Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
File: r7ALKTlueAM-26yv75hQsbDjUyM.mft (raw, json)
Hash identifier: VmcE8/aO6wij4h0uQQxRwZxqIUjrm3N09SwlOkTfOtY=
Subject key identifier: D4:34:5A:6C:14:F6:CA:DF:3C:F9:2D:7B:6F:AB:BA:8B:7E:7F:22:BA
Authority key identifier: AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23
Certificate issuer: /CN=afb00b29396e78033edbacafef9850b1b0e35323
Certificate serial: 019578D8F892FAB235CA3F90B093B56013B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
Manifest number: 0D39
Signing time: Sun 09 Mar 2025 03:00:40 +0000
Manifest this update: Sun 09 Mar 2025 03:00:40 +0000
Manifest next update: Mon 10 Mar 2025 03:00:40 +0000
Files and hashes: 1: CY3YIBeeXy7d304leRk_84B6aOw.roa (hash: a5cqctkZKmbgtiXrSitwhHqbpFExqVK4hQecaTEUPK8=)
2: r7ALKTlueAM-26yv75hQsbDjUyM.crl (hash: yUBORf1zSLyGXc3zl0t5Q3i+Yv+yC5W3Jf45AHPv1Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:d8:f8:92:fa:b2:35:ca:3f:90:b0:93:b5:60:13:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb00b29396e78033edbacafef9850b1b0e35323
Validity
Not Before: Mar 9 03:00:40 2025 GMT
Not After : Mar 10 03:00:40 2025 GMT
Subject: CN=d4345a6c14f6cadf3cf92d7b6fabba8b7e7f22ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:c8:1e:ae:ad:de:66:54:12:3b:c7:c5:fb:
93:61:b7:43:6d:43:03:c2:6e:98:47:f6:16:8b:de:
46:85:7e:66:a5:73:8f:d5:c5:4f:77:c5:30:1a:5e:
bd:d0:79:18:75:b7:81:47:b1:46:5e:9a:21:20:d7:
c4:0b:71:cc:26:07:d8:14:c2:34:59:88:4c:4c:f6:
66:c8:11:97:f6:40:77:45:0a:bf:34:eb:28:20:ce:
2e:26:c1:0c:a6:a3:de:9c:2a:27:bc:ad:08:c8:7a:
e9:b2:19:87:78:79:42:94:01:8f:70:a9:89:8e:f5:
04:c3:a0:b9:fe:68:58:62:5d:ab:f4:d3:f1:6c:2f:
52:11:b1:14:1e:dc:3e:2a:82:88:73:b4:d7:a3:f9:
90:7d:3b:fb:2f:0e:94:9d:d2:6b:a1:7e:96:76:06:
6e:c1:32:fe:fa:c9:cc:7d:1c:93:6e:d9:6d:37:a3:
fa:85:bf:73:6b:7b:a9:d2:e6:d8:a0:4f:9d:37:ee:
95:58:17:1a:f3:cb:84:8d:b7:3d:f3:f5:ea:cb:db:
1f:1e:18:b9:cc:92:8a:c7:4b:ff:c7:92:35:55:36:
26:63:6e:76:f0:8c:af:9f:af:02:d9:67:96:48:14:
25:0e:ac:3a:87:06:02:90:76:f4:fa:06:5f:4b:98:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:34:5A:6C:14:F6:CA:DF:3C:F9:2D:7B:6F:AB:BA:8B:7E:7F:22:BA
X509v3 Authority Key Identifier:
keyid:AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:73:9b:11:eb:a0:d5:52:f6:61:88:bc:e0:6c:90:fe:10:94:
fe:18:0c:3a:a2:4b:2f:46:85:07:96:65:5a:b8:b8:65:30:d8:
a9:26:70:04:e2:13:99:f7:f1:dd:98:f7:31:28:ab:90:31:03:
3f:2b:f7:e3:48:ca:ff:fa:5d:36:83:b8:95:28:ee:4f:aa:d5:
4d:d8:08:dd:0b:6f:59:f2:86:03:1f:08:08:54:7c:37:8a:04:
cb:58:24:af:34:fe:ed:1b:0c:f0:cc:ce:76:a5:c0:8e:02:14:
9f:3c:ad:2b:c0:6e:41:75:ee:34:26:56:59:8d:33:b9:ed:3a:
ca:36:06:3a:d8:be:08:87:07:be:a9:45:a5:58:52:5d:1f:68:
49:0f:d1:93:84:6b:14:4d:21:73:77:a5:43:24:e6:d9:f8:2e:
bd:f3:aa:2f:d8:4b:8b:33:fa:79:41:42:dc:55:97:b3:bb:83:
6d:d9:95:1c:e4:9d:ed:35:ea:ad:fe:f2:12:38:80:e7:81:bd:
3b:d5:53:8f:f7:1c:bb:e0:0b:71:c5:c2:47:dc:fe:39:3d:4f:
16:58:15:08:4b:f8:7a:da:3e:d4:5d:98:eb:04:ca:c5:4b:c1:
76:7f:87:e6:b6:37:81:9f:02:97:ef:a6:52:e6:32:11:94:6f:
4d:0b:45:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:33:59 2025 by rpki-client