Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
File: 7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json)
Hash identifier: KMOV1lXWy8RYtsKjAENV1ARSkThMBlgOi8uWd9LE2bc=
Subject key identifier: 49:30:ED:AF:F7:41:34:02:7D:30:F6:75:D9:4A:59:B2:36:8B:52:8B
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial: 0196B0A0890D1DA3A67DF7C6128834121866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
Manifest number: 12AE
Signing time: Thu 08 May 2025 16:00:32 +0000
Manifest this update: Thu 08 May 2025 16:00:32 +0000
Manifest next update: Fri 09 May 2025 16:00:32 +0000
Files and hashes: 1: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: aNDrG3fzSlDkLRn5NFdq/8DgHWoAjrB/L6Yk+CtuXCw=)
2: o1owePWPwjNd3b3qg8Jnc7YGiQI.roa (hash: GgOViLOKaFjeEtIxQ5QnUpa+EnCLoFvMT0viAqTgppE=)
3: tgXHz8gzde8nL8u9-odgzdtG_tY.roa (hash: XKoajYu1GkfOpe/YbTcjXkoO85ZZDvBPigMPOST+e6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:a0:89:0d:1d:a3:a6:7d:f7:c6:12:88:34:12:18:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Validity
Not Before: May 8 16:00:32 2025 GMT
Not After : May 9 16:00:32 2025 GMT
Subject: CN=4930edaff74134027d30f675d94a59b2368b528b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:8f:39:60:7a:68:5b:95:7e:5d:91:18:e4:
df:f6:f3:b9:4a:5e:14:c1:50:c2:66:e6:23:85:9a:
6e:f0:3c:8a:71:68:aa:d2:de:42:07:85:09:d3:da:
c9:fd:c9:0d:4e:1e:cd:fa:61:42:e8:e1:ba:a4:5d:
b0:4e:99:98:4e:3d:04:c0:79:8b:f7:f1:24:6e:47:
7d:5e:9d:ca:9a:a6:45:d5:b5:a1:8f:b6:30:8e:09:
15:fd:0e:d1:1f:fe:56:28:61:39:3d:2c:85:d5:22:
59:52:a9:0e:16:e1:c2:77:14:5d:d6:ff:e8:4b:54:
35:70:51:c1:a9:01:24:2e:f2:d4:21:df:ee:15:c0:
d8:19:f9:11:28:c7:25:da:e7:bd:22:59:1b:c4:24:
fb:7a:ee:79:fb:48:64:1f:6f:91:0a:71:fa:4b:e1:
52:5d:74:d9:d2:ef:e7:8e:84:02:b3:c9:8a:c7:83:
30:be:a9:e8:b1:de:14:98:6f:ca:4a:cf:43:d7:8a:
0a:99:90:13:27:b0:d5:57:af:ff:a7:ec:1d:35:2a:
39:92:1e:7b:98:f5:2f:8a:82:ad:56:4d:7b:5f:22:
35:69:18:92:12:95:ea:76:e8:05:1e:5d:b1:08:2a:
fa:b3:78:74:93:73:bf:61:9d:2f:0b:cc:32:c0:92:
32:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:30:ED:AF:F7:41:34:02:7D:30:F6:75:D9:4A:59:B2:36:8B:52:8B
X509v3 Authority Key Identifier:
keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b5:53:11:9b:fe:8d:88:87:8a:e8:dd:02:4b:4f:c0:f5:c1:
71:7b:38:b3:3e:7f:fc:5b:6e:65:b2:69:80:1a:3e:15:86:3e:
ca:50:78:f7:85:05:e0:1e:76:72:db:bd:98:a4:ad:b0:9a:15:
82:5e:41:d5:26:b9:93:92:a9:61:54:c9:e6:bd:d6:8b:8e:fc:
d7:c3:05:85:1d:00:dd:5c:99:92:86:7f:88:f0:e9:82:a0:11:
5d:bc:0e:c5:32:e0:54:5a:7e:d5:67:7d:24:33:5e:b7:7d:57:
63:9b:46:e6:3b:d2:74:13:7d:73:90:a1:dd:96:66:ce:4b:f9:
b1:fa:8e:0d:b7:05:df:ad:c5:9c:10:6e:e9:a7:73:2d:1a:4b:
58:91:56:94:50:99:30:42:9e:d7:9a:ea:8e:0b:04:12:90:c5:
6f:a1:36:9a:dd:23:fa:9d:86:7e:59:99:81:66:cf:ad:4a:57:
2e:40:b6:0f:1b:3c:4a:60:c7:a2:f0:28:20:e7:5c:ba:e6:ea:
bc:2e:68:24:ca:df:14:af:fb:57:30:e7:4b:dd:28:63:ae:89:
c0:cb:14:b8:32:af:23:6f:05:d1:f5:7f:7c:16:7c:a8:82:33:
16:23:79:fe:02:c6:81:93:39:70:07:45:2b:49:c5:79:73:7e:
51:f8:52:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 01:33:10 2025 by rpki-client