Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
File: 79YM7FOzoM_Iy0VDotCopZ5glu4.mft (raw, json)
Hash identifier: W24IlJ1sJxTjPveM2GyICuPEAvCdSlUKQblLRmjkP84=
Subject key identifier: E7:3E:39:09:FB:ED:33:02:C7:66:BF:B3:98:3D:A1:AF:00:1D:C7:9A
Authority key identifier: EF:D6:0C:EC:53:B3:A0:CF:C8:CB:45:43:A2:D0:A8:A5:9E:60:96:EE
Certificate issuer: /CN=efd60cec53b3a0cfc8cb4543a2d0a8a59e6096ee
Certificate serial: 0196B9DA72E5B16E1279D858515AA8A405E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
Manifest number: 1409
Signing time: Sat 10 May 2025 11:00:23 +0000
Manifest this update: Sat 10 May 2025 11:00:23 +0000
Manifest next update: Sun 11 May 2025 11:00:23 +0000
Files and hashes: 1: 79YM7FOzoM_Iy0VDotCopZ5glu4.crl (hash: KcA/vFTts6U0vRh8TRatzQjNGW9CVaZzCQNLmwf7J7U=)
2: hSNRyfJ3PH2KGCseUOEvDGpfyK8.roa (hash: XdLLCZX0/z3+SIY+d7BWzoDcMrU0AuJsTdPOrDQnlMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:72:e5:b1:6e:12:79:d8:58:51:5a:a8:a4:05:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efd60cec53b3a0cfc8cb4543a2d0a8a59e6096ee
Validity
Not Before: May 10 11:00:23 2025 GMT
Not After : May 11 11:00:23 2025 GMT
Subject: CN=e73e3909fbed3302c766bfb3983da1af001dc79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:c7:b5:7d:60:82:4e:8b:ab:da:af:2f:1f:
ca:69:dc:55:59:fb:c0:83:69:59:65:da:10:d4:8d:
ef:88:f2:c0:3a:53:30:a6:28:3c:c2:5f:70:75:a6:
f2:17:75:e3:c6:d9:06:10:f4:9a:64:11:59:cf:4a:
9a:7f:d5:9a:8e:ec:33:f3:d8:bd:a2:b2:2d:26:ec:
6a:72:97:fa:eb:9a:ab:b5:2d:1a:4e:f8:60:ad:38:
06:91:d5:5f:2c:4b:03:96:b2:94:dc:78:12:48:3a:
ab:dc:87:4b:9d:7b:35:cb:51:dd:17:10:73:1d:7e:
f9:2c:81:23:fd:89:40:a3:9f:19:a7:39:b7:82:8c:
97:6b:6d:d6:93:9a:b8:b9:b0:f0:e3:7a:8b:e9:a3:
25:b5:26:1d:72:04:61:fc:a4:ac:f8:9f:01:0f:fa:
47:ec:1f:fa:fb:33:66:83:93:b4:14:b2:27:7d:a0:
5e:a4:7e:12:b6:26:be:d6:79:18:bc:b3:1c:da:bb:
43:2f:89:13:9b:4d:ad:da:09:eb:7d:90:76:ff:71:
ac:7f:8e:68:d5:0f:47:9c:3e:bd:6c:6f:ce:95:a4:
10:40:b3:a2:af:45:1f:7d:e1:6e:d0:76:fe:ad:90:
ec:c4:85:8b:d7:17:90:e4:63:5b:35:68:ca:49:d9:
79:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3E:39:09:FB:ED:33:02:C7:66:BF:B3:98:3D:A1:AF:00:1D:C7:9A
X509v3 Authority Key Identifier:
keyid:EF:D6:0C:EC:53:B3:A0:CF:C8:CB:45:43:A2:D0:A8:A5:9E:60:96:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c5:19:54:ea:f5:62:54:2e:16:15:43:7e:58:a6:af:9e:4b:
79:78:6d:22:34:c8:44:c6:df:b8:89:ab:85:85:a2:6d:ec:60:
56:e3:66:53:71:9f:fd:31:f0:86:61:31:52:60:37:94:0d:15:
0a:b4:5e:ac:49:2b:b1:83:4f:cf:ed:58:b8:84:67:cb:f7:ae:
d0:41:ca:25:b9:ad:b6:3c:c6:5c:17:64:82:79:4a:30:3f:e9:
31:e6:6f:9f:13:21:a2:da:b6:36:1e:7a:e5:15:18:a8:dd:59:
01:cf:99:09:0e:3b:1c:36:17:0a:50:00:4c:f8:3d:6b:d1:99:
2e:f8:27:6d:24:49:66:1f:42:0e:8a:f5:b5:bb:fc:66:52:ce:
90:7c:98:d7:1e:30:ac:64:b3:f5:52:2f:cd:fe:20:f9:a0:84:
51:5f:f8:c8:44:e6:6e:7f:5e:4e:1c:69:d3:77:94:2d:48:4e:
40:9a:d3:83:39:ed:93:73:7e:57:53:f6:e5:72:cd:4c:e9:3f:
62:5e:10:80:de:fd:dc:36:f5:15:c2:41:c9:bc:08:98:0d:3c:
41:a9:e1:41:80:23:24:6c:c8:03:7f:84:dd:a5:14:c0:f0:be:
ef:c2:5d:46:a7:9c:02:82:f8:fb:aa:df:33:ad:46:b6:19:d1:
b4:50:8b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:41:30 2025 by rpki-client