Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
File: 7XZO39sbgh1dJayLeggKapBvprA.mft (raw, json)
Hash identifier: jiEUkSvneOyHirLA9z5z52reFbeXjDbrJeSUfqXxMoI=
Subject key identifier: 6E:04:9F:DF:64:D8:5E:F2:88:61:FF:68:C1:B8:1B:04:5A:A2:47:15
Authority key identifier: ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
Certificate issuer: /CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Certificate serial: 0196C5709886CD65F68C2F0796A00CDF034D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
Manifest number: 0188
Signing time: Mon 12 May 2025 17:00:12 +0000
Manifest this update: Mon 12 May 2025 17:00:12 +0000
Manifest next update: Tue 13 May 2025 17:00:12 +0000
Files and hashes: 1: 57xao0M2AdqrH2enoUGayVFXdGY.roa (hash: aul3XKpu3FPCVY/zVFWyx2xUMjYZdpyFV6zqK4hIpg4=)
2: 7XZO39sbgh1dJayLeggKapBvprA.crl (hash: 9L7X6NHTYeyidMeMbbUV+slzk242VZTo8Yz/hrnNw+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:98:86:cd:65:f6:8c:2f:07:96:a0:0c:df:03:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Validity
Not Before: May 12 17:00:12 2025 GMT
Not After : May 13 17:00:12 2025 GMT
Subject: CN=6e049fdf64d85ef28861ff68c1b81b045aa24715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:80:f3:07:2d:f5:16:f1:5e:f2:c1:db:ec:1f:
1e:76:48:32:46:4b:0f:9a:c2:84:fb:f8:e4:ad:55:
72:98:96:15:e9:73:d6:43:fa:22:0c:f7:31:0f:82:
76:af:9a:7e:28:16:a8:c6:7c:a9:12:3a:ab:59:91:
ec:ef:f6:69:54:05:b1:1c:ef:07:4a:5c:a3:2d:0a:
57:08:fd:91:45:86:a9:a0:d5:13:07:cc:73:8e:81:
ba:83:70:74:d3:55:4b:86:35:30:a2:91:bb:dd:93:
d2:f3:99:6e:2e:51:b3:93:f4:e6:82:98:a5:b0:65:
f3:8b:e3:1f:7a:0a:c8:41:a8:24:a1:a0:d7:5a:12:
07:13:37:eb:9c:d5:b5:42:36:b3:ee:85:1f:d3:bf:
d1:b6:13:46:b2:69:3f:09:68:0c:bf:d5:ca:5c:16:
b2:39:aa:f8:ca:80:2e:42:8d:f3:a0:58:e6:d1:f6:
48:b9:c9:9e:13:4c:5f:48:e8:d4:5d:b7:9a:cf:34:
04:68:8a:e4:16:11:50:6f:c0:b3:c5:dd:cf:6a:a4:
52:59:ab:1c:0b:dd:d0:c7:c5:d1:a7:88:52:31:94:
4a:c1:d5:63:e1:8f:9e:04:c0:80:4c:21:96:75:ac:
ba:d6:54:a4:0b:7e:6d:0b:5b:c1:52:3b:0e:62:c2:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:04:9F:DF:64:D8:5E:F2:88:61:FF:68:C1:B8:1B:04:5A:A2:47:15
X509v3 Authority Key Identifier:
keyid:ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c4:02:c9:5c:fc:0a:cc:2a:c0:d8:31:00:c0:cb:38:e0:3e:
62:cc:5d:95:99:0e:8b:87:49:44:68:b2:43:98:6c:16:9a:d1:
4c:46:88:d7:ad:8b:7d:17:de:fd:60:4a:b5:e7:50:cd:a5:d6:
7e:63:0f:26:fb:df:4e:9d:65:5f:92:55:f9:d3:41:91:92:91:
43:fb:cb:0e:3c:c7:5d:6a:15:93:01:95:fe:18:64:5e:50:ef:
9a:a0:8c:bc:81:b4:0c:f1:26:7e:65:17:77:4f:a4:15:23:8f:
3c:9b:c5:93:d9:e1:83:46:3d:da:f8:28:43:d5:2b:9c:cb:26:
8c:5f:84:3f:da:f8:b5:f8:c4:f6:8a:3b:fa:ef:91:66:0f:67:
ba:db:6e:7e:68:11:a2:3a:a6:54:4f:88:4e:77:b7:e8:ea:df:
d0:1b:fa:89:01:4e:39:0f:66:92:35:45:c7:5f:57:1e:05:3f:
ef:74:24:43:f1:d9:1f:b1:59:e7:9d:9e:bf:08:45:8e:d5:e4:
d2:1a:e2:85:b5:d4:25:fd:0b:1e:6e:85:81:b9:c0:f4:81:67:
24:f9:34:d6:6e:51:15:0e:4f:5e:d7:d0:2c:d6:23:22:0c:03:
0b:12:0e:8c:6c:66:6f:5c:74:24:e0:30:d1:76:ff:59:ad:e5:
45:40:95:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:57:51 2025 by rpki-client