Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
File: 7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json)
Hash identifier: t3Ku/jpbNp1UjmKEWmas+QEOcqnArEbdZd1vDqYEatc=
Subject key identifier: DC:03:56:1E:44:C4:3C:81:5B:28:C8:55:65:89:E8:9D:16:77:52:7C
Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
Certificate issuer: /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Certificate serial: 0196C34B579E5EDEE6EB6A3A248413095A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 07:00:16 +0000
Manifest this update: Mon 12 May 2025 07:00:16 +0000
Manifest next update: Tue 13 May 2025 07:00:16 +0000
Files and hashes: 1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: m+9NrReDgRGyeoZn3mQBYssltGe+0W7Ne6it/tXLEHs=)
2: xE_JDYJwb1MCr7C57Rm2iLhdKIw.roa (hash: sRhgH4Cj24QxldRTdKVZiNUSEzN+8JXEsh8ETe2KACg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:57:9e:5e:de:e6:eb:6a:3a:24:84:13:09:5a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Validity
Not Before: May 12 07:00:16 2025 GMT
Not After : May 13 07:00:16 2025 GMT
Subject: CN=dc03561e44c43c815b28c8556589e89d1677527c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c2:aa:fe:84:2d:51:8a:e4:ec:d3:62:69:2b:
e0:0e:e5:54:e7:16:51:aa:e5:6a:c1:84:82:a6:15:
de:37:f2:66:04:44:be:fa:ac:38:5b:34:cb:9e:18:
d5:fa:fc:27:78:d6:a8:38:f2:93:c2:28:0b:f3:a6:
d3:c8:a7:b8:e7:54:0d:2f:36:ee:ac:99:e9:c1:93:
37:6c:ea:2c:fa:0d:98:d3:ce:be:33:ac:ae:c6:b8:
b7:f1:4c:a5:f9:72:fb:92:d9:62:98:b5:12:9b:75:
11:05:64:40:d3:e6:20:49:b2:94:11:ab:42:67:4a:
ce:c9:2e:3e:cf:be:69:47:0e:be:3b:a4:bc:22:d5:
86:96:17:42:8f:b8:52:20:6e:8f:5b:c8:b9:4e:a5:
47:b6:78:5a:94:d9:24:27:92:d3:54:96:e2:69:ad:
0f:43:a6:0a:f8:eb:28:e0:7c:9f:16:87:9a:2a:3b:
7a:8a:d2:44:29:15:2a:8c:75:aa:6a:cb:02:cc:18:
e1:df:13:76:f2:de:c6:5f:77:34:f7:d5:1f:80:db:
cc:fa:72:4f:ab:61:ee:93:c4:64:49:51:b2:dd:d8:
94:9b:de:53:7d:c2:d4:5e:e7:39:1e:52:b9:5e:9a:
12:40:56:8a:f8:76:48:59:8a:1f:76:75:e6:5e:06:
ce:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:03:56:1E:44:C4:3C:81:5B:28:C8:55:65:89:E8:9D:16:77:52:7C
X509v3 Authority Key Identifier:
keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:62:c8:0d:3e:b5:91:aa:eb:f8:d9:5b:6d:bf:9e:bb:b9:f2:
7d:69:3d:be:e6:5f:4a:d7:6a:a7:ea:d5:18:84:31:2e:3b:31:
e2:96:5d:52:5e:64:11:2d:81:de:05:08:de:97:28:6f:32:cd:
9e:c2:c1:31:67:7c:7b:e4:54:52:a8:c9:9e:f3:d7:40:68:67:
db:22:5c:8e:6e:8c:8f:e9:c6:95:70:1b:3b:68:0d:9f:1e:54:
d3:1d:e8:fe:a4:94:09:17:58:52:e9:ac:ed:0c:af:fc:22:7e:
3b:85:cb:9c:0a:d4:bd:fe:38:44:18:09:4c:c6:2b:1e:a9:e0:
4a:11:35:04:ad:92:3b:ce:5b:8d:e9:14:94:0c:b6:19:7e:68:
20:bc:37:5e:de:71:54:80:22:9f:a4:02:3e:87:44:b8:7f:ae:
72:41:19:0c:4a:ce:30:e0:1e:0d:a4:50:67:45:2a:1d:78:df:
e9:57:bf:fd:aa:8d:39:5e:14:6a:25:40:87:18:a8:6a:c7:5a:
ed:da:49:8b:85:1f:e9:54:85:45:ee:00:29:55:6a:4f:ce:34:
59:00:34:36:48:7e:7e:57:25:a6:f5:bc:02:58:fa:9e:43:8e:
d1:ba:d9:c8:8c:f4:b8:67:ef:63:f3:87:f2:fb:c2:bb:87:70:
13:6a:a1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:45:48 2025 by rpki-client