Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier: AS/Kwobbk8HScwC8LMYf2Eq2QCuIMsecXJnf5Sj1/C4=
Subject key identifier: 02:05:32:E9:10:9A:37:BD:EE:80:5E:D0:7E:CC:85:BC:99:18:A1:4C
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial: 0196C20208CF640C376D7BD01EA5E41D6D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number: 01C9
Signing time: Mon 12 May 2025 01:00:35 +0000
Manifest this update: Mon 12 May 2025 01:00:35 +0000
Manifest next update: Tue 13 May 2025 01:00:35 +0000
Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: ll2ng9SllPqY3yvYgPqxGAtgkVBMk9NfFnsao6oqJv0=)
2: gylVxgv2wVCzGr0PfDa1DOljS0w.roa (hash: LJzn39XG+RijMzRlRM7pRtoqSA79D4mMA2x3jy4QHzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:08:cf:64:0c:37:6d:7b:d0:1e:a5:e4:1d:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Validity
Not Before: May 12 01:00:35 2025 GMT
Not After : May 13 01:00:35 2025 GMT
Subject: CN=020532e9109a37bdee805ed07ecc85bc9918a14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:6e:76:37:69:a9:a6:5d:4f:28:43:f9:36:
a1:fc:db:e8:71:a3:64:2e:6d:da:5d:ca:66:92:e6:
4d:b3:5a:b2:99:3b:ea:e9:30:1f:d4:c5:60:2e:b6:
64:bf:d9:90:86:fc:cd:e6:7b:36:66:59:1a:a3:43:
91:f6:84:19:07:67:8a:9f:2c:dc:37:aa:2e:5e:9e:
a3:c8:c6:73:4c:2f:87:ac:eb:7b:bc:44:f7:75:ed:
f4:b0:59:c2:0f:c8:ca:aa:63:5c:05:36:c1:1c:c7:
c6:aa:1e:ad:d7:22:c5:6d:5d:16:fd:2e:30:b0:48:
bd:7e:66:e8:da:cd:cf:e0:c1:1f:57:de:ff:7a:e4:
b5:48:e8:04:40:a7:f4:af:db:4a:c1:7e:b6:59:e9:
66:f3:8f:55:a6:c0:a8:32:02:a0:6f:86:5a:22:d0:
c8:c4:a3:08:6a:91:87:64:bc:ae:2e:aa:e8:a4:8d:
56:4f:9a:80:13:7c:84:b6:bf:3e:5a:07:52:f2:93:
9a:1f:41:6a:dc:59:54:05:99:71:88:8e:90:9b:87:
19:8a:8d:53:f4:1b:75:3f:33:f6:f4:fb:35:54:35:
ca:c0:18:a1:81:33:c7:4c:a3:e0:4d:ce:2c:99:cd:
c2:d4:74:90:c0:b8:fd:2b:ba:49:74:46:df:82:58:
15:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:05:32:E9:10:9A:37:BD:EE:80:5E:D0:7E:CC:85:BC:99:18:A1:4C
X509v3 Authority Key Identifier:
keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:58:b9:4e:d9:df:c6:11:3a:ae:ba:cf:57:67:76:01:e5:6e:
07:87:2e:86:f3:e9:5f:03:43:d2:eb:58:d6:a1:db:af:0a:13:
55:1c:c9:65:ec:ad:a1:3f:ef:7b:84:41:d1:34:91:b2:f6:56:
58:ea:44:5f:bf:02:1f:f9:b6:aa:92:63:d2:ea:9c:d0:96:69:
a2:99:19:94:9d:86:82:e7:ed:28:f1:d1:e8:df:e0:81:c8:1a:
a1:e1:2f:8c:f8:b6:b1:e6:8e:85:b8:8a:32:2b:6e:b5:6d:e2:
05:0a:6c:7c:19:50:03:ad:4c:a6:6f:25:a9:2e:6a:17:48:f7:
be:37:d0:40:ef:19:86:cb:fd:6b:59:79:f5:f4:44:af:c3:99:
40:e3:7a:60:0e:de:27:3b:e0:56:72:d8:74:9f:2a:9c:ed:0d:
96:a6:14:a7:d7:7e:96:5e:ba:ae:79:58:12:b4:10:42:07:24:
b4:3b:b0:a6:dd:e5:bf:3a:30:f6:3a:26:c4:ca:3a:33:28:5d:
f5:c7:77:a2:9c:01:23:de:69:5a:98:19:94:e1:de:03:cd:bf:
74:aa:29:26:38:66:fe:d2:f8:07:71:4a:b2:c1:33:d9:d2:9d:
ea:1b:54:8c:28:b9:49:62:d1:0f:e8:f5:ed:4d:87:1d:5c:d1:
79:67:96:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:22:33 2025 by rpki-client