17:c8:df:d9:c5:e3:
70:58:dc:bc:c7:3b:28:19:98:ef:61:3f:2d:ca:5f:
7e:2e:d9:f7:cb:4c:78:b6:94:ff:f8:20:be:e6:43:
37:fe:08:60:a4:86:11:68:3a:56:a3:1b:6d:57:c3:
3b:aa:9f:f9:52:be:3c:98:d1:4e:e4:84:ce:df:c7:
20:28:4e:a7:26:1b:38:28:37:56:2f:65:6d:98:e1:
0c:12:06:0a:47:0e:98:2f:ad:ea:0e:4d:c4:cc:0e:
77:ec:5d:ca:1c:2d:34:26:27:13:af:3d:c3:90:70:
bd:d5:c8:d5:29:e9:aa:7a:41:05:fd:d0:d3:eb:8a:
3a:bb:bb:fe:70:59:a3:1e:e2:40:e1:bb:6e:0a:c6:
20:4e:12:c8:d1:67:0d:01:fe:e8:04:29:d1:2e:ce:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DE:33:C2:A5:DF:36:45:F9:F2:5A:83:AB:77:5D:E6:51:FF:66:64
X509v3 Authority Key Identifier:
keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:82:90:94:e6:63:93:d6:58:d2:e8:f6:08:00:1e:a1:ac:e7:
c1:8c:60:d2:82:1d:8f:38:74:f2:8b:aa:94:1a:2e:da:c8:d8:
26:95:fd:3f:eb:ef:b9:50:a1:18:6c:28:3e:a8:e0:c0:23:b1:
3c:cb:ee:4f:dd:2f:af:51:6a:c2:48:0b:38:af:00:75:ab:82:
7f:7d:c2:02:98:06:49:b1:bb:0b:d8:7e:52:c1:b2:71:3a:f0:
ec:11:99:db:b5:c2:c9:1f:92:90:e5:e8:54:42:1a:39:fa:1a:
33:c9:d1:54:73:da:03:e0:71:b0:de:cf:ee:11:b5:bd:f5:00:
ec:08:d5:6c:dc:ad:be:71:81:0d:ed:ea:74:ce:82:fb:38:f2:
8a:ce:bc:56:29:a0:e6:4a:18:7f:46:50:27:6f:ff:a8:a2:ba:
57:97:31:dd:9d:54:08:33:ca:22:fd:8e:d5:cd:7c:de:3a:9e:
89:f8:fc:2d:8a:96:0c:82:b3:80:8d:aa:4f:a9:58:7c:a7:eb:
11:29:1a:19:ab:1c:5a:a6:20:ff:f8:dc:ff:a8:54:c8:16:09:
75:e2:7f:af:19:a7:b6:38:a8:65:2f:0f:b1:f0:2e:b3:a7:ab:
4f:06:57:f5:58:9e:00:01:91:85:33:05:03:62:c1:de:96:b8:
1d:b6:34:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:20:49 2025 by rpki-client