Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File: 7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier: 4aVU0JN/+nGpLWFSdvpowNkYvCYUT/iSd0Ds0yV7KTo=
Subject key identifier: 85:8D:6E:26:6D:48:94:67:1A:F4:56:64:73:BF:83:49:FA:36:AF:F6
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer: /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial: 0196BD128209A1FE4A2284A1C6608F044663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number: 0BF4
Signing time: Sun 11 May 2025 02:00:28 +0000
Manifest this update: Sun 11 May 2025 02:00:28 +0000
Manifest next update: Mon 12 May 2025 02:00:28 +0000
Files and hashes: 1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: 4iR2JgyOHJYtbwmFc6341a5e4i9IcQ7xLwVwgKNb/xs=)
2: ki56jkg-Ht0i-AxPw2XEPPfU3mc.roa (hash: 2NDyIuvL9kHGhxL4y5SFFt1xoYZ8BtFLva+lo3l3Ky4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:82:09:a1:fe:4a:22:84:a1:c6:60:8f:04:46:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Validity
Not Before: May 11 02:00:28 2025 GMT
Not After : May 12 02:00:28 2025 GMT
Subject: CN=858d6e266d4894671af4566473bf8349fa36aff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:95:9f:10:87:0e:46:0d:7c:e2:3f:cc:0f:
c4:62:90:2c:9d:3c:6b:2d:99:50:be:6f:66:84:54:
49:e0:4f:78:47:07:c8:9a:c9:57:93:8c:03:f5:1c:
aa:16:c9:39:39:80:ec:51:59:00:76:4c:9b:c8:d2:
77:7a:be:5f:9e:52:83:98:12:9c:2a:d1:9c:4f:24:
a2:5b:cf:40:26:5a:fe:1f:d3:5e:36:86:21:11:73:
dc:d6:a8:46:4a:b4:0b:11:a2:d5:c6:21:8e:ae:d0:
22:bb:08:42:d8:7a:7b:b8:e8:1b:1b:2e:cd:bd:3a:
86:03:a2:48:22:47:a2:24:f5:21:56:d6:02:df:6c:
0a:83:2f:28:b3:39:8e:0f:2b:d6:30:c1:9a:4e:0e:
9e:0e:ae:b2:46:41:90:06:c7:37:3b:d1:40:d3:36:
f3:a7:7b:8a:ec:8b:a0:f3:39:d9:4c:72:d6:31:3d:
a2:3f:12:1f:f2:38:09:c8:19:26:dc:ed:92:e9:fc:
e1:ab:75:f0:0f:88:33:d6:54:2f:5f:1c:fc:8b:0b:
9d:6c:1b:6a:43:fb:fe:b1:cc:8f:56:6b:df:94:ab:
9b:26:da:23:80:e5:f0:17:6f:56:82:66:28:fa:a3:
24:b9:4b:66:16:f3:95:a7:32:8e:9b:8c:41:a8:46:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8D:6E:26:6D:48:94:67:1A:F4:56:64:73:BF:83:49:FA:36:AF:F6
X509v3 Authority Key Identifier:
keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ea:c8:82:91:cc:d0:df:e6:d5:2e:4f:dc:f1:b9:37:89:33:
53:63:e8:24:00:55:84:46:0d:8b:92:51:1b:3f:18:15:1f:d0:
b0:0a:0a:28:35:4b:f2:d0:58:62:91:80:5b:75:fb:56:4a:0c:
01:1b:83:bf:67:f6:a7:62:91:bb:ab:d1:0c:77:53:b7:c9:d7:
6f:50:eb:8c:b3:bb:b5:1d:86:76:4e:46:12:83:a0:31:3f:30:
9c:94:a5:1a:6a:85:78:63:05:40:3e:14:79:71:06:e7:09:de:
22:5c:1f:8d:fc:c9:5a:fd:74:d0:23:68:45:99:47:5a:76:52:
0c:7d:f4:04:fd:3b:64:8e:1e:d3:a7:80:38:da:e6:f6:49:1b:
24:56:f1:b6:a4:ec:a9:bc:23:2f:93:57:b9:aa:d3:70:8d:ae:
42:79:10:21:7f:e8:f7:f8:28:5e:47:15:f7:19:9f:94:85:07:
ab:ba:ee:0d:86:d4:05:c0:37:03:83:58:62:9c:39:21:e6:48:
bb:2c:40:29:24:41:4a:34:dd:a8:b1:47:16:75:39:08:d1:80:
5f:fe:36:d1:f7:b5:21:d3:47:9d:cc:00:e2:33:db:54:e4:9f:
e7:7f:11:20:2a:62:db:19:2e:96:4a:69:f6:e3:ec:dc:38:c8:
5c:bd:50:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:36:09 2025 by rpki-client