Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
File: 987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json)
Hash identifier: c3M9n5RYuC4zUfzGkQiZEB2uttYTLvflkCXwLwMYuV4=
Subject key identifier: 7A:17:FC:12:CB:10:5D:ED:93:FC:0C:08:31:B4:4E:D3:75:01:F9:D0
Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Certificate issuer: /CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Certificate serial: 0196C238FBD9AD93B0AE26287C7888AB05F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
Manifest number: 0CF7
Signing time: Mon 12 May 2025 02:00:36 +0000
Manifest this update: Mon 12 May 2025 02:00:36 +0000
Manifest next update: Tue 13 May 2025 02:00:36 +0000
Files and hashes: 1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: /77SFMzllEEhS3FoR5c76yXZLivpm5AJM1kzpVyFmsg=)
2: AI1eVAvKdYB-fGkwuq_TIIbeidU.roa (hash: sKA1VCAma3ARvuIYZgQlGGFrTvogdspfkZ1qSCBQPg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:38:fb:d9:ad:93:b0:ae:26:28:7c:78:88:ab:05:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Validity
Not Before: May 12 02:00:36 2025 GMT
Not After : May 13 02:00:36 2025 GMT
Subject: CN=7a17fc12cb105ded93fc0c0831b44ed37501f9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:be:1d:03:7d:95:b1:4a:ad:2a:f9:7c:6e:
f0:4b:0a:c0:25:cc:02:c9:53:96:c6:95:e9:9e:99:
a6:bf:28:bf:0e:97:a6:2d:c9:40:81:ed:4b:7d:4c:
61:3d:32:dd:30:e5:69:6b:f2:ba:67:d3:f6:ce:26:
6d:be:4c:50:34:4a:21:a9:62:5d:98:64:20:30:34:
5d:fe:64:5c:2f:9e:62:3a:eb:4b:27:3b:01:20:e7:
a0:a0:0a:6e:35:2d:97:a8:58:e5:9c:a4:04:2b:b6:
e5:aa:ee:8a:c2:e9:66:4e:53:53:98:1e:46:4c:55:
5c:e5:73:9d:a5:29:16:23:9e:67:25:69:c0:c6:c3:
a8:b1:a2:e1:b2:a4:78:32:9f:80:fa:40:5d:3c:bf:
93:38:ad:5d:19:64:b2:93:91:a4:38:3b:ed:15:bf:
01:17:7a:62:15:f5:aa:f4:95:d1:83:b5:5c:87:f0:
83:5e:bf:2c:43:56:d5:de:97:a0:cf:72:ba:a3:cc:
9a:0b:82:58:94:9a:49:f4:79:1c:c9:dc:7e:cf:77:
d0:59:b1:09:30:0f:6a:33:0b:06:71:62:6b:1f:ed:
76:c5:4e:5a:4d:92:f2:87:3e:10:b3:f2:69:1e:ef:
e8:60:cf:cc:0d:fb:1f:93:84:2a:ba:e3:5a:fd:a3:
3f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:17:FC:12:CB:10:5D:ED:93:FC:0C:08:31:B4:4E:D3:75:01:F9:D0
X509v3 Authority Key Identifier:
keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:23:87:0f:92:19:2e:f3:c7:8d:f8:fd:50:b5:da:1f:6e:91:
28:7e:a9:e1:d0:83:f9:2c:2a:b8:7a:e6:45:7f:7c:06:52:cb:
49:ca:70:3f:cb:0a:33:a2:7c:0a:07:89:5b:df:02:fa:ac:46:
12:8d:82:51:e8:2e:06:d5:64:eb:ca:fc:64:08:68:d0:6d:1c:
ad:57:38:56:76:46:a2:fa:79:35:7c:8c:96:14:3e:fd:82:62:
4d:06:10:92:62:32:6b:5d:57:47:57:46:e0:70:d5:a3:fa:b7:
08:6a:cb:e8:fb:79:37:92:2f:bb:09:95:3c:8d:38:3e:36:09:
31:b2:cb:df:e8:b1:b6:13:9f:fb:5f:32:be:50:f0:de:ca:0e:
3a:00:06:b9:ee:0a:e2:fc:58:49:e9:1c:ff:4d:c5:48:1a:3f:
80:25:30:e6:10:f0:dc:08:66:da:fc:70:29:99:6e:65:9f:4d:
e2:0f:f7:ce:6d:c4:46:a3:1c:4d:29:59:57:c5:2d:a3:c3:3b:
74:8c:0f:7f:0c:a0:95:37:e1:bf:8f:b4:77:c0:eb:a2:5e:22:
d5:4f:22:5f:22:45:13:c6:a5:4d:7c:b1:5e:d7:93:04:1e:d5:
3c:ee:e7:fe:49:aa:26:e2:40:e1:70:ca:fd:af:55:d3:51:60:
d7:37:5d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:09:09 2025 by rpki-client