Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
File: 7cJgAozSqx0OQ3dPRATezSeu88w.mft (raw, json)
Hash identifier: KrnLmPiSXgIGf2ugVR0oZrOeET6XhEXzb6JkvOVUI5s=
Subject key identifier: 31:13:D6:0E:07:05:4B:2C:B2:C3:DC:A5:6B:16:83:40:F5:18:D6:55
Authority key identifier: ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
Certificate issuer: /CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Certificate serial: 0196C5A7EEFBCF738BF487CB09106B6F30A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
Manifest number: 1108
Signing time: Mon 12 May 2025 18:00:39 +0000
Manifest this update: Mon 12 May 2025 18:00:39 +0000
Manifest next update: Tue 13 May 2025 18:00:39 +0000
Files and hashes: 1: 7cJgAozSqx0OQ3dPRATezSeu88w.crl (hash: cgV9jZ27G1elL1nV9rsEs6VUb3yYIZ/bLkgKQSwPW+0=)
2: yR3tS_ANDk4tqqBt9oy3aE3IVVA.roa (hash: CBFaXVlyf8O1AiwoLakDijfjU7v7khHrl6opiRBTnoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a7:ee:fb:cf:73:8b:f4:87:cb:09:10:6b:6f:30:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Validity
Not Before: May 12 18:00:39 2025 GMT
Not After : May 13 18:00:39 2025 GMT
Subject: CN=3113d60e07054b2cb2c3dca56b168340f518d655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:1f:66:0d:07:b4:02:f4:b5:77:10:ec:6d:
0f:73:ba:20:d2:7a:80:d5:b1:f3:c1:b2:98:99:ba:
3f:d3:fb:73:36:63:1b:17:81:84:58:40:1c:00:67:
88:92:6d:ec:1c:c7:63:e8:ef:8c:db:9b:02:91:1c:
df:77:8e:ca:b8:0c:e0:d6:ff:ce:bc:22:69:8b:89:
ec:d0:f0:39:4c:62:3c:69:08:74:5b:49:98:b0:59:
4e:c4:b3:cf:75:3d:c3:b4:68:25:45:d6:62:37:73:
18:fc:04:27:23:96:ad:a3:21:0b:69:e4:92:30:bb:
8a:c9:3c:d7:92:12:b9:7e:1e:20:07:9c:5c:81:75:
aa:30:05:fb:2d:cf:15:74:ca:46:69:77:7a:18:58:
97:14:f8:53:d9:ef:b6:1c:db:0b:05:75:4a:61:f0:
36:ad:cc:84:2a:3e:58:a9:3e:8a:85:26:4c:0c:cc:
dc:d0:00:29:fe:c4:5e:e2:68:4c:c8:eb:f4:52:38:
a8:9b:93:4b:77:df:31:2c:53:09:a5:e4:46:65:59:
58:d3:ed:6b:55:5b:33:ba:05:de:46:17:3b:59:1a:
7d:06:4b:71:34:0e:89:a4:6d:d0:1c:33:ce:3e:f2:
11:7b:63:02:54:f9:79:e4:33:bb:c0:b9:e0:d1:f9:
58:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:13:D6:0E:07:05:4B:2C:B2:C3:DC:A5:6B:16:83:40:F5:18:D6:55
X509v3 Authority Key Identifier:
keyid:ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9d:ee:db:42:f9:2e:09:22:4e:14:c5:2f:5f:3a:de:f4:dc:
7f:30:f8:58:81:b6:bc:29:3f:85:72:64:bd:fd:66:2d:48:45:
8e:a7:95:3e:56:60:8e:b7:21:93:fe:b5:9e:5b:73:78:7e:52:
42:b4:fe:0a:07:4f:12:99:45:4e:55:82:91:1d:1a:60:11:cb:
f9:2a:49:75:83:ee:7f:04:0b:ff:23:4b:7e:03:39:4b:bc:76:
d8:96:da:67:26:ce:40:22:63:93:9f:4d:5d:0b:b1:20:c1:a0:
e8:c9:e8:45:f6:b4:58:61:e4:31:b1:3b:a2:90:6c:f3:1f:cf:
97:38:d8:60:66:0e:54:1a:26:dd:85:6c:93:fe:79:e2:5d:e9:
89:f5:22:17:48:cb:e3:b1:26:d8:25:14:46:2f:d7:50:c7:1e:
cf:d7:44:35:53:89:0d:a9:fb:a5:fd:64:f2:bd:a3:f7:94:10:
50:7c:d6:c8:61:85:1c:40:3d:61:f3:70:81:dd:ac:1a:45:86:
c0:52:0f:ce:6c:b0:f0:a5:eb:88:9e:50:7d:19:59:b7:28:56:
7d:3d:5f:03:9f:3c:0f:3d:c4:0e:8a:9f:85:4a:6f:c8:ae:74:
3e:6d:7d:db:b1:cf:3d:f5:9b:18:c8:4e:25:85:b8:40:bc:94:
ae:09:2d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:22:37 2025 by rpki-client