Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
File: 7rPhE8z67uGZa6kMRhQH_OKQqds.mft (raw, json)
Hash identifier: E3tkArraugSv6yBsp+8iqWXX6e8t9zLWU7HjjNGvMh8=
Subject key identifier: 13:00:45:E1:8E:86:BC:09:93:F3:9F:FD:CE:E2:F2:EF:AA:0A:76:6B
Authority key identifier: EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB
Certificate issuer: /CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
Certificate serial: 0196C7964BFF104DCAE745F694471075FB47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
Manifest number: 11FA
Signing time: Tue 13 May 2025 03:00:37 +0000
Manifest this update: Tue 13 May 2025 03:00:37 +0000
Manifest next update: Wed 14 May 2025 03:00:37 +0000
Files and hashes: 1: 7rPhE8z67uGZa6kMRhQH_OKQqds.crl (hash: OPsNMO2lmjAspWOJZs8GMw7t61nReMrQGAGesx5Urik=)
2: XiTX8PRRbjXruYbuuuJUYnL12Hc.roa (hash: 9YQjgU1UXlyr6JjfJF2PAwxgn/9h4L92vADp3ZCOwiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:4b:ff:10:4d:ca:e7:45:f6:94:47:10:75:fb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb3e113ccfaeee1996ba90c461407fce290a9db
Validity
Not Before: May 13 03:00:37 2025 GMT
Not After : May 14 03:00:37 2025 GMT
Subject: CN=130045e18e86bc0993f39ffdcee2f2efaa0a766b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c0:bf:24:ff:15:0a:a3:5e:a3:61:a1:3c:6c:
dd:41:ca:0b:d3:72:d0:ba:ea:5d:1c:29:1c:1b:d6:
aa:d3:7c:5b:50:60:01:fb:0e:75:81:bc:e2:0b:b2:
46:e1:c1:86:16:7b:8f:13:88:31:38:e8:91:c9:6c:
2b:44:f6:71:e0:f5:b3:42:34:41:1a:38:3a:f4:65:
4f:9b:70:7e:64:46:ff:73:c6:e2:f6:07:cd:1b:37:
bf:6a:30:d3:83:fa:72:f5:02:2d:5f:31:1c:93:91:
bb:20:82:70:be:b5:34:3f:c8:62:93:26:aa:89:56:
e1:9c:3a:bf:50:b1:d7:bc:ef:9d:63:53:e2:a2:fb:
3d:c9:77:82:cd:1c:42:92:a4:c1:4e:c8:94:fd:c4:
9e:10:d4:fb:60:b9:82:a3:4b:80:a7:89:e8:45:01:
c5:41:4a:ed:ee:7a:06:e5:2f:21:c1:b3:4e:1f:be:
19:21:50:50:74:ba:39:39:10:7b:6c:b7:78:e0:e0:
91:16:90:d0:db:89:85:42:03:dc:16:f9:aa:e1:22:
81:d7:14:be:2c:f2:f8:a1:30:99:53:fc:2e:e3:94:
48:1f:61:1e:46:5f:e4:77:80:70:4a:32:4e:12:37:
f0:79:28:66:f2:dd:18:2d:5d:4a:20:b0:9b:dc:66:
b7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:00:45:E1:8E:86:BC:09:93:F3:9F:FD:CE:E2:F2:EF:AA:0A:76:6B
X509v3 Authority Key Identifier:
keyid:EE:B3:E1:13:CC:FA:EE:E1:99:6B:A9:0C:46:14:07:FC:E2:90:A9:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rPhE8z67uGZa6kMRhQH_OKQqds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad5ea9-8bd1-41ef-8356-fadc3524fa30/1/7rPhE8z67uGZa6kMRhQH_OKQqds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b7:d0:0a:51:59:1b:92:f3:bc:c8:f3:a0:f2:d8:fe:e1:fe:
7a:a2:80:49:93:b3:cc:99:4c:26:d1:99:4b:51:c3:9e:c6:4f:
32:77:f7:d5:c4:df:50:53:0a:ae:27:38:8b:9a:ec:cc:2d:de:
0f:05:bc:a5:5c:2c:82:dd:af:01:62:38:9a:48:34:c4:34:76:
fb:45:c5:2d:bc:9a:8f:de:a4:12:23:24:dd:a5:c1:95:44:72:
5c:10:e1:02:58:bb:8d:19:b7:4d:ad:0e:71:12:5f:ab:7c:9b:
ed:a7:dd:c8:53:78:1e:f5:1e:87:d6:99:a6:e5:17:62:c9:62:
46:60:47:c8:91:fe:65:d8:8b:b8:18:c9:da:da:e9:0d:09:b5:
be:25:2f:b7:ab:b7:58:80:47:8e:57:ce:f3:f2:dc:9e:bf:c5:
16:6e:2d:e5:7a:c6:32:50:0b:41:94:a7:7f:d6:11:fc:0c:27:
06:3a:dd:c6:f7:81:38:20:f3:7a:0f:32:14:eb:a0:2a:0a:32:
fc:59:48:78:94:60:b0:92:21:4d:ab:f2:9f:f9:9e:a1:56:ba:
24:b6:b9:d9:b0:01:93:42:e5:ce:89:88:21:d1:59:6d:0c:bf:
c0:9f:3d:48:15:44:58:48:e0:ae:4c:34:0c:cc:ef:fa:81:1a:
1a:59:f3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:42:40 2025 by rpki-client