Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
File: 7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json)
Hash identifier: NiTerIaEjjESW+dAWVsOZmtgTxCA1TiNsZrNT6i8mb4=
Subject key identifier: EA:74:FE:2A:97:20:C6:DB:AD:B4:11:F3:D6:18:40:92:27:18:47:18
Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
Certificate issuer: /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Certificate serial: 0196D0D06D34E474CD6041E40E6A267A2CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
Manifest number: 03D1
Signing time: Wed 14 May 2025 22:00:42 +0000
Manifest this update: Wed 14 May 2025 22:00:42 +0000
Manifest next update: Thu 15 May 2025 22:00:42 +0000
Files and hashes: 1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: 4npYh4jzB40cCwcP7H+Edy1WT+/cMR7fcY2VAWbTtiQ=)
2: ciVuDSG137gexnzKwYgFKSw1JAo.roa (hash: Lu0ROEw0vfSrXmfo6gMAWwlGmmUA9I7hRO+NmRoxqGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:d0:6d:34:e4:74:cd:60:41:e4:0e:6a:26:7a:2c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Validity
Not Before: May 14 22:00:42 2025 GMT
Not After : May 15 22:00:42 2025 GMT
Subject: CN=ea74fe2a9720c6dbadb411f3d618409227184718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:9d:87:48:41:ed:bc:ef:f1:e7:fc:68:3d:
c5:0f:62:b0:06:e5:96:a6:7c:96:68:3a:92:ce:aa:
c1:61:f0:09:0e:dd:e6:af:91:1c:65:4e:88:3a:8e:
ce:86:c8:1b:4f:51:0c:88:69:f2:fa:3d:81:96:95:
f5:92:a6:e6:5c:30:57:a7:08:46:3d:d9:6b:27:25:
1c:7d:c1:dd:41:46:b1:4c:19:6d:e3:5a:d2:83:69:
73:79:9b:28:90:0c:69:b7:c5:b3:25:4d:fa:20:9a:
34:66:4e:4f:ce:f1:91:3b:b8:fd:2c:f1:17:60:70:
5f:de:d3:f5:d4:cc:1b:fb:38:31:c8:89:5e:b3:03:
24:43:88:28:a4:2e:32:1a:65:f7:a4:fc:10:03:a1:
06:76:dd:70:df:69:49:5f:5b:62:6e:cf:47:b2:92:
12:5a:0f:bf:3b:06:95:ca:f2:28:1b:9b:fa:cc:27:
b0:01:16:ed:9d:2c:fb:cc:9e:48:e7:b8:9c:a1:93:
78:99:b4:fc:4d:3a:ce:1c:cb:57:53:26:28:e6:ce:
d8:40:81:5f:d7:c6:68:d6:87:67:2b:fd:a7:32:e5:
6a:93:e0:94:4d:f0:05:47:5d:cd:b8:20:ac:d9:f5:
4b:b9:9f:a7:34:28:d0:ca:67:e7:71:5e:65:2c:32:
0d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:74:FE:2A:97:20:C6:DB:AD:B4:11:F3:D6:18:40:92:27:18:47:18
X509v3 Authority Key Identifier:
keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:de:42:02:f2:9f:94:38:55:f0:e8:0b:15:8b:83:c8:5f:28:
68:90:95:fc:2c:b1:ae:a6:8f:f3:b0:a3:4b:56:4f:a3:09:6e:
ed:c9:08:02:cd:ae:98:9d:5c:00:1e:55:03:d4:2b:ea:35:29:
c6:10:a6:61:7c:aa:e5:7f:ca:d6:b2:eb:67:67:3e:8e:c7:29:
ad:0f:1d:0a:e7:1f:8f:ce:7b:5d:25:4d:24:72:a6:14:5a:1b:
c8:51:e2:4d:49:cf:d4:04:d8:07:60:9e:dd:04:27:85:14:d3:
8a:a6:4d:77:2c:d3:f4:a1:6b:ff:7a:64:36:63:57:27:1e:e8:
17:04:f6:12:26:0e:42:a9:a3:dc:bc:20:58:5f:72:c5:1d:b0:
1c:d2:c4:96:6b:3b:93:8f:ea:38:18:01:ec:e5:3a:72:80:6a:
81:c2:f6:4d:ee:af:11:c9:fc:be:57:7d:f4:64:eb:14:2b:62:
1a:1c:a1:85:24:7e:03:f2:65:c5:f6:05:44:22:a3:96:a7:e8:
22:b4:03:89:55:fd:b2:5a:5f:a1:fa:b4:51:4a:33:f8:95:5e:
cb:c4:2f:76:a3:6c:fb:42:77:98:6c:74:5d:00:1c:61:5a:eb:
10:f8:75:e8:d8:9d:2f:1a:cd:a9:6c:8b:ed:96:6b:81:86:0b:
25:15:0c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:39:33 2025 by rpki-client