Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: 8FEJY2vPOfh3JB9OYZQGKNFllpGss+i02bcS0ZQT3GY=
Subject key identifier: 20:A0:05:D7:B5:77:E3:B3:45:69:1E:AB:4C:81:28:55:D4:EF:A6:E3
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 01958BF21F349C19FEBCA221A88910B47DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 20:00:55 +0000
Manifest this update: Wed 12 Mar 2025 20:00:55 +0000
Manifest next update: Thu 13 Mar 2025 20:00:55 +0000
Files and hashes: 1: 5jA5Josk9BqU9IUqGDRntTJ49ME.roa (hash: 32eH1PvNSkInyLcgYxDyHSfueWB890pDkTVZp7L2USg=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: gHCmePKsLQ8brX5tMDVJ0kZ0UCCOYujOjWHUbIVsSNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:1f:34:9c:19:fe:bc:a2:21:a8:89:10:b4:7d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Mar 12 20:00:55 2025 GMT
Not After : Mar 13 20:00:55 2025 GMT
Subject: CN=20a005d7b577e3b345691eab4c812855d4efa6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:b6:6f:96:d7:27:fb:d9:04:1e:f3:3c:28:
3e:87:64:7f:dd:d0:44:94:47:94:1d:00:8c:92:55:
e4:14:29:1a:5c:45:ce:b7:16:a6:97:45:5f:1b:76:
6b:aa:bf:88:c5:cf:ee:41:46:8f:16:85:ef:cb:4f:
b7:00:38:c3:73:51:e4:75:d5:5e:76:77:1f:e3:02:
9a:d5:65:0f:82:67:23:55:31:67:bb:55:eb:ff:b3:
b5:af:6c:16:57:c7:89:65:3b:b5:f0:d9:a9:0e:09:
ce:3d:8c:ca:0b:a3:f1:33:98:fe:10:42:66:63:a2:
bb:f7:26:00:f1:b7:2b:36:99:a6:e7:c6:5e:c6:fc:
7d:80:f9:19:60:23:ff:dd:3c:2a:23:f3:c9:80:80:
ab:ab:df:3c:c8:6e:ff:4f:05:13:55:52:88:51:ac:
27:86:2a:87:be:07:40:60:f4:5f:a9:5c:ee:cd:a8:
9c:ad:41:0a:d9:b7:c8:e2:6d:f6:ff:5e:c6:48:d9:
8f:71:4c:27:55:9d:e5:ad:75:94:96:aa:d2:45:a5:
4c:6d:cb:9d:e0:f5:00:00:f0:f1:84:3b:d0:90:cf:
a8:d0:66:c2:9b:d4:06:bb:40:82:f1:8d:00:e9:16:
e6:25:a3:70:7e:1d:90:ba:1d:71:19:05:8b:f0:0b:
5a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A0:05:D7:B5:77:E3:B3:45:69:1E:AB:4C:81:28:55:D4:EF:A6:E3
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b9:69:90:df:24:cb:06:95:a9:73:24:8b:b3:22:84:63:37:
21:0b:b4:94:4e:21:c3:35:c4:f6:a9:b5:e9:08:92:81:24:58:
e1:bf:2f:01:bb:1e:6a:f5:71:fd:d8:6b:56:0a:2b:52:19:67:
13:8f:8e:94:1f:a4:cd:95:04:fe:3a:2f:80:4a:e1:43:63:98:
f4:91:30:18:e4:d4:20:35:d6:5e:0a:f3:18:3e:5c:23:c4:60:
47:8f:94:d8:8b:ab:9a:e8:5f:5d:d8:5d:88:50:e9:09:b5:45:
65:eb:73:49:1e:f5:a9:8d:8e:e7:5f:ff:a3:12:c3:15:05:b5:
b8:ec:9e:38:2d:de:8e:59:19:7a:7b:2e:97:94:7c:8a:b0:e8:
40:80:c3:c2:be:07:4f:01:61:be:b5:3f:2e:9d:12:fc:5b:63:
f8:2d:e3:f8:ee:a1:49:c3:8f:c6:a2:f4:9b:eb:44:58:0f:0b:
83:d8:f0:85:7f:b3:2b:77:66:b2:13:f8:e8:60:ff:99:53:a9:
c3:72:e0:3d:75:a6:a9:01:c1:17:6b:e8:85:b4:96:12:26:74:
57:7e:cf:57:e8:ed:3d:dc:f1:53:e7:cf:cc:b2:6d:3b:ac:b7:
63:c4:57:4f:77:03:c1:83:d3:fc:e3:c9:d9:de:df:26:eb:50:
2c:6a:5b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:39 2025 by rpki-client