Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: 05u1QOapg8S2mCbSmX2QeoQ/wWO/pkvwUoSN9Jm2mik=
Subject key identifier: 47:BD:8F:ED:CC:32:FF:6F:22:5B:60:61:95:A8:A3:2E:4D:CC:78:C7
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 0196D852F3E270EFBC81933438BDA6BA4920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 1544
Signing time: Fri 16 May 2025 09:00:37 +0000
Manifest this update: Fri 16 May 2025 09:00:37 +0000
Manifest next update: Sat 17 May 2025 09:00:37 +0000
Files and hashes: 1: 1utcwuOmOI7txytHlcapG00bDWQ.roa (hash: KoDsbv2AuvIm5mO9VxRMXrTvsRyvxgVtQhUhy9Zv0J4=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: MlUTf9xd7sWIUxt+sSvtYw/QTCIEASviuT1qsDDoo80=)
3: TrlTZgPgCl4W0jfXLUtGOTnjCCI.roa (hash: SXaSky/YVlsAmsXgPwkA8PXkQ+jueu3hy97DblT9VwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:52:f3:e2:70:ef:bc:81:93:34:38:bd:a6:ba:49:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: May 16 09:00:37 2025 GMT
Not After : May 17 09:00:37 2025 GMT
Subject: CN=47bd8fedcc32ff6f225b606195a8a32e4dcc78c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:4c:24:c4:8a:53:1c:6d:17:74:6b:61:a6:
9c:aa:8e:b9:27:f2:a2:9f:a1:b4:11:d3:39:46:58:
6a:42:2e:de:f8:d5:90:07:f6:8b:84:a5:5a:b4:1f:
eb:92:db:09:a4:01:11:33:db:e0:cb:de:56:b6:77:
5c:06:7c:2a:41:f4:a2:68:86:7d:95:e9:5e:7b:75:
c7:5a:ed:46:9a:a9:e8:cd:72:17:40:96:8f:9f:4b:
dd:7c:34:a1:1e:0c:0d:cd:45:78:03:22:bd:d9:31:
d2:6b:8a:d3:6c:21:0a:de:5d:87:44:4d:e3:7d:5d:
15:f0:24:cd:d2:03:4f:66:bd:8d:a7:59:30:45:d8:
c8:0d:54:5b:5c:a6:fe:92:dd:f7:c6:27:e4:b8:5c:
f2:4a:f4:1e:95:a2:41:43:43:c7:51:e3:af:3c:30:
fa:d1:0f:1d:83:19:7f:29:b6:6a:c4:f7:48:72:18:
85:19:04:30:a9:4c:f7:6a:3e:a6:11:48:0a:9a:ee:
89:56:1d:bc:50:94:c8:06:4c:fb:67:8f:23:94:26:
24:75:0d:a6:9c:52:00:c9:4e:79:e0:58:c7:20:50:
f4:6a:02:32:4c:3f:05:9c:3e:2e:16:10:b1:50:78:
0a:33:ec:ff:8e:66:a8:dd:54:ec:00:1f:5a:e6:b1:
78:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BD:8F:ED:CC:32:FF:6F:22:5B:60:61:95:A8:A3:2E:4D:CC:78:C7
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d7:23:2d:bf:0b:f6:67:17:e6:74:f5:c2:01:d1:da:6d:06:
87:21:90:4d:e6:e1:ea:fa:fa:65:bf:0a:6a:17:5e:19:f7:0d:
d4:76:5d:20:90:50:9a:ed:14:a5:e3:19:d1:4c:f7:33:6f:76:
72:36:d4:7a:8e:57:b9:e9:36:6b:40:ea:a5:be:cd:4a:3a:a2:
5e:a5:f9:50:16:53:95:6c:5f:d8:a2:5a:9d:91:30:92:98:0d:
b9:76:50:70:0b:85:10:92:55:f5:89:ab:26:78:70:aa:e0:71:
10:57:23:d7:18:2d:4c:d1:a0:b1:ef:db:aa:69:9e:6b:f1:be:
71:3e:97:81:aa:70:cc:f9:db:20:d6:58:73:a8:1c:38:59:d8:
73:04:02:20:e9:42:72:89:5e:3a:a2:76:ac:3e:90:11:ac:8d:
49:e6:0f:c4:d4:2d:b7:88:d5:87:f9:36:b8:d6:a8:2c:61:18:
8a:96:e6:ac:6e:d2:8e:83:5a:78:a4:b0:f8:f1:cd:60:96:74:
1f:a3:95:a9:48:cf:b2:08:61:6a:2d:bd:30:4c:2d:0f:af:d6:
80:91:66:b5:27:0c:08:d2:11:71:9f:7e:00:1b:fd:bd:c5:a7:
3f:1e:bf:bf:7c:a2:ea:d6:c5:69:47:5a:b3:6b:b3:0f:39:ea:
1f:73:99:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 14:33:59 2025 by rpki-client