Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
File: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft (raw, json)
Hash identifier: H6SCtTg48wIE20PoCT5fSiVtkxMj++Uq1bKzOhqr9J0=
Subject key identifier: B1:A7:B0:04:A3:E7:33:BD:C5:31:D3:80:AD:B5:94:BD:77:FE:3A:16
Authority key identifier: D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
Certificate issuer: /CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Certificate serial: 0196B2FC8D93332E8A5EB0A3F8B0CC8BA2B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
Manifest number: 1E
Signing time: Fri 09 May 2025 03:00:17 +0000
Manifest this update: Fri 09 May 2025 03:00:17 +0000
Manifest next update: Sat 10 May 2025 03:00:17 +0000
Files and hashes: 1: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl (hash: 9Us6mWEQ5wXIVoT91wTbFA1Ja7hKBxmdfjcymDIoFNU=)
2: FyqKK2FcK12A9-k5axnFf2sz21k.roa (hash: W5mhlrOLXBrpKomBUnhpTyesgUMLSIHoT9QMJTSp0oA=)
3: rF6Gqj7_srm_DIMIqHN-GdQzygE.roa (hash: 2gAliij8n2m8vHu7/1GlcWyJj1a4KLcr3RlOnjXIB4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:fc:8d:93:33:2e:8a:5e:b0:a3:f8:b0:cc:8b:a2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Validity
Not Before: May 9 03:00:17 2025 GMT
Not After : May 10 03:00:17 2025 GMT
Subject: CN=b1a7b004a3e733bdc531d380adb594bd77fe3a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a5:e1:3d:bf:6d:00:69:c5:2c:15:df:5b:86:
7d:55:7a:1e:1b:a7:48:59:90:ed:63:e4:2c:b2:03:
90:a1:42:42:a6:ae:93:e8:59:46:be:af:82:2a:4f:
4c:0d:6a:6a:4a:dc:7c:12:3c:d4:af:4e:53:ca:a9:
e1:d8:fe:b3:c1:72:58:24:d1:b9:e9:18:c8:e4:23:
e2:b7:61:f2:ed:82:31:23:c8:1e:e0:0c:b7:7f:5b:
82:76:b1:1f:83:b3:79:14:5a:8d:1e:9a:dc:21:05:
7f:ca:b9:f2:47:8e:98:88:f9:fd:27:5a:10:e0:84:
71:3e:6c:36:71:48:81:9d:c6:f9:f6:20:2f:1d:a2:
f2:51:ba:7b:b6:be:55:d5:65:eb:bf:6a:aa:37:3a:
6c:98:d0:0f:ff:1c:bd:d3:a2:7f:bb:0b:be:c5:e6:
c1:29:9c:32:0e:c5:ad:8a:d2:09:ae:43:55:e2:44:
a4:34:92:a3:48:aa:86:94:4d:9b:dd:24:dc:d2:cd:
4f:54:a3:42:6b:61:57:cb:34:c9:b4:42:7c:04:48:
2c:39:6f:43:2a:45:c9:55:8a:d7:92:ae:0b:0b:19:
45:5c:c0:c7:ab:42:0e:fd:aa:f2:22:a3:14:c4:f2:
6c:51:42:57:2d:a0:16:36:0e:25:20:ff:d5:32:91:
44:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A7:B0:04:A3:E7:33:BD:C5:31:D3:80:AD:B5:94:BD:77:FE:3A:16
X509v3 Authority Key Identifier:
keyid:D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:86:9e:2e:60:1f:5c:db:bd:17:4f:87:ec:d1:0d:23:3a:38:
30:ed:24:0c:63:92:4c:be:df:35:15:42:69:16:a2:0f:a1:75:
06:f8:fd:a8:a6:9a:fb:0f:42:c6:0b:a4:61:33:5f:ab:ee:f4:
6f:e3:b3:22:ed:b5:4b:04:97:4a:a2:04:5b:ba:e5:29:59:b8:
52:22:e5:bf:9c:5b:1b:01:d7:d6:af:63:86:11:a0:39:ef:f1:
fc:09:7d:9f:d7:46:5f:c8:3e:3c:20:c0:a2:77:91:75:77:9c:
bc:1c:34:62:76:1b:7c:7e:99:95:77:c7:51:3d:ca:59:98:fd:
b2:b4:6a:ff:fb:53:65:ff:a4:95:5d:02:31:5b:51:7f:17:42:
85:5b:12:0c:18:d9:16:5d:5b:e5:dc:7d:c5:e7:cb:3b:ec:8f:
6a:4b:ae:6f:eb:02:c3:c6:fa:8c:8a:3a:71:f1:32:59:4e:92:
67:cd:a5:73:6d:7b:bb:97:7f:5e:f2:54:b8:48:7f:bb:94:3f:
ad:7f:ed:5e:c0:1b:88:9c:b8:e5:65:d3:32:87:9f:b1:28:e8:
a2:2a:9d:02:fd:ac:84:7c:93:b6:4a:77:c3:08:dc:d9:50:e2:
fa:7e:76:b6:ee:5b:fd:66:e1:95:90:9e:e6:4a:b2:c9:12:ca:
63:b4:db:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:28:13 2025 by rpki-client