Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
File: 07SieHIiWX8W0e5MQ1voaQ8QM9k.mft (raw, json)
Hash identifier: TknuVSJSVvYzFi+BG3FpTg0O3qCRh6ATk1WINwXFnYY=
Subject key identifier: B9:FB:09:16:17:6D:FC:4E:2C:33:F4:EF:E9:73:79:84:F2:96:31:B7
Authority key identifier: D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
Certificate issuer: /CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Certificate serial: 0196C0B810D4701C6274F8197F62A29C7FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
Manifest number: 04E0
Signing time: Sun 11 May 2025 19:00:10 +0000
Manifest this update: Sun 11 May 2025 19:00:10 +0000
Manifest next update: Mon 12 May 2025 19:00:10 +0000
Files and hashes: 1: 07SieHIiWX8W0e5MQ1voaQ8QM9k.crl (hash: ePiz1TJbpa0j6fzujN1KQGeVQyGYyYHyFC+k6ekgcX8=)
2: _CsObP4Ze3uU9K2w6CdOR8S59eQ.roa (hash: 1vz8OL2ZT6+f1AOzld1JihOzraesTCmal5gPezTDoY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:10:d4:70:1c:62:74:f8:19:7f:62:a2:9c:7f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Validity
Not Before: May 11 19:00:10 2025 GMT
Not After : May 12 19:00:10 2025 GMT
Subject: CN=b9fb0916176dfc4e2c33f4efe9737984f29631b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:af:f0:b5:db:43:ea:e3:a8:0d:0f:74:3c:
7c:14:e8:a8:34:b8:7d:67:01:09:83:78:1a:73:eb:
80:9f:f8:fc:03:55:9e:92:b9:c4:a6:7b:ed:45:91:
5e:29:60:37:62:4d:a7:31:05:ae:74:9d:11:ef:84:
b2:f5:ce:f0:0a:29:fb:60:3d:40:31:d3:fa:70:69:
ca:c7:38:27:1d:87:07:e4:8a:38:b3:22:19:32:8f:
44:79:f5:e0:f9:2b:32:45:d2:fc:dd:cf:6a:fa:67:
f0:94:d2:0c:57:50:ac:dd:9e:a3:6e:61:e2:ff:38:
40:f5:4f:1e:a3:27:a8:99:8f:eb:c8:e8:9a:f0:d2:
f5:6f:54:2c:7b:f5:6f:9f:d9:24:93:88:78:06:1c:
58:77:2d:d8:91:04:39:f5:31:4d:0d:f9:c9:e2:3f:
63:e5:39:93:1b:af:39:4f:27:8b:e5:e5:e9:62:63:
89:4b:a9:14:d8:57:23:f1:e7:6e:de:07:1c:86:70:
67:1c:ef:e6:cd:82:03:ed:77:12:ce:28:11:48:e7:
c2:ad:d8:6f:a6:c8:ce:f8:c4:63:7c:e9:af:76:b5:
36:ca:e9:6d:45:67:1b:b9:2f:3d:bd:13:f3:d7:53:
02:ef:e9:ae:ae:66:9a:76:c9:a3:d3:c9:ec:df:44:
35:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FB:09:16:17:6D:FC:4E:2C:33:F4:EF:E9:73:79:84:F2:96:31:B7
X509v3 Authority Key Identifier:
keyid:D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:eb:25:2a:e4:27:af:f4:d9:e9:70:68:11:e4:a3:9a:1f:f3:
02:2d:c0:ae:a1:49:f5:de:96:ca:12:e7:19:f0:ca:12:95:db:
2a:e4:3a:97:5b:8c:97:96:bc:e6:92:66:79:6a:f1:3e:e0:d8:
25:35:ae:14:fb:5f:ff:31:dc:e5:bd:0a:ec:68:2a:4a:e0:b1:
17:a2:94:20:57:4e:a5:5a:e2:80:98:dd:da:e7:30:29:e4:8c:
b6:92:55:62:2b:aa:f0:a9:08:3e:6f:59:9e:bc:8c:cf:26:3b:
ee:d8:e1:c4:a0:94:3c:70:85:7c:93:25:48:8f:7d:64:30:5e:
b1:38:78:97:a0:05:d0:8f:85:88:f7:a8:0c:bd:e7:f4:d6:b5:
84:bb:80:48:8c:48:51:50:dd:50:4d:61:ae:75:1c:71:01:fe:
bd:de:c9:1a:46:a1:26:f8:59:23:33:99:b2:1e:0a:9d:eb:d6:
fd:ed:a2:76:08:6e:ca:2a:2f:ad:e5:a1:1e:8f:15:69:a2:30:
73:f2:d8:0b:6c:44:da:70:07:75:8b:45:44:e7:22:43:9c:7d:
81:40:9e:f7:42:90:db:7a:27:6a:ba:a2:54:7c:69:77:66:b9:
30:35:75:64:7c:f2:22:fe:85:45:90:6f:b7:b6:90:73:76:fd:
61:ef:86:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:18:23 2025 by rpki-client