Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
File: DS7-O2P6myp5MsW17IVLcMPxiDk.mft (raw, json)
Hash identifier: U1XRuGBH8F4AWIAlRtS9YENhV8qoZceR38BGh+1huAk=
Subject key identifier: 7A:FF:18:57:23:26:F8:1E:68:83:F9:BE:A9:4D:16:2C:12:B8:BF:7E
Authority key identifier: 0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
Certificate issuer: /CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Certificate serial: 0196AAD511EE61E1095D04BE48A3B31C83F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
Manifest number: 0418
Signing time: Wed 07 May 2025 13:00:12 +0000
Manifest this update: Wed 07 May 2025 13:00:12 +0000
Manifest next update: Thu 08 May 2025 13:00:12 +0000
Files and hashes: 1: DS7-O2P6myp5MsW17IVLcMPxiDk.crl (hash: 44lCae1Y799NoWPG0DOU7t+oeyLzWKXEkjTczclRiyM=)
2: Q_EK-erWHPnTXBrHVmcWbytpcis.roa (hash: mtRhYkTuoZWGkXxI5IGoHrOZ3J63Idzep2wBOshAzrk=)
3: rjoKSFT64wx9I01-lQ0W0ynohgU.roa (hash: kjj+Ef2J/by9CyPkpbVAwiAkNqP+TYAiZ/aCdSXrkAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:d5:11:ee:61:e1:09:5d:04:be:48:a3:b3:1c:83:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Validity
Not Before: May 7 13:00:12 2025 GMT
Not After : May 8 13:00:12 2025 GMT
Subject: CN=7aff18572326f81e6883f9bea94d162c12b8bf7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7c:00:18:ab:b1:db:0b:a4:f5:58:b7:92:0a:
f5:79:2f:5b:58:56:0c:a6:c3:7f:6f:ef:59:3d:99:
34:59:f3:bf:b1:f9:1b:b8:78:99:73:79:84:c3:9c:
11:f2:01:be:2e:e8:94:74:ff:fb:9d:91:ab:19:29:
e8:ef:eb:9a:08:32:63:99:13:ef:1f:1e:9d:24:fe:
1b:82:73:4b:f5:6a:18:c2:56:64:02:8b:b5:d8:75:
da:a1:45:65:ff:e3:15:47:cc:f7:c9:94:48:e1:41:
73:b8:bc:c4:9e:34:4e:43:6a:8d:10:d9:00:5b:84:
d6:2d:5d:72:a8:5f:c1:4a:56:53:ec:8f:fa:02:a9:
35:31:5b:49:49:27:15:e6:63:a7:82:07:1c:54:13:
f8:43:42:c5:85:fc:a1:4a:b1:30:d3:c1:2a:74:95:
f0:ed:3d:ce:6f:b8:95:d1:a7:a7:04:07:ec:00:3a:
1f:75:57:7e:25:00:4e:b6:2d:76:af:d0:85:ab:8a:
4a:6b:b2:98:30:77:7e:cb:53:d2:68:15:be:5f:58:
17:9d:ee:a8:19:61:1e:f0:01:69:b0:da:cd:a8:8d:
15:c0:51:71:66:6e:f8:ef:ae:6c:ce:6c:6d:9e:3a:
d2:01:85:84:40:f4:e1:21:b3:a5:b9:de:5a:d2:28:
0d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FF:18:57:23:26:F8:1E:68:83:F9:BE:A9:4D:16:2C:12:B8:BF:7E
X509v3 Authority Key Identifier:
keyid:0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a0:1a:38:ea:f1:f1:cd:07:d4:99:97:12:1c:81:70:e1:0b:
f4:46:6e:85:0c:ef:f7:08:30:ba:81:5b:81:62:9a:4f:d4:c7:
c4:9f:08:09:c4:0e:cc:b8:c0:a1:74:b3:fa:7c:34:73:0a:f3:
4b:f9:f2:e3:36:c4:4b:a8:59:26:26:1d:c7:21:02:d7:9e:e7:
5d:75:5a:cf:72:02:97:c5:d3:76:3d:0d:71:50:ca:ae:73:73:
83:9e:71:cb:3c:4d:24:50:26:6e:fb:65:51:5a:b6:47:a7:d8:
34:e8:22:02:c3:14:b0:83:36:69:c6:7e:5e:6e:ce:9d:a8:90:
d3:6d:ff:16:57:90:a2:7c:db:d5:5b:1a:29:d4:9d:00:dc:57:
60:57:0c:55:b6:fd:dc:57:ce:99:14:47:d8:e8:4f:ee:8b:49:
90:8e:c9:92:bc:8d:50:be:96:47:06:d6:d6:e2:c9:d7:6b:90:
a5:3c:dc:99:da:e6:50:e6:3c:e1:5a:d1:3c:7f:93:6b:f3:ae:
f0:88:d6:5b:23:e6:cf:de:f1:e4:48:1a:3e:a2:35:14:9c:8e:
d3:76:3f:5c:a5:0d:1c:2c:42:ef:1a:91:3c:9d:1e:56:78:02:
91:28:d0:23:9f:1e:83:35:a5:20:6b:23:41:31:8e:0b:ae:f4:
d7:2f:a8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:49:34 2025 by rpki-client