Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier: hxJsGq67F03SFBLj1LaEgzV9MNhzvZprfVXsUdEVHag=
Subject key identifier: A3:7F:67:B3:C9:60:11:89:77:F9:F4:90:7D:66:B1:36:FA:1F:00:04
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial: 0196D7ADDE7045A93B3ED824364A4D7B96EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number: 1541
Signing time: Fri 16 May 2025 06:00:18 +0000
Manifest this update: Fri 16 May 2025 06:00:18 +0000
Manifest next update: Sat 17 May 2025 06:00:18 +0000
Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: D1SVikdyFnKFo8zpnMsxECKsOy6wzhsPEYM2gqZ4ubM=)
2: RaAEl3d_JRDv1Gh70YgnmuhGt2U.roa (hash: YfWCdAfvoB99C3m3pYbHWHqNvMIlHgsog7DBtbldBro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:ad:de:70:45:a9:3b:3e:d8:24:36:4a:4d:7b:96:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Validity
Not Before: May 16 06:00:18 2025 GMT
Not After : May 17 06:00:18 2025 GMT
Subject: CN=a37f67b3c960118977f9f4907d66b136fa1f0004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:23:47:42:b8:9f:6c:6d:02:93:1f:14:f1:
33:dd:7b:0b:e3:e1:d2:ed:03:c4:c9:01:4d:9d:53:
c1:e7:1c:71:4e:df:2e:6e:64:b3:5e:d7:be:e3:da:
86:b2:9d:07:51:ec:ef:5a:c9:91:4a:56:87:17:a5:
a4:cd:13:d8:6d:2d:33:14:73:a9:5c:1a:b1:2f:e8:
c4:11:95:13:28:ca:18:b1:75:af:e8:44:f5:9e:0f:
51:e9:71:3f:5b:5b:a8:b8:19:00:4f:cc:b9:8d:1c:
a5:f4:60:57:d1:fd:28:63:42:62:d8:e4:48:0b:ad:
9f:fa:67:ab:b3:a1:9a:4f:e7:dc:8c:22:dd:d2:ca:
86:03:33:00:85:1c:7d:47:68:d5:eb:89:cd:25:21:
71:34:a1:bd:75:d8:ce:25:92:51:d5:33:c0:48:08:
8a:95:5a:64:b6:79:f4:d7:9a:86:f7:ac:f3:4d:03:
9b:d8:08:0d:76:84:91:47:9a:06:0b:29:0a:13:94:
b7:4b:4f:36:01:e2:cd:97:82:56:74:25:f7:26:12:
3f:ba:83:58:80:35:6a:03:d2:6f:88:56:27:9b:49:
86:9f:8e:87:e2:cf:c1:1b:88:f0:4f:da:8a:3a:3b:
f8:3e:61:a3:e0:03:86:e7:80:9f:71:7d:2f:8d:43:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7F:67:B3:C9:60:11:89:77:F9:F4:90:7D:66:B1:36:FA:1F:00:04
X509v3 Authority Key Identifier:
keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:68:b0:fc:f7:26:39:1e:91:f8:6a:76:1c:e0:a4:af:38:7f:
5e:51:1a:1d:46:0d:5a:58:e3:00:85:ef:8c:6c:7b:d3:1e:95:
6d:d8:b4:e1:c1:88:a3:eb:0e:d0:0b:54:e9:e4:67:94:a5:42:
8d:01:bb:5b:f4:f3:30:37:09:ce:f8:71:47:fa:8d:37:65:c3:
c9:98:a0:72:70:a6:02:ac:80:d2:6b:37:e9:83:0e:b7:02:e3:
38:ed:8a:2d:ee:6d:bf:da:da:66:4e:a0:bd:49:21:8c:ce:2d:
71:cc:b1:d5:5f:29:b5:7f:51:c3:32:4b:49:04:3a:25:5f:2f:
e1:af:38:69:b8:ed:83:2d:8c:26:9a:ec:c6:12:91:23:51:54:
56:5e:43:f9:04:e0:13:3d:45:87:c1:bb:1b:dc:da:71:18:d9:
5b:e9:a2:e0:43:e6:de:db:0c:1f:5a:60:1b:7e:9a:ad:7e:9e:
f7:2e:ef:6a:64:20:cc:c0:78:13:20:a3:21:41:73:e7:b2:6b:
3d:43:54:c7:56:84:7d:61:81:20:2f:96:b6:f1:d2:44:bd:54:
fa:6d:d7:5e:df:4c:1a:0d:93:26:f2:dd:b3:c0:53:0f:56:d9:
17:de:62:20:25:6a:d2:08:75:a6:ad:fc:75:39:b1:2f:1a:4a:
5b:91:d1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 09:48:29 2025 by rpki-client