Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier: VxiSe+nVTYBEQnRF1gRTH5fuz6U5glPP5Q74fDtdoUQ=
Subject key identifier: 1B:B7:9B:C3:A0:41:D7:A7:27:E8:8B:36:BC:AD:23:1A:13:3E:F9:90
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial: 0196BF6FAA45B686329CAC096EC9625EA3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number: 13EB
Signing time: Sun 11 May 2025 13:01:28 +0000
Manifest this update: Sun 11 May 2025 13:01:28 +0000
Manifest next update: Mon 12 May 2025 13:01:28 +0000
Files and hashes: 1: 0gLTYHFKjg375hsnlvJFz59V6iA.roa (hash: llgY0FMidtstSH+ZglQ3pmXrL20fdwyExaunpMoHzJU=)
2: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: 7xYlVsDMPPMc1JvbBbAnWcydTrDXFSIa1zDc+J/A+hI=)
3: hzOaBQqeJ1MZ-KZ4P7SZyCz4SP8.roa (hash: DRgkBXK2IQa5GIAmZXZtCYy6nVN5G7CPCGzy+FvJU0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:aa:45:b6:86:32:9c:ac:09:6e:c9:62:5e:a3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Validity
Not Before: May 11 13:01:28 2025 GMT
Not After : May 12 13:01:28 2025 GMT
Subject: CN=1bb79bc3a041d7a727e88b36bcad231a133ef990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:7c:08:4f:01:6d:99:a1:e2:71:10:75:79:
71:f1:be:d1:90:f9:40:37:9e:83:de:63:8d:e3:a6:
29:a5:5b:d6:c0:04:38:91:6f:47:89:40:92:2e:5f:
47:e4:52:c4:6e:07:46:3c:be:9f:cf:87:f3:93:5f:
3f:b3:50:d8:70:09:94:74:22:b9:98:a3:7a:4e:c8:
c0:e9:7a:aa:20:c7:dc:3c:08:ce:ae:5e:df:0e:29:
9d:e6:76:5d:c0:90:cc:f3:d2:16:eb:f0:e1:f7:85:
c4:14:e9:86:b3:f1:e0:0b:99:43:e2:ed:c0:98:24:
33:f7:d3:c1:c2:b5:a5:95:32:ee:a9:87:32:6d:96:
96:a1:09:bb:b2:5a:e8:24:de:17:04:7a:8d:c6:96:
2d:ce:3a:2b:f0:3a:be:8a:6b:83:fc:09:9b:a6:02:
fb:54:72:e4:6c:47:47:f6:2b:1b:b3:7f:0b:cf:00:
f6:70:bb:c7:12:1b:60:18:de:8c:69:cb:da:1d:1a:
80:9a:9e:83:38:9e:8a:e4:39:18:5d:ec:5d:08:ba:
aa:38:a2:bd:cf:bc:f2:cb:22:1c:13:92:06:08:db:
e0:36:97:f4:7e:15:3f:bb:71:ab:bc:a1:60:e3:c2:
61:7e:ac:4e:ca:dc:51:3d:14:04:c9:b5:8e:c3:2b:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B7:9B:C3:A0:41:D7:A7:27:E8:8B:36:BC:AD:23:1A:13:3E:F9:90
X509v3 Authority Key Identifier:
keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f9:ab:bc:98:91:75:63:65:2b:ea:6c:15:28:13:97:9d:dd:
06:96:42:41:48:5f:5a:d9:99:d4:5d:af:e4:7c:0f:ff:70:40:
17:3c:2c:ed:16:28:c5:9e:6e:23:b4:7a:46:4c:77:83:33:cd:
2d:25:7a:c1:88:3a:75:32:71:9e:80:c1:0b:85:36:85:e1:92:
97:d7:b8:5a:e2:c5:7d:8c:6e:13:49:ba:4a:28:8c:ca:12:e8:
93:65:dd:8a:65:fc:59:d6:b8:52:a4:bb:8f:e8:6b:3d:22:23:
a2:07:dc:ff:5b:59:c9:2d:a4:9c:b8:d8:a6:37:43:e4:bf:1a:
d3:ee:8d:1f:8f:f0:2b:80:ac:3d:35:2f:d1:7b:bc:62:49:bb:
b5:59:1e:74:6d:a6:18:24:ce:69:71:b2:68:b7:83:95:c3:50:
56:71:a0:5f:e7:c8:b9:25:80:09:ea:3c:53:57:03:02:16:5b:
c9:41:e4:32:72:62:9d:f3:8a:02:7d:99:37:c0:7a:18:f3:e9:
2b:e9:10:39:9e:3c:35:dc:2e:a0:61:41:12:c2:86:1e:34:2c:
48:f9:a2:5e:bd:e9:bb:d9:d0:08:8b:f3:96:a7:d3:21:99:3d:
70:f2:08:ba:31:eb:57:82:91:fb:97:84:43:df:61:53:8e:5f:
8b:a4:1b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:07:48 2025 by rpki-client