Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
File: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json)
Hash identifier: a3ft2gTzZKkBO0rJ6MNWlt28UQ9KpQorQ6er5ZcLJzo=
Subject key identifier: E9:6E:7A:52:EC:3F:60:44:3C:5D:C1:A2:F9:C3:1C:E8:98:03:94:CB
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Certificate issuer: /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial: 0196C26FF1FE61574BE09F53E73F51874F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
Manifest number: 04BA
Signing time: Mon 12 May 2025 03:00:38 +0000
Manifest this update: Mon 12 May 2025 03:00:38 +0000
Manifest next update: Tue 13 May 2025 03:00:38 +0000
Files and hashes: 1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: sRFT/3PDhnbR96wKreMurUzvyZSu1vAqICsp3opTsVc=)
2: t01s41tuzCg0n-ebuqBLNh-kZ8U.roa (hash: gu7VW+b5U5NLSfKbHP6Ioqtp4/dVeiqqPEeW+qWaaC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:f1:fe:61:57:4b:e0:9f:53:e7:3f:51:87:4f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
Validity
Not Before: May 12 03:00:38 2025 GMT
Not After : May 13 03:00:38 2025 GMT
Subject: CN=e96e7a52ec3f60443c5dc1a2f9c31ce8980394cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2b:b9:bf:17:18:45:38:1f:21:a0:16:b1:18:
5d:27:33:db:f0:a5:14:0b:48:46:7e:5b:66:34:fc:
da:b7:69:9f:1e:07:d9:f7:f5:d7:02:78:f4:e3:9d:
1d:59:f3:ec:c8:d1:bf:6c:07:0b:ae:e7:fc:50:aa:
36:42:e5:09:a6:cc:4a:18:ed:0f:8d:d3:04:34:ec:
70:be:ee:f5:78:5a:2d:74:78:eb:78:3d:2f:8f:d2:
50:41:31:82:8b:d0:7f:32:47:c3:55:dd:00:4c:ce:
bb:0d:ef:b0:a3:d8:e7:35:1c:f4:71:d5:c5:c1:a8:
fb:7c:0f:09:ab:09:24:43:f4:92:8c:4b:d7:02:d8:
21:b5:c3:12:75:f9:91:9b:b5:b4:ad:dc:7b:63:40:
29:a8:e1:d5:a8:0f:ad:da:31:41:c9:01:de:4a:b6:
31:a0:45:a7:00:0d:96:ed:84:cc:f1:40:19:4e:f5:
1f:a2:72:95:dc:1a:e9:f0:b9:e1:a6:fb:77:20:e5:
d9:47:74:77:6b:8e:65:eb:d5:63:b5:9f:6f:2b:d8:
dc:0a:aa:46:d1:75:72:f9:a2:17:e7:64:15:0a:6b:
3f:68:68:45:9b:da:53:32:49:40:f9:63:29:72:32:
fc:08:5c:26:e8:fe:b4:a4:82:c8:33:c6:b2:3a:ce:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6E:7A:52:EC:3F:60:44:3C:5D:C1:A2:F9:C3:1C:E8:98:03:94:CB
X509v3 Authority Key Identifier:
keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7b:d1:84:78:c0:3e:77:de:1d:42:2a:25:d7:d1:2d:e4:44:
ac:8f:3f:0d:3d:99:9d:e3:d2:83:18:ca:8f:fa:42:0c:41:3c:
d2:eb:79:f7:cf:51:2c:83:0c:87:c7:4e:48:70:d5:2d:e9:58:
28:6c:c6:d7:ae:8a:d6:66:8f:59:98:36:ee:d4:5f:a3:3a:52:
c7:47:5e:b3:6a:51:ff:99:d1:a5:b5:7b:7b:b5:82:5c:69:93:
b9:ec:a6:aa:a3:90:b6:83:3a:91:7c:db:d9:00:89:bf:25:7a:
96:34:f0:c0:aa:c6:53:3f:41:3b:ec:e0:85:58:c4:7c:b8:42:
1c:10:6f:96:c3:7c:6a:a6:f7:61:e6:4a:97:75:02:aa:8f:19:
87:b9:7a:c2:1f:7f:55:22:ae:ce:1a:99:39:59:90:02:5c:99:
62:74:a3:3a:6a:3c:3a:38:3b:85:4d:73:7d:25:50:a8:20:94:
b3:47:04:3a:73:62:2f:b2:81:88:ed:27:dc:e8:69:6a:ab:ac:
5b:81:85:54:08:96:b8:c8:47:b3:a7:9c:b6:f3:29:e4:23:1c:
e3:92:57:a4:7c:e9:b3:bd:ca:39:a3:2b:11:37:29:9b:49:4f:
3a:a7:9a:a3:b0:28:8b:99:76:b1:a4:7a:2d:97:99:76:e2:72:
dd:4e:b8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:29:03 2025 by rpki-client