Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
File: 7VkCvfvXTDPqdkU9FF529qqFfEE.mft (raw, json)
Hash identifier: PpjRu1lrbT1d31xe1UNcPy2Qk+wNmlZesXLKEvPwLUk=
Subject key identifier: F2:A4:84:BF:E4:44:83:93:FF:11:2C:82:61:33:31:9D:36:55:7E:83
Authority key identifier: ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
Certificate issuer: /CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Certificate serial: 0196A72F8F461D9CDBC85A0AA65C08D7EF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
Manifest number: 1529
Signing time: Tue 06 May 2025 20:00:34 +0000
Manifest this update: Tue 06 May 2025 20:00:34 +0000
Manifest next update: Wed 07 May 2025 20:00:34 +0000
Files and hashes: 1: 7VkCvfvXTDPqdkU9FF529qqFfEE.crl (hash: HNMPS1dB8+VDGHf5pgx4urbsuIBUWNyYLe+7MhJL4eo=)
2: b9uFZXxchqu_WU8UVL2lcEelg1M.roa (hash: NHGZBJUOGWUhtzmDGEI+zLtl0jv4NmQvyCdklZRG/7E=)
3: mGTK3wTvfhonNVwr6seWi2ASIP8.roa (hash: aYF3ywz/BlGpMX8QkbZOivZvZOPC3l60CNt4ow7w3FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:2f:8f:46:1d:9c:db:c8:5a:0a:a6:5c:08:d7:ef:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Validity
Not Before: May 6 20:00:34 2025 GMT
Not After : May 7 20:00:34 2025 GMT
Subject: CN=f2a484bfe4448393ff112c826133319d36557e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f6:db:33:83:58:88:13:8e:31:61:5d:35:85:
ad:9c:d6:e1:e9:1a:fb:9d:28:0c:4a:87:9c:ef:32:
54:71:20:82:ab:2b:32:92:61:7a:b7:6a:a4:58:4a:
00:bc:f5:6b:bf:d6:d6:eb:c2:3d:59:4d:25:31:f0:
f9:73:e8:a1:21:4d:b0:8b:ce:a6:7c:68:e1:9f:b2:
83:3a:08:5d:98:bb:3b:16:8e:f3:e8:b6:57:92:33:
ae:5c:08:52:35:29:0d:3c:c5:cb:9d:8d:81:80:ce:
62:0b:ba:ce:a9:c0:c1:6e:fb:ef:95:61:c7:04:ba:
a1:ce:ec:a4:da:50:7f:71:fb:3e:4e:5d:79:18:8d:
47:19:76:e8:ca:39:68:e4:89:05:a4:e3:b2:14:cd:
05:fd:bc:1a:d1:4b:54:ca:77:27:62:1e:01:32:48:
63:4e:e3:2d:95:9b:bc:51:48:88:5c:b9:4e:94:a8:
2e:4b:e1:78:3c:5b:0f:73:0d:52:d3:96:78:bd:f6:
5c:1c:28:13:c8:69:1e:db:61:85:92:c0:46:8b:f0:
c1:71:84:d9:59:b1:14:0d:ae:3f:b2:3e:b4:8f:73:
a1:0d:f1:7d:94:66:a9:3c:28:98:cb:16:15:73:fd:
61:1e:6a:4d:95:72:f9:94:d7:0e:48:97:3c:6c:ca:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A4:84:BF:E4:44:83:93:FF:11:2C:82:61:33:31:9D:36:55:7E:83
X509v3 Authority Key Identifier:
keyid:ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:36:0a:bd:5d:cd:36:7a:14:c4:2d:a6:97:51:ff:57:4a:3b:
10:d5:f5:45:01:b3:c5:3b:67:96:17:81:09:c5:f7:62:2d:2b:
ff:36:81:56:4d:11:c0:95:cb:50:2d:fa:34:d3:5a:df:c6:54:
ee:a0:6a:6d:08:40:00:2a:51:39:47:47:b0:59:6f:b9:75:2f:
cf:8c:cc:ae:8d:ad:55:42:a6:ad:e4:c2:fd:ef:60:77:bc:6d:
6e:a5:ac:c5:92:78:e1:a1:52:92:bc:24:d4:38:1e:33:c1:3c:
21:19:24:d2:7b:2c:d0:95:e3:f2:bd:b2:4f:87:dc:9e:3c:a1:
f8:f1:e2:c7:27:e0:b1:63:05:e9:21:89:97:a3:0e:b2:d6:83:
81:3e:3d:7c:91:24:8e:00:1c:99:c9:49:49:38:18:ec:f5:2c:
6e:5c:97:fe:42:6b:be:1d:e8:23:ee:35:73:cf:5d:7a:6b:5f:
8e:0d:ef:2c:cb:f4:cb:b2:25:c4:4c:91:b0:5f:85:9d:d9:b9:
2b:9a:f8:58:85:48:42:3e:7c:43:f8:ef:f5:d2:1a:7c:de:f4:
07:80:7c:b8:45:2b:1f:0d:be:c4:47:a4:f9:72:63:8d:bc:2a:
54:63:fe:9e:db:15:1d:83:67:72:6c:3e:b3:d9:db:84:91:01:
dd:56:f4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:32:00 2025 by rpki-client