Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: CDczxh5saIzl7dzt+gSllZrIQB1ALdtomc+0KNZHEeQ=
Subject key identifier: 2D:80:D6:41:BB:FA:FE:BB:F9:15:40:A8:89:F4:F9:B7:13:E3:8B:FE
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 01963BAEE6DB15FA6D6C47013936AD0140A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 14F7
Signing time: Tue 15 Apr 2025 23:00:40 +0000
Manifest this update: Tue 15 Apr 2025 23:00:40 +0000
Manifest next update: Wed 16 Apr 2025 23:00:40 +0000
Files and hashes: 1: 5yD7BMGOx_QxkEbApVWEDtAyJTc.roa (hash: 7HUgyfi698gsVlFHfeKtkaA7m5SlO3zRzjiuZrYZF5I=)
2: RqGemHASq4a3yEktWB8WjU_L-0c.roa (hash: vaorPMqPLbSGClI0kn7HOZCELp91/Z7k6rtXVGnH8yc=)
3: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: 022Slv0fvYHM70nuTVu5rUA6wiidmxMxc+S5BVwXPFg=)
4: ryABSBgMLByw-XFfZ_8SVzjoEH4.roa (hash: Qmf/YZ6xzpzD9CwzHR2N62ZnpRrAxDW7s9aRsiehW1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:ae:e6:db:15:fa:6d:6c:47:01:39:36:ad:01:40:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Apr 15 23:00:40 2025 GMT
Not After : Apr 16 23:00:40 2025 GMT
Subject: CN=2d80d641bbfafebbf91540a889f4f9b713e38bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d7:b9:01:b2:03:31:e6:a4:28:6d:af:a7:81:
a1:25:f6:38:04:ba:a3:83:79:78:08:c3:f6:ec:7c:
fb:5c:44:57:6e:97:70:64:53:63:3b:b2:a9:b7:55:
cc:7d:fe:ed:58:5e:6c:b2:bf:52:da:2d:05:e9:5b:
6d:bd:a0:06:84:78:e5:93:c8:13:5b:c8:d1:13:cf:
68:79:f4:5b:c1:f4:79:de:08:82:69:a8:6d:7b:88:
d9:7c:77:3c:f2:27:4a:cc:87:a9:8d:f6:b8:1c:a1:
52:4c:19:b3:28:af:9b:49:d6:ab:4c:85:8e:3e:b7:
14:95:c2:3b:c0:65:97:9a:83:4c:97:94:f5:39:36:
c0:3e:f3:2d:40:5b:ff:0d:51:46:68:4c:80:85:45:
00:5e:7c:5e:f4:ab:c3:fc:f5:4d:78:05:b5:03:62:
c7:42:fa:22:1b:83:30:79:41:ac:ac:02:e4:5f:70:
6e:81:02:23:37:fe:a5:27:08:0d:41:a1:63:b1:3d:
97:d4:fd:a1:d4:e3:d9:89:0a:98:0a:b8:c4:6a:03:
40:4e:a4:9d:06:ed:59:4f:65:96:2c:65:5d:75:5a:
e9:fa:6a:a9:6d:f4:6a:9c:a0:ab:8f:ad:01:bc:eb:
c9:00:67:49:7a:60:4f:9b:3c:31:be:f4:12:e6:54:
97:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:80:D6:41:BB:FA:FE:BB:F9:15:40:A8:89:F4:F9:B7:13:E3:8B:FE
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8d:e3:a2:20:1d:53:fe:76:84:01:8f:d9:92:da:df:81:52:
be:8d:03:e2:a4:06:1b:e6:a5:2a:4d:22:60:cd:0b:38:5b:c5:
2b:e5:6d:54:75:0a:fc:57:b1:84:7c:0b:78:be:a7:58:c7:ca:
85:c5:3b:d8:f0:82:b8:75:1f:89:a5:96:75:a9:36:9c:a0:c8:
ab:68:a7:16:6c:09:ab:3f:63:34:ef:bc:30:0e:87:64:26:e0:
48:5f:e5:34:b2:2b:ac:85:d7:08:41:7e:62:b2:ec:36:84:7f:
8c:69:db:f5:77:83:7d:9e:75:e6:89:0b:6f:61:d1:44:84:cf:
9a:b6:ca:67:df:a5:41:5a:a0:b8:85:12:f0:0b:55:2f:63:b3:
32:7f:81:f4:83:eb:82:66:b9:c0:f2:18:06:d4:54:05:55:43:
e2:81:f8:d1:d6:60:ff:89:38:f1:33:ff:ca:90:33:4f:bc:fc:
53:e8:60:df:82:ec:e1:da:c7:ad:9a:d3:dc:24:c8:30:90:fa:
6d:ee:1a:dd:27:66:1b:3d:d1:b5:4f:92:7e:d7:25:73:f0:80:
b9:0f:88:36:76:e8:b7:b5:ab:e0:5b:ed:fc:73:ee:71:57:3f:
41:8a:27:91:4a:49:25:eb:f0:26:bd:99:04:24:e0:30:6a:31:
16:0c:f0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:06:56 2025 by rpki-client