Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
File: 55hPlAuxPQUcj4led5ZSsFrgwLM.mft (raw, json)
Hash identifier: FmBcsQPJuXzgE7yfasFla5aMlP7vs+1aB2DjhxOqIDo=
Subject key identifier: 7F:FB:1C:04:FD:36:7F:E7:AC:70:B8:E9:04:7D:37:85:4D:B5:CD:B5
Authority key identifier: E7:98:4F:94:0B:B1:3D:05:1C:8F:89:5E:77:96:52:B0:5A:E0:C0:B3
Certificate issuer: /CN=e7984f940bb13d051c8f895e779652b05ae0c0b3
Certificate serial: 0196B7103C3BC91A00EA814659658B41D3A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55hPlAuxPQUcj4led5ZSsFrgwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
Manifest number: 0983
Signing time: Fri 09 May 2025 22:00:16 +0000
Manifest this update: Fri 09 May 2025 22:00:16 +0000
Manifest next update: Sat 10 May 2025 22:00:16 +0000
Files and hashes: 1: 55hPlAuxPQUcj4led5ZSsFrgwLM.crl (hash: 7i5vGtP1KoKb3fw4vUTm84Mh/KU3Shb8A3NGx8dyEAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/55hPlAuxPQUcj4led5ZSsFrgwLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:3c:3b:c9:1a:00:ea:81:46:59:65:8b:41:d3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7984f940bb13d051c8f895e779652b05ae0c0b3
Validity
Not Before: May 9 22:00:16 2025 GMT
Not After : May 10 22:00:16 2025 GMT
Subject: CN=7ffb1c04fd367fe7ac70b8e9047d37854db5cdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:dd:84:bf:e6:9f:49:4f:29:85:16:44:0e:
69:57:35:5d:81:af:d6:bd:a9:6a:cd:90:0d:b6:1a:
f9:74:ab:86:19:5a:6b:4d:34:44:fe:d0:37:70:a6:
03:41:ef:48:25:db:b1:ff:86:e8:bd:a3:fa:4f:f3:
f8:ab:28:b1:00:8c:b0:62:dc:ba:7b:30:77:65:38:
4f:cd:06:b9:af:db:96:fe:d3:35:99:d0:79:0a:e5:
80:93:9d:31:62:41:e7:b0:fc:1d:55:a1:06:75:f2:
d0:ce:7f:36:b6:69:25:88:7b:dc:15:a8:48:bd:e0:
8a:b4:82:71:2a:a9:1b:a9:8c:42:14:e9:13:dd:fc:
ca:65:a1:69:ba:ee:3f:af:d2:94:1f:f3:e2:06:b7:
a8:ea:97:f0:e3:f1:fc:25:38:de:bb:39:de:84:96:
f3:c6:39:69:8d:05:52:7d:16:a9:5b:01:17:05:46:
f5:af:7f:9f:13:72:dc:86:43:91:65:ef:c7:34:77:
f3:d1:37:37:5e:e1:3c:e9:1c:54:50:79:0e:4e:55:
80:7a:a9:46:77:11:f8:9b:76:95:86:05:c7:6e:96:
8c:73:92:53:7b:c6:ec:87:34:fb:74:c5:4b:3c:c1:
81:31:5e:8d:ce:64:c2:32:c1:e5:a1:05:d2:29:fc:
c9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FB:1C:04:FD:36:7F:E7:AC:70:B8:E9:04:7D:37:85:4D:B5:CD:B5
X509v3 Authority Key Identifier:
keyid:E7:98:4F:94:0B:B1:3D:05:1C:8F:89:5E:77:96:52:B0:5A:E0:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55hPlAuxPQUcj4led5ZSsFrgwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:37:19:48:2d:1d:0a:42:57:48:45:d8:34:66:8d:e1:39:13:
1e:ca:4f:fc:db:f1:47:fb:f7:7d:0d:e3:2d:a1:d5:94:35:68:
f3:f2:e3:f4:01:64:17:b1:2f:59:44:a6:ce:59:44:bd:f7:fe:
6f:4c:86:89:e5:5b:1f:a9:2e:42:2e:12:9f:f6:b0:4e:ae:99:
0b:97:c2:05:3b:d4:c4:08:ce:d1:81:eb:37:a3:55:7e:f4:1d:
68:a2:f6:7a:c8:d9:b0:90:81:e9:4c:54:97:eb:c9:d2:df:b8:
fa:27:82:e6:4e:02:a4:31:e1:89:3f:6f:66:d6:7e:b4:2e:c9:
9e:85:08:43:e5:af:07:d3:fb:ae:ee:81:89:d2:64:87:1f:d9:
cf:6d:13:ed:bc:c1:9e:e7:14:cb:be:d6:93:e9:f6:25:81:ce:
75:5c:9f:e8:ec:fa:f5:d6:92:60:4b:49:7e:5e:ef:6d:4c:89:
55:87:7c:15:af:26:d1:6d:24:44:aa:ef:71:b0:ef:aa:68:b6:
db:35:90:d2:fd:35:1f:15:2a:df:22:e4:79:fa:69:0d:a1:07:
2d:78:5c:95:98:8a:43:77:95:dc:f6:fa:75:05:e4:32:4b:ee:
9c:fe:ac:cd:89:86:ba:42:d6:bd:4a:64:ac:ba:3a:17:c6:bb:
bb:22:ff:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:44:49 2025 by rpki-client