Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
File: i7CxfdibOGQklyi5_C7q5RD95Ps.mft (raw, json)
Hash identifier: mSI5qNf6IIWCN2v+ERHpBCa5Vz4ocEaFwNK7YczALl4=
Subject key identifier: 5B:DF:78:59:E1:E4:4A:64:C7:B2:95:3E:19:59:0C:C7:6F:1F:D0:C8
Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
Certificate issuer: /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Certificate serial: 01963DD3CC6FE4C0D5BCB1317E93D2B6AEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
Manifest number: 0717
Signing time: Wed 16 Apr 2025 09:00:12 +0000
Manifest this update: Wed 16 Apr 2025 09:00:12 +0000
Manifest next update: Thu 17 Apr 2025 09:00:12 +0000
Files and hashes: 1: i7CxfdibOGQklyi5_C7q5RD95Ps.crl (hash: Y2Zrr8aLnLSTablF5EXisrSVxukUg+mbQ4BO7DzKGdU=)
2: kpL1mBA7PiBUtfdmw6AVzfdGe84.roa (hash: X1ZTIcXTz0jbHRbURZ6ZK36qgjM4K05EqBeOsJvnW6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:d3:cc:6f:e4:c0:d5:bc:b1:31:7e:93:d2:b6:ae:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Validity
Not Before: Apr 16 09:00:12 2025 GMT
Not After : Apr 17 09:00:12 2025 GMT
Subject: CN=5bdf7859e1e44a64c7b2953e19590cc76f1fd0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e6:d6:84:39:10:8d:78:a1:2e:95:ae:c0:af:
79:bc:69:22:af:2e:e9:db:6c:6e:06:a8:ff:a6:4a:
0c:4e:83:72:fb:16:33:2c:eb:e4:be:df:f3:c8:d3:
88:39:bb:d7:89:af:37:c4:42:78:53:af:cc:1a:5d:
50:64:08:79:2e:90:1b:5d:59:aa:ab:d9:6c:d8:a3:
99:2c:6f:da:cd:fb:33:74:27:65:3b:a9:09:0b:1a:
9f:fd:8c:0e:99:23:4d:7b:3c:71:db:59:52:7f:68:
1f:5c:08:42:4c:62:b6:61:06:d9:2c:66:89:d8:8b:
74:bc:44:84:1d:ca:59:ff:70:bd:83:a8:58:23:a9:
bd:db:90:22:8d:3a:a3:8b:22:43:69:4d:42:cd:99:
6b:58:02:db:cd:51:c4:f4:33:1a:09:b6:c7:0e:db:
1a:56:be:aa:36:1e:6a:1c:7e:19:8a:5c:41:08:d0:
9d:b2:3a:a9:29:a7:f8:7d:d4:b3:f3:18:2c:e7:ef:
33:1b:10:0a:d9:8f:17:9d:e1:0a:a9:9b:37:ca:6e:
fc:05:2a:89:97:12:4a:aa:d9:8e:82:5c:ab:d8:90:
44:b0:76:ee:fd:8c:e1:25:3b:07:f6:7a:9a:6f:57:
7f:68:41:2f:c6:4b:54:37:30:04:0c:16:83:bc:a1:
73:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DF:78:59:E1:E4:4A:64:C7:B2:95:3E:19:59:0C:C7:6F:1F:D0:C8
X509v3 Authority Key Identifier:
keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:23:61:ac:17:15:9d:46:ae:f5:86:db:d6:39:98:3b:45:3a:
71:9e:37:30:7b:c6:96:d2:29:98:ba:d9:95:31:ea:24:97:e4:
61:03:8f:58:6e:8c:8d:35:90:67:a4:7d:02:5f:a7:e1:97:16:
cd:87:4c:d0:2d:b0:e7:5f:2b:15:13:d9:5b:81:b8:d1:30:1f:
de:10:58:15:17:2d:69:ae:47:e6:b7:37:a8:63:91:20:55:1c:
df:07:33:24:d9:6c:a3:72:9f:55:8b:30:0a:3a:2b:4f:5d:70:
a0:21:0a:67:bb:0c:74:73:76:c9:29:7a:e7:bb:52:7d:53:35:
10:20:57:35:91:17:82:af:8a:9b:42:49:05:b9:11:2f:7f:5b:
c2:e9:38:fd:81:ff:d6:2e:f3:30:77:9c:18:db:c9:92:e0:7d:
79:e2:16:e1:f1:2c:f1:7e:b5:22:25:74:52:e0:6c:da:c1:3e:
19:70:60:19:9b:7a:ac:ba:e4:ae:f1:38:5f:c7:7f:e0:c4:0f:
d0:e5:88:d8:08:94:e5:80:11:9e:e5:32:ee:e0:3c:7e:d4:f5:
2d:23:bf:15:15:7c:68:97:f2:4f:0a:70:38:51:3f:90:68:18:
2b:1f:a9:e6:3c:f9:ed:fb:b9:3d:ae:02:1d:76:a2:e1:84:a7:
ff:bf:53:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:14:16 2025 by rpki-client