Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
File: 7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft (raw, json)
Hash identifier: jWoNjbW6A7DLm83z646NAtAv1lIZxLVEzoB0GZblvzE=
Subject key identifier: 84:AE:37:44:9F:30:1C:D3:E5:D7:FC:32:6B:E1:E7:8B:BD:AB:8F:03
Authority key identifier: EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
Certificate issuer: /CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Certificate serial: 0196C50327DAAF09220FAE609D32C60DCB24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 15:00:40 +0000
Manifest this update: Mon 12 May 2025 15:00:40 +0000
Manifest next update: Tue 13 May 2025 15:00:40 +0000
Files and hashes: 1: 7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl (hash: sMmNknclyvXpqxZYfRm+H4KQhqvFh6BhRMnoBktb0vI=)
2: iwLZFs5miznhcY2Sn-yJxvK-W5Q.roa (hash: xdKq+/ODUXejhJKyI2Ol9rOhJg9XTGoQZtrMhSTgxpw=)
3: pVu2j0EJCMMdBZE3gYcjdze0MJw.roa (hash: smTFngwmoe2BMrTIAR1rWR3m1Bo7KfOKZGk2cxj/sgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:03:27:da:af:09:22:0f:ae:60:9d:32:c6:0d:cb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Validity
Not Before: May 12 15:00:40 2025 GMT
Not After : May 13 15:00:40 2025 GMT
Subject: CN=84ae37449f301cd3e5d7fc326be1e78bbdab8f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ce:b5:54:a8:45:bf:38:7f:51:d1:db:83:06:
0b:0e:65:82:f5:d2:ee:95:89:cd:e0:33:28:19:23:
ef:54:8b:d9:b4:f9:05:c7:bb:fc:8a:85:ef:f0:67:
bd:10:e3:69:7f:c3:9a:73:5c:16:d8:94:f0:b3:9a:
7f:a3:9b:56:31:a0:d0:2f:13:9f:60:66:5e:1d:af:
09:33:2c:1e:a8:dc:49:58:bb:81:be:0c:d0:f2:b4:
e2:5f:63:d2:2a:c5:85:22:d4:2a:38:2e:7e:05:06:
6f:75:4b:7a:ec:6b:82:a9:9b:e7:91:2e:51:92:46:
c9:92:25:0c:6d:e3:47:79:5c:e3:db:48:a9:6b:ce:
98:8f:e5:5a:18:88:66:82:f0:ce:71:98:6f:6b:54:
b5:9b:a9:cf:fb:9c:71:df:e4:bd:24:65:ea:32:df:
6a:b3:d8:72:ae:cf:05:b2:53:45:7a:13:b7:9e:9a:
98:5a:a7:4f:ed:62:8a:e2:fa:13:21:30:44:49:bc:
61:c3:0b:db:53:31:5a:f9:79:9e:32:f6:b2:e9:a0:
25:6d:9d:94:38:13:9b:af:0b:f0:6e:88:bb:93:93:
74:ba:70:2b:78:e8:f9:6d:08:12:1d:40:02:0e:2c:
37:df:5c:d6:90:1e:56:8b:76:5c:be:b1:09:e1:c8:
e3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AE:37:44:9F:30:1C:D3:E5:D7:FC:32:6B:E1:E7:8B:BD:AB:8F:03
X509v3 Authority Key Identifier:
keyid:EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:35:56:bf:b3:41:76:7a:fa:ec:5b:78:8a:44:94:4b:42:99:
2d:e6:a2:a1:7b:74:61:02:79:b7:b2:f6:08:2e:09:36:46:d5:
ea:76:5b:f7:92:0d:28:49:e4:5f:93:08:3b:df:71:7c:e8:e0:
9e:18:84:e0:95:de:1a:32:13:e2:c8:de:31:c8:44:85:0d:c9:
b6:93:4e:b8:18:f7:b7:cd:ca:24:c1:3a:51:88:ec:c9:e0:22:
c3:01:ca:a7:b4:33:1b:08:a8:59:eb:33:03:c5:a9:f9:b1:2e:
30:37:9d:f0:41:87:a7:cc:eb:61:7b:4e:7d:d9:9d:73:59:e7:
17:d9:fd:d6:3a:e6:ea:db:7d:a5:e6:82:2b:d1:41:90:e3:fe:
58:69:ff:ee:14:29:e5:d8:24:bd:c6:70:93:97:1f:ca:d8:1f:
2f:a3:7a:07:1c:0a:cb:fb:d7:29:e1:05:0d:e3:1a:c2:18:60:
13:59:8c:9c:68:3a:fd:65:bb:c9:51:5d:51:97:fa:03:d6:8c:
70:06:fb:b3:3a:f8:45:0d:96:d7:da:03:7c:cd:5f:d7:7e:d5:
ba:96:49:01:e1:e2:8e:4d:2d:20:b2:bd:96:8b:e9:ad:b3:44:
39:d2:0d:91:36:56:fc:0e:b8:b1:f6:0b:9c:ba:cc:b3:86:fe:
3d:5a:5c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:56:47 2025 by rpki-client