Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
File: 58fsjXgFA9t8q8sUHWuZHNAppqI.mft (raw, json)
Hash identifier: IwzLHDTOJJb1yGrl9dbbSzumYraOS6k835e4VszuLg8=
Subject key identifier: 59:AF:BB:43:67:58:64:4A:DD:CC:D9:35:B4:6C:14:64:0F:DF:E0:DA
Authority key identifier: E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2
Certificate issuer: /CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2
Certificate serial: 01965236C1C488EC5FB6F3B419018280051D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
Manifest number: 0EF7
Signing time: Sun 20 Apr 2025 08:00:42 +0000
Manifest this update: Sun 20 Apr 2025 08:00:42 +0000
Manifest next update: Mon 21 Apr 2025 08:00:42 +0000
Files and hashes: 1: 58fsjXgFA9t8q8sUHWuZHNAppqI.crl (hash: mpnhKN95DNEjxYsXr15/GA/MGzbA8x36Zkvhp5LuLkI=)
2: Gr2bTac37FdQF97pGkH13J5M8LQ.roa (hash: oaatGmufJtltyljxjCY0yrTcOMqVjEXZ2p4QbghN278=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:c1:c4:88:ec:5f:b6:f3:b4:19:01:82:80:05:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2
Validity
Not Before: Apr 20 08:00:42 2025 GMT
Not After : Apr 21 08:00:42 2025 GMT
Subject: CN=59afbb436758644addccd935b46c14640fdfe0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5e:9f:8f:77:69:a4:2c:25:81:8d:c8:86:65:
6f:7f:e8:50:2e:4d:6e:64:33:3a:3c:0f:5e:23:70:
e1:e9:c2:53:5f:0d:b1:12:1f:77:09:ad:f5:4e:80:
7e:c0:c6:c8:d3:08:11:22:c8:bd:f8:44:66:8f:f7:
07:b1:70:8c:06:58:4a:f6:95:e4:e9:51:ed:a0:fe:
1b:af:23:f2:5f:cd:75:d1:39:4c:70:62:8a:e4:91:
1b:db:99:8a:a5:9b:99:8e:e0:61:e3:1d:e7:91:73:
2e:3b:4a:06:ab:18:b2:a9:1f:78:05:9e:a5:53:95:
fd:83:bd:9a:19:7a:e8:7d:b7:66:a8:c3:4c:72:16:
3e:6a:e5:96:02:31:ec:56:c9:11:a6:be:dc:a9:53:
d1:5d:47:b6:bb:ea:19:94:b4:fb:20:17:f5:0e:86:
2a:71:03:79:ac:a3:33:95:6a:71:49:90:4d:18:8d:
cc:f9:c6:71:2b:a6:a6:9a:46:21:c0:62:46:ef:88:
72:59:c8:2a:ea:b8:2e:76:37:31:65:a0:c1:80:86:
02:d1:23:41:74:e6:4a:73:48:03:a3:45:81:81:0f:
63:60:a0:97:7f:63:b2:d0:1c:d3:81:50:f3:8f:24:
2d:24:f3:2c:f5:93:1d:8d:bc:dc:f8:bc:53:6c:27:
13:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AF:BB:43:67:58:64:4A:DD:CC:D9:35:B4:6C:14:64:0F:DF:E0:DA
X509v3 Authority Key Identifier:
keyid:E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f8:03:79:66:81:ae:2c:6f:3d:dc:a1:e4:59:c9:ff:3b:5f:
99:78:08:0b:85:eb:c7:ed:ea:e5:54:1b:11:a2:9b:83:e6:09:
fe:8f:07:df:b9:f9:bd:c6:02:9f:1a:ea:86:b5:58:86:db:01:
36:ed:e6:44:90:fd:91:b0:7b:d5:b0:fa:c0:fa:b9:03:52:23:
e5:eb:d9:c3:25:47:2b:f0:3b:a1:3b:01:1a:54:06:5f:ca:4d:
73:4c:1b:c5:f6:9c:71:40:8b:f9:8f:82:54:3b:64:3f:65:51:
ca:f9:11:fb:4a:2d:86:2d:d5:d8:4d:dd:e7:b6:b7:99:e7:f5:
82:f2:94:a0:e9:eb:72:74:bf:73:aa:bb:11:38:c4:8f:1d:bd:
8a:c3:32:c8:e1:c6:8b:69:72:14:6c:97:e3:33:8e:89:74:94:
2b:0b:a9:00:eb:41:26:9d:30:ee:4d:6b:eb:bc:a2:5d:3a:54:
c1:f5:49:eb:5e:05:2b:02:d2:3c:7c:3e:56:12:f2:d0:5a:db:
e9:e5:e4:d7:9a:a9:4e:d8:78:5a:3c:9c:a3:3a:9c:97:76:af:
26:27:a9:be:73:c9:15:ac:0b:51:0a:99:14:a2:56:56:ad:5e:
12:5d:a6:be:68:e9:43:6b:bb:3e:4c:69:f8:cf:ce:e0:f8:14:
72:58:4f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:55:15 2025 by rpki-client