Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
File: p7He9pWIXq3lzMi0vioCuxYHnpw.mft (raw, json)
Hash identifier: z5jEQAkSfRugAASqvuzNx3IlfJZO0RvAU/tbcku+LNg=
Subject key identifier: E1:31:E4:5D:CF:91:38:A4:A0:DE:09:E4:BC:70:21:EE:7C:3D:EF:54
Authority key identifier: A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
Certificate issuer: /CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Certificate serial: 0196C04A7156757D5645F6AFF9730EF41057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
Manifest number: 0786
Signing time: Sun 11 May 2025 17:00:26 +0000
Manifest this update: Sun 11 May 2025 17:00:26 +0000
Manifest next update: Mon 12 May 2025 17:00:26 +0000
Files and hashes: 1: 2ZXONPsq8Wq-C73Y4ZOdG8CP47o.roa (hash: 23qtSB8U1yvtJIhVOx0ex1wgA9IS3rvYP3HTfvaa5cc=)
2: p7He9pWIXq3lzMi0vioCuxYHnpw.crl (hash: ThXZkqQJMnM+e7Vy7rgIJ5IhfQExtdZtH7oqIK/ybzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:71:56:75:7d:56:45:f6:af:f9:73:0e:f4:10:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Validity
Not Before: May 11 17:00:26 2025 GMT
Not After : May 12 17:00:26 2025 GMT
Subject: CN=e131e45dcf9138a4a0de09e4bc7021ee7c3def54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:d6:4b:f3:3b:a5:5d:41:02:e9:1f:48:2a:
5f:1e:63:46:2c:55:23:b1:15:ea:02:11:a7:26:fd:
9d:2d:9a:a6:59:88:c8:09:f8:99:34:01:32:34:75:
70:b5:51:78:1d:4f:80:6c:b5:1a:d7:ce:6a:df:4e:
95:10:14:62:65:06:cb:f5:32:8d:53:fa:2b:11:32:
17:7d:c5:88:07:60:39:45:2f:3a:f8:5c:cb:ca:8a:
c5:3d:a4:92:d8:79:2c:29:2b:9b:05:9a:ce:1e:bf:
53:ba:f8:d2:eb:e7:27:16:21:8c:87:b9:8b:1a:6c:
e9:a8:62:41:be:22:c4:cd:f0:f2:dc:0c:14:58:1f:
10:73:4e:25:bb:b3:f3:f4:be:ba:00:4d:e1:4a:84:
c4:a2:65:84:d1:50:4b:28:4b:5d:4b:e2:f6:67:48:
5e:1d:2b:a3:00:dd:27:f8:a6:d5:4f:59:13:0e:e8:
72:7c:45:b7:ec:8f:00:50:03:cd:89:cf:bc:e0:83:
d2:32:3c:db:09:1a:16:be:25:88:7d:45:d9:95:28:
6a:16:a5:88:24:12:0e:dd:1a:d7:a6:48:2b:a8:07:
cc:ba:14:b9:21:50:26:59:0b:e3:cd:85:26:88:cc:
85:7a:04:94:89:cf:e3:84:9a:a0:9c:e6:ab:8f:27:
96:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:31:E4:5D:CF:91:38:A4:A0:DE:09:E4:BC:70:21:EE:7C:3D:EF:54
X509v3 Authority Key Identifier:
keyid:A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9f:c7:f9:50:3b:95:76:6d:f1:c3:c0:ac:02:43:27:21:a0:
81:c0:8b:70:fa:17:09:7b:1f:e3:df:90:b4:e0:bb:01:fc:ef:
ae:1a:ed:15:c0:18:2d:ae:9f:c1:f2:99:6d:be:99:41:1b:87:
86:23:05:23:a1:89:43:b3:e9:33:73:31:a1:04:d0:1d:10:cd:
d2:81:22:68:45:59:94:80:ec:0d:79:af:1c:5b:fb:94:20:eb:
f7:ff:33:6b:3a:a4:ae:fe:c6:c2:ec:fd:a3:72:99:5a:06:65:
0c:85:df:e0:af:f8:8a:26:00:81:8d:1d:26:3a:29:48:53:91:
a3:bf:c8:2d:8b:c4:46:f1:5a:08:ed:04:25:f8:aa:86:87:60:
47:a7:1c:22:15:6a:d6:14:87:d6:08:9f:97:cd:b3:d2:72:0c:
4d:58:2d:9d:9b:2c:eb:ab:c2:38:1c:f8:4a:17:f1:c7:25:16:
82:80:ee:5f:23:94:95:89:aa:cc:c7:43:75:0f:3a:4d:fc:6f:
10:fb:f9:da:86:38:82:e6:ca:6a:a8:4d:7b:10:30:f1:83:ba:
48:6a:a7:58:12:ec:a1:02:f9:f1:90:29:2c:c5:9b:83:c9:96:
71:4f:51:2a:ca:05:39:57:35:ec:ae:9e:40:aa:ee:e5:a1:70:
c5:b8:80:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:20:46 2025 by rpki-client