Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
File: _7yuKykMgB1X0J0CWpNI4WcG8YI.mft (raw, json)
Hash identifier: qR/PUhuBOpZ+D7kYcBDrsXD2bR2dA9evVXNx/FbI3Do=
Subject key identifier: 7F:EE:B8:DA:A9:2B:E7:DA:20:96:40:87:4E:1A:A3:63:B8:0D:3C:8F
Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
Certificate issuer: /CN=ffbcae2b290c801d57d09d025a9348e16706f182
Certificate serial: 0196C3F094DC958A89257FFD337BD4111763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
Manifest number: 1498
Signing time: Mon 12 May 2025 10:00:45 +0000
Manifest this update: Mon 12 May 2025 10:00:45 +0000
Manifest next update: Tue 13 May 2025 10:00:45 +0000
Files and hashes: 1: 8wTHmWo4SSJsVc0t3sJFniZg3X0.roa (hash: nwCEElQrpQEsbcFPrYoePVQv66vMAWow/x3hFkCdNgc=)
2: CfByYUpLy5HR5mppU__UXlpQvd4.roa (hash: J4PogzYPOjo2AP+rxBsCwdc146VrXnAE07Lu3yHc7A8=)
3: _7yuKykMgB1X0J0CWpNI4WcG8YI.crl (hash: E9qUxXKE6KaVhjNShqLsLfeVeI0NiJqZuQoGTZU2L0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:94:dc:95:8a:89:25:7f:fd:33:7b:d4:11:17:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182
Validity
Not Before: May 12 10:00:45 2025 GMT
Not After : May 13 10:00:45 2025 GMT
Subject: CN=7feeb8daa92be7da209640874e1aa363b80d3c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:ef:48:57:f9:53:4a:7a:6c:a3:f7:ad:98:
43:01:6e:f7:2c:69:0d:31:f6:c4:4d:f3:f0:12:6d:
c2:4a:15:2f:9d:66:9c:d7:29:d9:2b:ec:d7:28:66:
2f:53:33:4b:bb:0c:29:41:13:40:a7:e7:94:51:ba:
47:66:b6:88:b0:7f:ba:3e:27:87:e5:72:8f:39:8d:
35:ff:8c:94:aa:50:a4:fb:c1:bd:74:ea:f7:06:6e:
05:f5:64:5e:ce:e1:ec:cc:f6:be:86:06:3e:c1:5f:
f8:20:b8:e9:ea:a3:35:af:1b:07:69:70:6e:8b:cd:
63:46:bf:50:9a:ca:0d:b2:46:6d:8a:b3:68:c3:d9:
88:6f:83:32:e6:20:bf:f6:17:52:d1:f5:0c:6d:b3:
45:07:db:d7:6b:29:3c:20:9f:c3:3c:13:38:3d:7c:
e4:9b:e9:55:84:19:94:ef:8d:48:94:70:73:88:43:
c6:19:dd:83:6e:d1:5d:6f:7d:a7:f7:4e:bf:df:f3:
6f:81:33:d9:4b:42:a0:78:c6:a4:d2:3c:0c:89:fd:
b5:e9:74:ed:85:10:b6:fd:2d:a4:6e:81:a0:7a:e4:
5a:48:80:6d:39:9b:54:a1:82:01:19:f8:46:74:c7:
08:18:e9:32:91:d7:6f:3f:f5:7e:f3:e2:df:55:a6:
5b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EE:B8:DA:A9:2B:E7:DA:20:96:40:87:4E:1A:A3:63:B8:0D:3C:8F
X509v3 Authority Key Identifier:
keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:57:4f:c7:eb:c3:90:4d:78:aa:d3:aa:a5:1c:d5:2c:f5:3c:
db:9d:e8:ab:d7:23:98:27:16:ef:e2:2a:18:d7:33:ff:11:aa:
20:71:fa:9e:4d:5b:b7:b7:03:85:e3:60:f4:c0:fc:1f:73:a1:
a1:09:98:ef:5f:f4:19:6d:71:4a:f6:32:4f:b2:44:69:ea:52:
a8:6b:c6:49:4e:85:5b:18:1c:72:b2:18:7c:7e:7d:5e:81:45:
0c:be:6f:9e:d5:78:05:98:71:cc:e0:b2:dd:d4:ec:c7:8a:01:
7c:ff:7c:00:ed:5e:58:73:1d:ea:20:75:87:b3:3d:a8:db:8f:
96:1f:01:bb:ec:1d:c6:e8:9c:0a:fe:a5:dd:b2:2d:bf:aa:e6:
98:d6:92:57:95:b0:ea:61:5e:19:45:f4:2d:41:b0:db:60:a9:
51:54:2f:3a:db:b3:eb:fe:94:15:a1:51:04:74:60:3a:7a:74:
bc:81:e4:4a:f5:73:52:ed:a2:16:80:6a:6c:40:db:a7:77:ff:
92:39:da:0a:7f:cc:66:be:15:3d:ea:f1:3b:11:d3:13:76:98:
44:a9:ce:93:be:51:aa:f6:79:d5:ea:32:f1:4e:93:82:f5:9c:
6f:78:67:eb:0e:2f:76:9c:ad:fc:15:49:cc:95:cf:b1:72:08:
78:69:3f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:16:25 2025 by rpki-client