Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
File: 7gZE9wYh3Uokp4tntGApSFc3WMA.mft (raw, json)
Hash identifier: TUspfBzx9JagSmlHRuI2LqzB9Rx2FKlm+uk5B/00zIU=
Subject key identifier: E4:C6:F3:77:74:EB:6A:A2:AF:FF:C9:B5:10:2A:08:67:55:38:4D:2C
Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
Certificate issuer: /CN=ee0644f70621dd4a24a78b67b4602948573758c0
Certificate serial: 0196AE7B872CDAAD6790EC72C21767519D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 06:00:53 +0000
Manifest this update: Thu 08 May 2025 06:00:53 +0000
Manifest next update: Fri 09 May 2025 06:00:53 +0000
Files and hashes: 1: 7gZE9wYh3Uokp4tntGApSFc3WMA.crl (hash: 2IrYCzDXuRxd3VIOA/ACT5rKtyOBIxg0a94kw6a98A4=)
2: SevLX3l4TAijWhvCzFiJEtxi9zc.roa (hash: sBEIXGef/JFr7rPt1AMHS1m2tgKfrXwqEjoioS0QrFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7b:87:2c:da:ad:67:90:ec:72:c2:17:67:51:9d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0
Validity
Not Before: May 8 06:00:53 2025 GMT
Not After : May 9 06:00:53 2025 GMT
Subject: CN=e4c6f37774eb6aa2afffc9b5102a086755384d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:13:74:a2:92:33:08:f3:bd:22:a7:5d:be:88:
bb:4b:14:50:ca:d2:3f:f9:dc:cf:c2:17:cd:f6:d3:
4e:3c:f7:af:ce:a1:77:a7:71:3e:ea:c8:ee:22:28:
90:d1:0b:ab:e7:68:62:87:6f:fc:d3:f1:6f:79:26:
0d:96:db:9b:cf:a3:e6:17:71:04:5c:d3:8a:e9:e7:
15:2a:07:22:8f:fc:df:ee:4b:0b:3a:59:44:96:d9:
c2:7e:ba:25:8c:8b:57:af:66:2f:e7:fd:af:cf:a0:
2b:ed:e9:fa:f1:c7:cf:f0:fa:5c:43:b3:57:1f:39:
72:25:a8:51:e1:69:76:65:6e:bc:03:34:cb:89:ee:
64:3e:d0:2b:b6:e7:e0:4f:ee:57:5c:dd:0f:dd:7f:
d0:06:c1:f3:84:d1:58:1f:2e:2e:a6:65:52:2e:57:
cf:df:59:c4:7d:4b:51:79:09:d2:13:a3:10:f6:a6:
e9:77:45:03:c9:0e:aa:61:8c:03:82:fd:a4:77:11:
54:70:d4:eb:14:be:66:24:98:9a:6f:82:39:c5:11:
1d:cf:dd:4e:4d:92:ed:d5:f9:cf:98:ae:55:10:69:
48:ac:a9:5f:56:15:38:12:b4:26:d8:24:f9:5a:74:
37:d0:06:42:c4:fe:8f:aa:02:e4:0d:ab:49:92:5f:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C6:F3:77:74:EB:6A:A2:AF:FF:C9:B5:10:2A:08:67:55:38:4D:2C
X509v3 Authority Key Identifier:
keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:de:95:b3:f5:fc:a4:f6:8f:b4:e0:66:b1:71:3e:87:34:fa:
88:32:55:68:82:ad:9f:07:d3:75:d7:8d:31:2a:78:5f:e0:5f:
b6:fc:42:52:bd:62:fd:cf:7c:9a:ec:e7:f2:d5:ab:98:6f:98:
21:a8:6c:6a:a8:e4:c0:2f:e0:20:59:3a:4c:52:7a:ac:fe:5f:
5f:9b:3f:47:81:d3:26:f0:c1:60:45:d4:5e:db:ba:d3:e0:1e:
5a:f5:af:cb:c4:c7:53:fe:57:4f:15:2e:c8:f7:e6:51:10:c3:
c2:7b:c7:c6:80:a5:f6:2c:2a:a8:8a:66:46:e1:25:79:81:3c:
80:27:22:04:0f:fb:ee:90:5f:68:70:98:a5:75:17:7b:d3:a9:
e5:7b:9e:ea:57:44:b4:80:83:72:76:d2:3f:e3:99:0a:61:2f:
b7:f0:de:b8:c2:00:ec:98:06:f5:e6:fc:23:1a:d9:ac:83:74:
7f:c3:53:20:0c:91:2c:51:5a:18:bd:1f:5b:73:12:5f:d6:36:
ef:25:01:7f:b8:3c:ca:a2:8b:30:85:fe:45:c5:22:63:da:d2:
3d:73:c7:0a:da:5f:0b:bf:8e:da:24:e5:d4:2a:9a:88:c2:3e:
21:d3:e9:63:e5:2d:9c:a7:85:fc:f7:6d:28:fd:fb:c3:95:aa:
67:1d:1d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:38:31 2025 by rpki-client