
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
File: exPgVmn1VmYr7FZk4QFln5Zsgmo.mft (raw, json)
Hash identifier: 1shudN3GmVgsBfGs+/nO9k155tlF346MTgXkkxwRQck=
Subject key identifier: 20:A5:BB:80:AE:78:9D:BF:D6:0C:63:4A:D2:18:F4:5C:1C:08:2F:CD
Authority key identifier: 7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
Certificate issuer: /CN=7b13e05669f556662bec5664e101659f966c826a
Certificate serial: 0196CA60955F29A9C1171DE2453255209CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
Manifest number: 0C1B
Signing time: Tue 13 May 2025 16:00:49 +0000
Manifest this update: Tue 13 May 2025 16:00:49 +0000
Manifest next update: Wed 14 May 2025 16:00:49 +0000
Files and hashes: 1: HyKdTkKV5STn1J4Rxe8JxbMCpv4.roa (hash: 6If9g5ZI4fy1JxA85rEnX+2Sovu9Js7JocSs132zGS0=)
2: exPgVmn1VmYr7FZk4QFln5Zsgmo.crl (hash: nMpZltdWb0qX4TyDIn8bEoch3me8hcyGDHK0sOMHZTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:95:5f:29:a9:c1:17:1d:e2:45:32:55:20:9c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b13e05669f556662bec5664e101659f966c826a
Validity
Not Before: May 13 16:00:49 2025 GMT
Not After : May 14 16:00:49 2025 GMT
Subject: CN=20a5bb80ae789dbfd60c634ad218f45c1c082fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:c2:2f:d7:6a:68:26:e8:30:d3:cd:45:40:
0d:29:4d:9f:17:26:ef:87:fb:27:9e:ca:90:21:b6:
60:2c:ed:81:1d:4a:34:09:6e:2e:49:8f:e1:7e:98:
9e:95:47:07:b0:2a:43:d6:ab:7b:41:71:c6:e4:74:
65:98:49:a0:5c:38:a6:1a:87:dc:29:37:63:c7:ff:
39:21:5e:22:3f:f6:89:f8:1e:58:7f:2d:c2:65:37:
9d:4c:bf:da:26:88:81:77:ee:5a:15:a4:f9:2e:00:
8f:ef:0d:89:32:e7:f1:a1:12:85:01:c4:9b:fb:cc:
e8:65:dc:fe:aa:b9:7d:f6:21:e7:56:22:bc:e3:4f:
fb:bf:93:45:23:5c:e0:06:9e:40:5c:9e:0f:1f:f7:
c4:2a:a9:38:51:8c:50:79:cf:97:e8:af:42:6d:9c:
d4:b9:43:01:da:c7:e0:82:a9:17:cb:29:2d:46:60:
a9:48:95:04:a5:60:0c:ef:b6:f1:e2:53:be:9e:dc:
5e:0b:be:91:58:a0:c9:72:d8:b6:56:c9:ca:b0:e1:
1b:a0:1b:90:d7:18:f6:be:c3:e6:54:31:08:cc:92:
b5:6b:69:9c:7b:87:a3:ca:9a:ba:2a:40:b6:84:29:
eb:57:1f:ec:0a:c5:9e:2d:2b:a3:69:c8:dd:98:74:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A5:BB:80:AE:78:9D:BF:D6:0C:63:4A:D2:18:F4:5C:1C:08:2F:CD
X509v3 Authority Key Identifier:
keyid:7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:17:a3:e4:34:58:5b:ed:73:4e:fc:23:81:18:89:24:c3:82:
5a:2f:1b:19:bd:09:3c:e7:2a:b3:dd:69:35:a9:a0:9c:3d:be:
29:3a:75:08:8b:d0:e0:3b:08:75:50:e7:11:3b:37:5a:80:46:
fd:f2:c6:fe:87:6b:ea:98:0a:a4:4d:a5:3d:32:7f:57:42:59:
a4:90:07:cf:ea:4d:14:7c:42:28:4c:1c:71:e0:ab:e0:1b:e7:
74:89:1f:d9:f4:0e:a1:df:fd:75:fb:ef:59:db:bc:a2:5b:83:
92:03:eb:01:68:92:2b:92:b8:69:c0:3a:4a:e2:de:72:be:4b:
07:72:d2:dc:a1:62:78:fa:fa:9e:4c:3c:53:8c:62:4d:80:41:
80:13:e9:43:a0:15:7c:8d:37:b2:dc:15:09:7b:f2:15:6e:fc:
9c:36:15:20:cd:5e:f5:5c:36:26:36:4f:c3:66:08:0a:ce:73:
7b:7e:00:51:f1:52:65:b8:b4:9e:fc:10:8e:c5:4b:f1:ea:1e:
bc:41:69:4c:46:a4:9e:75:9c:8b:2d:11:81:48:4e:ec:ae:d5:
7f:16:f1:d6:56:6f:c7:78:a2:06:3b:f6:be:4f:91:ba:fe:0b:
a8:ab:73:6c:ab:3e:45:aa:62:1b:d9:7f:c6:6c:4b:c0:44:b7:
a6:ba:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:59:02 2025 by rpki-client