Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File: 7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier: 47gsYKv6Q/30S42/pEOXD2+zbW4z0i7XsXn55KJWz50=
Subject key identifier: E2:B0:93:35:46:B7:2A:07:72:2F:5B:2C:2B:C7:CA:39:56:66:DC:D7
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 0196C01411B43BDE647B1514129DAF12170B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number: 12FF
Signing time: Sun 11 May 2025 16:01:02 +0000
Manifest this update: Sun 11 May 2025 16:01:02 +0000
Manifest next update: Mon 12 May 2025 16:01:02 +0000
Files and hashes: 1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: HfyYeQF3YeiHo/pbv3opIGlcfVP5e+f6BAtRJyEuDjk=)
2: Fy9dAaWIGt3DDwam3RK8I1POnD0.roa (hash: mN5AYrqpl0VfVq4+AtyPnI39fV2fuW1S27zeiDc2nYY=)
3: iXO3PWE_FsU0xKYk8Y2XbQDtbQM.roa (hash: iCHtjZhnNNI84krnhRcpRLsDA1PIVF/eAzRpZb4b+rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:14:11:b4:3b:de:64:7b:15:14:12:9d:af:12:17:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: May 11 16:01:02 2025 GMT
Not After : May 12 16:01:02 2025 GMT
Subject: CN=e2b0933546b72a07722f5b2c2bc7ca395666dcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:61:9c:c9:3b:ec:d3:9a:b6:71:cd:28:a8:
a3:0a:b0:df:56:73:7e:79:5c:cb:69:ea:b1:e1:57:
80:6c:17:6f:70:88:22:47:06:dc:25:89:bb:12:c2:
37:74:76:ae:48:4f:d0:b0:a8:03:98:e7:bb:64:47:
8b:bc:41:65:d8:44:dc:02:28:db:dc:bb:3f:e3:e5:
58:9c:4c:0c:50:9c:b1:e8:9d:ac:55:21:07:60:47:
a9:a1:ce:b3:ef:89:05:78:e6:2d:03:b3:30:ef:11:
74:27:56:5c:5d:53:e5:04:e6:63:78:68:86:59:58:
30:a9:7a:ac:47:f2:66:e4:7b:dc:db:55:84:c6:55:
6c:0a:07:0f:0c:d4:3b:39:a7:11:27:b3:e2:0b:6d:
d0:fa:ed:7a:65:20:46:98:e2:ea:db:d7:db:ec:5f:
e1:d7:48:ae:ac:db:3a:54:b0:8b:6e:37:b1:1e:18:
53:12:d8:fa:a7:b8:ee:d9:e4:ae:43:6c:c4:da:48:
69:69:64:55:6f:97:11:c3:e4:64:a1:d3:0b:02:52:
2e:ca:78:0f:67:51:ce:68:22:87:b4:14:2d:a0:ef:
d0:d5:91:7b:c7:81:65:28:03:f3:b5:8c:ec:f7:4d:
3d:f8:b6:62:f9:d1:26:48:56:97:13:42:5b:35:83:
54:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B0:93:35:46:B7:2A:07:72:2F:5B:2C:2B:C7:CA:39:56:66:DC:D7
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fd:51:ec:b2:e9:55:de:9e:b2:f6:24:f0:4d:4a:27:04:40:
5d:d3:9b:53:a9:d8:f9:d3:ee:a8:6b:f7:a1:00:13:f4:d8:ad:
39:b0:e6:a7:4e:45:bf:e3:3c:e7:f7:c9:c1:10:57:3c:59:63:
7f:05:5c:07:c6:69:ae:36:c1:98:e1:84:bf:66:ff:0e:04:50:
35:e7:ef:e3:c1:c3:47:54:8b:14:7c:eb:be:f4:1a:df:cc:47:
33:6d:8a:6e:1f:08:25:73:2c:db:b2:02:1d:8e:18:21:75:91:
8a:8a:5e:f5:10:8a:eb:fb:e0:74:eb:0e:fe:a5:fc:9c:f5:b5:
d3:2b:1e:a0:a0:a0:d0:c7:0c:27:5a:17:41:52:e5:96:79:5a:
cb:60:37:39:73:38:95:e8:3b:ab:38:30:cb:44:79:3e:33:d6:
f7:6a:3a:d8:94:c1:1a:49:3f:22:e4:cd:25:b0:4c:6c:9e:b5:
56:6b:4c:c7:a8:ca:a3:b3:48:bf:58:cf:de:27:5c:94:68:1d:
a6:c2:20:1b:50:63:1b:c6:3f:c4:75:f3:77:5d:54:56:64:d8:
e2:f7:5e:19:f8:2d:30:71:d1:7d:5e:ee:c4:3c:f5:c1:c5:b6:
4d:f1:bf:b1:06:42:44:bd:3e:fd:c6:c2:a9:e9:1b:8b:ab:8b:
3b:90:4f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:16:21 2025 by rpki-client