Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
File: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft (raw, json)
Hash identifier: 3fQ9PQpUktxIy0iBZQ19HGwQneIWqJJpI9b9+H9qYKs=
Subject key identifier: B9:CA:8E:84:F5:38:9B:BF:6A:8D:8A:AA:48:66:89:54:51:8F:4A:65
Authority key identifier: EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
Certificate issuer: /CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Certificate serial: 0196C3B9A4A99DB56608B02E2EA384011C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
Manifest number: 06A2
Signing time: Mon 12 May 2025 09:00:45 +0000
Manifest this update: Mon 12 May 2025 09:00:45 +0000
Manifest next update: Tue 13 May 2025 09:00:45 +0000
Files and hashes: 1: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl (hash: 5bRSbaZwoyGkuJtubvtt+2+DGVxmofszUZGjoyqdUFw=)
2: Kq5xAZANKOfKwGgabwcEpDAlttw.roa (hash: gZrCab7OfKcDgXrji1r5JrFbiZW+bpKbWNRFXqaDbXg=)
3: xAkaLP7SkRQoBd-TYEf0fakBydQ.roa (hash: lfN1/uTbDMdDmb+tGMgvNHV7ezOmGfmodPA/bpTlm38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:a4:a9:9d:b5:66:08:b0:2e:2e:a3:84:01:1c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Validity
Not Before: May 12 09:00:45 2025 GMT
Not After : May 13 09:00:45 2025 GMT
Subject: CN=b9ca8e84f5389bbf6a8d8aaa48668954518f4a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:30:44:23:08:37:eb:c1:9c:35:cd:76:56:
1a:82:23:34:3c:5e:ec:87:b5:c8:ea:b6:9a:5a:c3:
6d:50:ae:da:1e:9c:83:10:03:7b:a0:37:ef:c4:e8:
b7:18:44:b5:62:e6:ed:9e:61:b2:9a:93:b3:c7:4f:
43:10:dd:34:a7:f7:ef:f3:19:9e:42:f2:f5:ae:88:
90:0c:a7:c6:00:51:10:82:b8:75:e2:77:ce:14:9f:
af:d7:d3:69:ac:51:b5:29:62:e6:56:51:be:70:bc:
b7:e4:dd:b7:61:d8:12:e8:87:f6:34:ce:61:ab:39:
13:45:6a:c2:33:6c:1f:f6:c1:dc:04:6e:fa:57:0e:
94:47:b3:0e:e9:70:53:1a:cf:a8:0e:4f:cb:14:76:
21:30:b3:d9:77:2d:50:d4:0d:c4:86:a1:47:ad:a6:
90:a5:66:9c:01:b6:ac:65:de:21:3b:46:da:dd:5e:
83:fa:46:b0:ef:77:18:13:a3:78:92:fd:40:cd:48:
1b:67:7e:06:a6:74:64:bd:2c:4e:b7:50:54:52:97:
6b:13:43:e2:9d:81:72:96:76:b7:fa:80:29:01:e3:
df:af:56:e2:d2:64:13:c0:a9:23:93:14:8b:90:6f:
5f:84:1c:3d:84:0a:b3:8c:d0:cf:79:04:ea:81:72:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CA:8E:84:F5:38:9B:BF:6A:8D:8A:AA:48:66:89:54:51:8F:4A:65
X509v3 Authority Key Identifier:
keyid:EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3b:15:f4:03:13:aa:06:fd:d7:93:b2:31:e2:ad:d1:a3:c2:
53:fb:7d:b9:c8:b5:7b:14:c3:66:07:83:d4:89:1a:b8:da:00:
03:b9:1b:d7:e0:c2:ab:3f:31:34:dc:fa:ee:ce:db:3c:4c:0d:
e4:dd:cc:95:8f:10:d6:db:aa:51:ca:40:f1:32:8a:6e:e6:af:
da:ee:05:67:78:dd:aa:9c:95:ea:37:bd:df:56:49:2f:9d:64:
9d:a6:4d:c3:fe:60:d6:0d:93:8b:9d:d9:3a:0b:5e:a7:4f:1f:
2c:4b:5d:8b:2b:a1:5f:9f:3e:e3:ff:05:cc:f6:e7:a4:e6:6e:
79:4a:cf:d4:14:5d:95:35:1b:a2:5b:da:7f:f9:64:de:72:12:
ad:70:59:45:8a:18:56:51:fc:be:45:1f:fc:5f:4e:e7:94:b9:
e3:47:ab:86:0e:5e:68:59:9b:24:b5:9f:97:59:01:6c:41:2b:
a7:42:de:f3:32:a2:46:e0:4f:6b:79:bd:88:4a:51:d5:52:5e:
9d:19:e6:29:0f:87:ce:ff:d0:24:a9:30:a9:c0:67:11:35:9c:
31:7f:41:f2:af:0a:66:4c:d9:be:ad:e8:75:76:e5:7a:37:2d:
31:2e:f8:23:34:65:a5:32:4f:d4:f4:ea:7d:ca:44:fa:22:fa:
53:48:b5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:44:24 2025 by rpki-client