Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
File: 7512O0ngJKe2oZ6vffuYkRqclMg.mft (raw, json)
Hash identifier: beuRXLjKP3Y4zYDle/wBAbERBsNr0g8cvVTCqV4VMwI=
Subject key identifier: 93:D7:D9:68:22:F5:1F:91:74:45:D6:CD:A7:90:88:28:B1:6A:4A:49
Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Certificate issuer: /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Certificate serial: 0196AA316CDEEEF1C065D18A8669EB240739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
Manifest number: 1534
Signing time: Wed 07 May 2025 10:01:27 +0000
Manifest this update: Wed 07 May 2025 10:01:27 +0000
Manifest next update: Thu 08 May 2025 10:01:27 +0000
Files and hashes: 1: 7512O0ngJKe2oZ6vffuYkRqclMg.crl (hash: UgMjCNzhE0aP5z0xO8bGJmrDbzFDTNjHqvaLBgYsOgI=)
2: LSx9OlKUNiN9N5Lzmn4mpgYUaYM.roa (hash: SRtMriKTJRyDfQ60LOh5mHm3HAzdoYJatQZ33jFO0KY=)
3: Yzpl7dcbDV1oc45l6H78VWlDWek.roa (hash: rLWJRRPMzAUWRBDLzYpnEF8zI53ESvU9cKsYN1kvko0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:31:6c:de:ee:f1:c0:65:d1:8a:86:69:eb:24:07:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Validity
Not Before: May 7 10:01:27 2025 GMT
Not After : May 8 10:01:27 2025 GMT
Subject: CN=93d7d96822f51f917445d6cda7908828b16a4a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:a4:9a:54:f9:01:28:d9:11:60:df:9c:3c:
ff:66:a2:75:d0:33:01:fe:73:dd:29:d8:a9:fa:03:
01:ca:06:cc:07:fc:47:33:5c:f8:92:1d:94:a4:64:
a2:ab:f9:88:1d:6c:14:08:57:5b:e3:46:23:71:78:
06:48:52:45:65:82:ba:9b:ad:a8:ae:8e:9d:c3:5e:
ad:19:92:86:04:e3:1b:aa:c7:cd:a7:ce:ce:cd:c7:
32:ae:d7:43:5f:10:7f:20:c5:a9:8b:c2:5c:1b:4e:
1a:17:d9:34:cd:1f:cb:3c:da:45:f7:8f:eb:99:f8:
9c:93:43:a9:5b:27:df:51:02:18:f4:82:79:e4:9c:
de:7d:a2:38:fa:d4:2b:5c:e7:83:62:d5:d0:55:56:
73:00:b6:49:ba:d9:58:e4:05:dc:5e:c4:88:4f:87:
e5:a0:cf:57:00:e5:bb:59:71:e5:29:db:fd:e5:9e:
25:5a:82:14:de:12:4f:85:49:ad:5a:7c:da:47:a7:
15:88:ae:01:99:e6:6a:63:88:99:12:9c:22:fa:3b:
81:13:68:73:dc:c1:bd:c6:8e:d2:c5:d3:f4:4e:bf:
f4:ae:81:b5:49:b6:9a:5d:7a:29:1f:41:d5:54:ec:
83:33:9c:a8:d4:6b:3e:36:97:bb:da:70:15:d2:f3:
9e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D7:D9:68:22:F5:1F:91:74:45:D6:CD:A7:90:88:28:B1:6A:4A:49
X509v3 Authority Key Identifier:
keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:eb:55:1f:26:b5:66:f8:7d:4a:b4:7a:c0:43:be:fc:5f:42:
89:af:97:b6:f3:ca:8d:4e:a2:40:13:c6:98:ec:56:71:78:b0:
2e:ba:fe:28:ca:4b:2b:a9:7c:12:72:40:bb:f7:0a:42:b7:24:
db:c6:34:c2:f3:db:87:f2:84:86:9b:3f:ee:26:e8:95:c6:5a:
21:d2:8d:63:e9:c2:17:60:81:17:a5:44:1f:ee:df:8c:60:1f:
e9:7a:e0:ea:d0:40:41:98:db:64:d7:d3:30:97:4b:cd:0f:41:
c8:e6:58:ec:6d:ff:89:65:ea:b9:65:db:0c:56:a3:05:5a:5c:
d4:f5:57:20:de:26:d8:7c:13:cf:b3:dc:03:ea:6a:ae:0f:73:
25:c2:1a:39:cf:47:53:4d:c0:8a:71:3b:b2:c4:c4:e5:e3:82:
a5:9a:df:11:0d:8d:44:e1:1a:59:bb:d4:47:1c:1c:5f:32:cc:
aa:b3:62:0c:bd:8f:14:0f:22:99:6f:e3:fb:c7:f8:eb:ca:9d:
61:58:6f:2c:d4:7b:ff:e6:83:05:f3:fc:5c:ac:9a:76:7e:3c:
84:01:cd:3a:a0:05:f7:34:9e:30:cb:b2:65:25:ea:17:f3:f8:
96:b4:c1:f3:94:cd:0c:4d:d3:80:88:de:41:3b:fa:2f:79:be:
82:97:64:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:52:02 2025 by rpki-client