Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
File: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft (raw, json)
Hash identifier: +QWiBt2Qd8+F/6I/og7pz1drj9l1wLn/UxoDjrnUiZc=
Subject key identifier: A4:25:BD:5D:51:D0:EC:49:D1:51:85:85:DD:18:6A:F6:C5:87:33:D7
Authority key identifier: ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
Certificate issuer: /CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Certificate serial: 0196AE0E03683871064AFE9C1B187F90ED53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
Manifest number: 152F
Signing time: Thu 08 May 2025 04:01:16 +0000
Manifest this update: Thu 08 May 2025 04:01:16 +0000
Manifest next update: Fri 09 May 2025 04:01:16 +0000
Files and hashes: 1: 3pE7ngeyN1HHpk0KHj4fUNdQvUM.roa (hash: mNG9h0i2ooRim+EzKgj5oXfWKRS+vfBHN7OSNoR8nx0=)
2: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl (hash: o/Sdp66MnsFV6iYzicScCUF+7+0dPfx4hajah5fbSNo=)
3: NtkJ9XnrruhKtg-qQfEiGBcXIF8.roa (hash: Jv+k94qXBgLa6tQsUzrVhcRNbmkihG2wPv1tzN8y6Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0e:03:68:38:71:06:4a:fe:9c:1b:18:7f:90:ed:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Validity
Not Before: May 8 04:01:16 2025 GMT
Not After : May 9 04:01:16 2025 GMT
Subject: CN=a425bd5d51d0ec49d1518585dd186af6c58733d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:5c:cc:0e:d2:bd:9e:81:a6:68:ec:cd:bd:
62:f3:14:0c:35:eb:c3:a8:cf:31:90:a0:c6:dd:69:
6f:c5:7f:62:bf:70:a2:ab:e1:05:31:ec:5b:12:34:
51:af:c2:d4:8f:ad:4c:45:ad:c2:b9:6c:d7:a2:3e:
15:9c:90:e3:ab:19:02:44:2f:04:21:5e:4e:5d:11:
ca:ef:44:40:63:95:17:8e:0c:80:c8:4e:49:8d:fa:
24:99:85:6d:82:79:e3:65:13:2d:11:73:ce:39:c7:
ac:00:78:16:9a:fa:59:96:68:61:ed:bc:d9:d5:63:
87:e0:f0:b1:74:d7:61:1a:36:3e:d9:71:a7:0e:31:
5f:cf:cb:a6:56:a4:61:f1:c2:10:65:11:08:95:35:
2a:58:5e:43:8f:f3:56:df:0d:ae:b9:e0:ee:e3:8d:
a0:94:dd:99:16:c4:3f:f3:5a:2f:70:73:2a:f9:5a:
23:ac:57:2b:eb:60:e9:e8:5d:7c:67:58:3e:36:12:
d7:65:18:b6:0a:32:e5:4a:af:b5:49:b7:7f:53:3c:
0c:c9:6c:e1:04:79:60:27:c0:64:98:09:13:04:83:
a7:f0:26:ea:8e:7a:7f:3e:24:53:2b:b3:45:d6:38:
57:0e:18:97:61:5d:84:a1:b3:3b:10:58:36:16:27:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:25:BD:5D:51:D0:EC:49:D1:51:85:85:DD:18:6A:F6:C5:87:33:D7
X509v3 Authority Key Identifier:
keyid:ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7e:e7:b2:0d:ba:45:2b:f1:36:50:e7:f9:9b:87:98:66:52:
43:31:d7:9c:5c:a3:49:41:93:ca:3e:f7:3b:20:22:06:40:3b:
17:37:98:56:ff:31:c6:de:20:fa:b7:01:78:99:e8:7c:ad:5c:
74:f9:57:db:e6:f7:12:51:11:46:89:d2:00:d3:6a:0b:5d:d5:
e5:35:f1:59:a2:ca:c9:cc:54:9c:d4:14:88:ac:d9:60:93:99:
18:ad:86:40:5e:ba:81:23:a8:09:c7:ce:3f:4b:c2:76:b3:85:
57:0a:24:1b:4c:97:c5:1b:c2:09:f2:c1:9d:f6:52:41:ff:ad:
90:e0:8e:a0:a5:57:4b:05:53:c0:a7:98:46:72:96:1a:9b:13:
dc:c9:b8:11:44:21:ff:a9:8e:a2:32:9a:a8:cc:25:e2:37:11:
8b:fd:20:ee:40:2c:b7:08:af:0d:c1:75:9b:3e:b0:be:3b:90:
26:ef:c8:e1:f3:0d:56:e7:a5:6b:65:7c:77:79:a5:16:d3:03:
80:2f:b4:f4:9a:fc:6e:31:b0:92:33:87:75:29:40:3c:5e:be:
9b:f0:8d:6d:24:29:34:9c:95:06:fb:d3:85:c4:f5:7f:32:71:
6c:67:6a:ae:61:bc:d7:b4:25:68:50:7f:9b:3c:22:9c:10:da:
1d:14:0e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:09:21 2025 by rpki-client