Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier: eVJ0kyc3gqturWOztkHPoYOKTQ8Vjx9tmm6OXynG4l4=
Subject key identifier: 23:3A:91:0C:37:A9:30:48:A5:29:77:BA:36:E9:59:2A:5D:00:5C:75
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer: /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial: 0196A19B91952A7DFA4CA3AA2AFE8B83DD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number: 14B8
Signing time: Mon 05 May 2025 18:00:49 +0000
Manifest this update: Mon 05 May 2025 18:00:49 +0000
Manifest next update: Tue 06 May 2025 18:00:49 +0000
Files and hashes: 1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: oFB+HN/URZ+ZBaEy6iCQDRyf3MZZ2ID3u8chPMZKutQ=)
2: J9Y5qrjsI2Qtuq7klk41lQwg1og.roa (hash: NNuL/WZWhtDsn2nhsgr73rvUsNOJxUI43avvh9gIeRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:91:95:2a:7d:fa:4c:a3:aa:2a:fe:8b:83:dd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
Validity
Not Before: May 5 18:00:49 2025 GMT
Not After : May 6 18:00:49 2025 GMT
Subject: CN=233a910c37a93048a52977ba36e9592a5d005c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:93:cf:99:89:c3:f9:9c:e7:a3:6a:a1:dc:
13:f0:7d:ce:ac:a5:c7:6b:72:5c:ed:2e:b8:dd:db:
dd:4a:3b:a2:57:30:a7:fa:f9:5f:a4:26:31:ec:b4:
4e:e3:1f:f6:43:cd:58:42:17:b3:4e:23:7b:f9:e6:
dd:67:ae:80:26:7d:62:13:3b:83:14:26:2f:1a:22:
ea:13:e5:e3:99:e4:2e:ce:5a:36:2f:96:4e:55:e2:
a2:29:01:b0:4b:18:e6:b2:5b:c2:b7:f8:96:64:6e:
e8:7d:7a:13:22:e5:2b:c9:b1:f4:15:da:6d:e0:f2:
3c:06:bd:4a:e0:3f:32:69:7b:53:eb:6a:a9:e1:bc:
59:d6:04:a3:a4:72:39:b0:56:e0:9b:bb:ec:4f:36:
80:9e:39:e4:06:9f:42:c9:84:e3:93:af:5e:d5:44:
39:46:26:25:6d:81:74:af:8b:ca:fc:83:78:05:2c:
07:54:d7:a5:5a:7e:31:5a:24:9e:30:44:e1:f8:6d:
16:f0:65:67:6e:e7:93:08:0d:b3:5b:1f:dd:52:a8:
68:a5:d3:a4:bd:0e:68:d1:7e:3d:ec:71:18:86:d5:
95:76:3b:8e:cf:0b:36:e2:fa:7e:ab:05:68:02:6a:
2f:4e:16:9d:25:1d:0f:d8:94:41:06:34:b2:4c:d4:
89:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3A:91:0C:37:A9:30:48:A5:29:77:BA:36:E9:59:2A:5D:00:5C:75
X509v3 Authority Key Identifier:
keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0c:f8:b2:a1:8a:aa:38:e1:ac:91:de:58:d4:a6:c2:26:79:
60:71:f9:d2:c9:7d:c9:41:51:64:ba:91:77:b5:58:76:6e:11:
54:99:e2:36:35:cb:13:51:06:8d:d0:09:6d:3b:ed:c4:80:60:
a7:dd:7b:2e:6d:f7:f0:ea:8f:cc:1d:de:a3:ec:ee:72:d6:db:
35:34:18:78:b9:3a:29:8e:0a:bc:90:a9:03:37:a9:13:bb:86:
f0:d9:95:7e:70:32:9c:76:8d:d1:47:d7:23:d6:25:b2:70:75:
72:2a:f5:28:70:d7:18:1d:d4:31:63:5b:e6:86:16:4b:60:14:
0e:e2:27:3d:69:dc:6e:80:f7:ed:41:ef:4b:7f:6a:5f:83:d7:
f9:37:2e:1d:4f:c1:39:56:03:3c:68:0d:8b:bb:bf:ff:c1:31:
f4:20:3f:64:b0:01:24:94:bb:f5:f5:8a:50:d9:ce:6a:39:da:
52:4a:d4:38:2a:97:c2:a7:e7:4f:ac:cd:a9:12:4d:9e:3b:ac:
fc:26:5b:08:5c:a9:2a:06:12:a7:44:d4:06:30:bd:0b:9a:5d:
90:e2:40:fa:22:da:63:2c:a8:67:d4:ef:8e:d7:54:d8:01:e0:
ea:0f:a6:51:80:99:26:34:33:2e:52:30:58:f9:7c:a2:4c:59:
ea:36:df:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:39:06 2025 by rpki-client