Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
File: t7Z7pXn0ikIHrECav08BGUBG6jo.mft (raw, json)
Hash identifier: FMgOelFXx1TwQhL5C7N/4Lseu+5x+olLlj1GFQYkc+Y=
Subject key identifier: 2C:6A:E8:6B:CF:48:DD:44:6B:78:FE:F1:28:C3:67:EA:E5:C0:83:E7
Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
Certificate issuer: /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Certificate serial: 0196BF6F2F3E97D44918DB4D5E393493188A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
Manifest number: 153A
Signing time: Sun 11 May 2025 13:00:56 +0000
Manifest this update: Sun 11 May 2025 13:00:56 +0000
Manifest next update: Mon 12 May 2025 13:00:56 +0000
Files and hashes: 1: k-hTaQknXDp2DKuP6vvaZN3brec.roa (hash: IoaNc7VRuQAEFnNwpBORifvWy2POOqQygfpjoy01lPY=)
2: t7Z7pXn0ikIHrECav08BGUBG6jo.crl (hash: FuCKS7QtRP0K+ScTn8ZbdhLQgpfLFrKCiXqTqw4fV54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:2f:3e:97:d4:49:18:db:4d:5e:39:34:93:18:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Validity
Not Before: May 11 13:00:56 2025 GMT
Not After : May 12 13:00:56 2025 GMT
Subject: CN=2c6ae86bcf48dd446b78fef128c367eae5c083e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:87:88:a1:7c:6c:f9:10:92:d5:fc:96:b0:
7d:60:57:4d:e4:27:9f:71:9b:0a:85:11:6b:a3:8c:
8a:4a:92:75:96:cb:b7:31:96:e2:d6:73:ae:8f:6a:
74:d8:8f:27:98:8c:e8:7f:bc:b7:c0:76:78:d5:05:
2f:2b:16:1a:a4:1d:c8:a3:14:59:d5:9e:92:cd:d6:
05:6e:6f:43:14:8d:d1:a1:d4:53:4e:91:d3:48:aa:
90:14:b5:bd:cc:1f:1a:69:73:f7:77:fd:4a:b8:0f:
1a:03:a8:ff:81:7e:e8:33:8f:d3:94:54:de:c5:f9:
1a:a0:0d:e4:8d:b5:4a:de:01:d3:62:31:4d:67:e4:
9d:20:82:cc:36:55:07:92:3a:56:60:c4:88:3e:c0:
44:63:88:d7:14:e3:aa:41:87:68:93:98:f6:d9:09:
e0:a2:e8:d5:e7:2c:b4:c1:39:bf:c4:bf:d7:69:10:
28:07:6c:ce:77:a6:70:22:dc:68:7a:60:51:f0:c2:
fb:78:01:f6:89:61:21:2b:12:22:78:9e:56:a3:a2:
8b:8b:8a:87:97:96:53:7b:78:2d:29:cb:a1:ab:4f:
0a:2b:c6:b7:49:04:e8:60:09:a4:aa:0b:cb:08:68:
08:09:55:15:2d:d0:78:8c:90:ba:ab:cd:67:37:56:
34:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6A:E8:6B:CF:48:DD:44:6B:78:FE:F1:28:C3:67:EA:E5:C0:83:E7
X509v3 Authority Key Identifier:
keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:54:f4:36:a4:98:ac:c9:97:7f:ce:8c:60:50:39:9f:2b:ec:
46:24:8a:23:9f:d8:1c:2d:e2:15:8e:5a:76:2b:92:a1:c2:86:
84:2e:a8:dc:18:cb:16:17:0d:51:b4:39:a9:92:b3:49:e2:65:
e7:85:30:be:fc:53:96:6f:f5:74:21:63:e9:a4:27:d6:b7:a6:
bd:ea:d3:15:26:7f:de:30:5e:0f:f8:c7:ef:52:56:0f:17:66:
99:94:96:a3:d1:a5:70:98:f1:99:2c:c8:83:f6:96:6a:a9:47:
7a:68:6d:73:c9:0d:68:00:fa:be:d5:ea:0c:c5:e5:0c:5c:92:
91:d0:6b:7c:8d:00:29:82:25:d6:79:dc:96:c7:2f:ec:d9:09:
66:d2:72:f8:01:a2:44:0c:5e:f3:be:d2:56:58:67:b1:a2:ae:
61:97:eb:96:e8:fb:ff:dd:22:d4:96:3b:65:5e:a4:58:da:cf:
d9:1e:a8:d0:c2:37:08:2d:48:09:c5:66:22:c1:7f:07:d3:a7:
eb:d4:f5:3b:64:bc:40:57:eb:af:d9:c6:12:7b:ee:57:a7:1f:
d2:6a:e1:46:3c:6a:22:cb:16:a0:3c:f7:5a:9f:6f:2f:e0:12:
a4:cc:5f:12:e0:7e:74:8c:aa:e0:b8:4e:fb:de:5c:48:df:93:
4d:5b:b9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:34:03 2025 by rpki-client