Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
File: 7hsImeOKlrVPxMvNEO9TnFTtTTg.mft (raw, json)
Hash identifier: Now4bHnzOiqbh+CP7uTcWeEDmYs1YO2/16WJTyr/BWc=
Subject key identifier: 7D:1C:EB:76:EB:FB:EF:5C:FD:3F:1E:E5:29:0B:64:A8:5C:91:AE:09
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial: 0196AD9F527C2475C8ACB268BCC04A126818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 02:00:21 +0000
Manifest this update: Thu 08 May 2025 02:00:21 +0000
Manifest next update: Fri 09 May 2025 02:00:21 +0000
Files and hashes: 1: 7hsImeOKlrVPxMvNEO9TnFTtTTg.crl (hash: /PG3YcGEiU0lpVjX1xiomYoeCDo393su56LIoCRrObM=)
2: D0b1nmB_L5VEWf6cceZCeBQxCQo.roa (hash: 5aiQU00dPQtZA6c9t9iAvI3R/XjZbywVf6L+3WprENk=)
3: aayTQzRiJq9tAMzk8swFje4kTOA.roa (hash: sZC16XAD3EcE1zhIDvKbW1It71XSPS2OvJcF/8voOKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:9f:52:7c:24:75:c8:ac:b2:68:bc:c0:4a:12:68:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Validity
Not Before: May 8 02:00:21 2025 GMT
Not After : May 9 02:00:21 2025 GMT
Subject: CN=7d1ceb76ebfbef5cfd3f1ee5290b64a85c91ae09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:27:a2:67:2d:05:0f:8c:5c:c7:5d:fa:45:
67:97:d1:eb:88:7b:b6:e4:8a:ec:f0:9f:07:8b:40:
69:d8:41:78:c8:0e:9f:a9:11:bd:54:39:f4:98:a8:
24:36:dc:1d:bd:e3:c0:4d:c6:d0:e6:7b:c6:26:e6:
7b:f5:a0:b1:4b:65:8b:b6:23:87:5d:c2:1c:c2:11:
57:65:50:7b:8d:b3:74:ba:32:ef:d7:63:9a:28:50:
48:1b:72:06:fb:1a:ae:ef:bf:5f:bb:3c:4b:89:9b:
a7:bf:78:05:70:9b:e6:6f:d0:71:dc:2a:b6:3f:4d:
89:a9:34:86:e5:cf:36:bc:67:17:2a:8c:a2:aa:8a:
1d:32:da:f4:7d:c6:4f:24:4c:e0:b3:8e:9e:00:10:
92:ca:17:c5:36:67:6a:fd:09:c6:7b:94:10:35:1b:
81:50:69:3c:3b:2c:9f:ea:4e:c1:a3:fc:44:97:a1:
20:13:d5:1b:e3:37:e2:54:c6:69:ce:cd:fa:25:20:
51:3c:c4:8c:26:1c:e4:d9:b2:d1:4a:7c:f3:a1:ea:
62:39:97:8a:82:c6:d3:5e:4f:01:ef:bd:5c:c7:54:
c1:63:c1:33:49:f7:98:f3:f3:e9:fa:fd:74:73:f8:
8c:2d:b6:48:4f:cd:1b:ce:e5:3b:ed:58:80:36:3e:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1C:EB:76:EB:FB:EF:5C:FD:3F:1E:E5:29:0B:64:A8:5C:91:AE:09
X509v3 Authority Key Identifier:
keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:16:87:1a:46:52:e5:40:95:32:4c:cd:cf:ba:ea:c0:94:66:
3a:7e:19:42:6c:34:c9:1c:80:74:09:fb:0b:60:46:f7:2a:84:
2c:29:e1:e4:de:45:1c:a0:71:e1:49:ae:e9:bb:4a:77:24:5e:
29:7c:dc:98:34:f3:95:0c:fe:69:cf:2a:67:71:23:eb:74:a7:
b0:f3:29:71:cc:2c:e2:ed:db:93:4a:38:b8:72:c8:39:7e:9b:
9f:ea:9a:53:12:17:05:dc:ec:d2:c4:b3:71:6b:3f:ca:2b:cc:
9c:2f:2a:53:fd:fc:af:ba:a2:4f:9a:9d:fd:65:41:77:8c:c6:
39:4c:49:49:79:6d:07:0e:78:4e:0d:27:83:79:4a:69:7f:5f:
94:f7:90:14:a9:82:d1:d1:03:e2:8d:2e:bc:ab:e4:9d:ce:38:
57:eb:6a:38:c8:8d:c3:93:69:bd:56:5a:41:13:64:81:90:f3:
c0:5e:bd:9f:ce:79:92:83:8b:d0:03:53:bf:91:52:58:e5:3d:
96:8a:11:5d:6d:0e:a3:79:d7:9c:62:6e:7a:dc:97:f0:ec:78:
19:bb:69:26:97:c9:e0:6f:a0:07:e9:29:be:67:2f:14:02:8a:
b7:7f:26:cb:be:90:2b:f8:96:f3:81:20:a9:6c:d5:5e:c7:c3:
41:e0:68:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:12:23 2025 by rpki-client