Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
File: 7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json)
Hash identifier: mFtUmaRudJBG5Ugq24PsmYQv/EjUqR/L5gGVIavsIj4=
Subject key identifier: A3:A5:ED:D6:45:E5:C4:51:52:DE:CD:2C:80:4A:95:0F:F6:9F:77:CB
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial: 0196A2092EB436699B506B5C2E4CA2E12C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 20:00:32 +0000
Manifest this update: Mon 05 May 2025 20:00:32 +0000
Manifest next update: Tue 06 May 2025 20:00:32 +0000
Files and hashes: 1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: 4nYKJ4yvKJdnHEbVsTam9EpVaKEf+xsiIIBUPGjbgQQ=)
2: bs5TDByPfX7v0gGiMzCGnbwDPsc.roa (hash: ZFnFhNp44GizxJZSVK1H/k8LT22geAidthOTyfRiYbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:09:2e:b4:36:69:9b:50:6b:5c:2e:4c:a2:e1:2c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Validity
Not Before: May 5 20:00:32 2025 GMT
Not After : May 6 20:00:32 2025 GMT
Subject: CN=a3a5edd645e5c45152decd2c804a950ff69f77cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:b5:fe:d0:62:5a:82:92:2e:96:55:07:d5:
ff:e6:dd:f1:f4:8c:6c:91:70:07:c8:b2:2a:5d:86:
99:72:c3:3b:6e:29:6b:0e:93:23:44:7b:fd:c1:ba:
1b:c4:9f:22:77:f9:7f:f5:2f:8f:25:48:8c:a3:83:
aa:89:87:bd:22:fd:b9:dd:f1:95:ff:b1:41:8c:b6:
16:cd:28:c5:1a:68:83:9a:a0:d2:d9:6b:9d:bc:a8:
68:da:4e:65:b1:35:05:06:3a:05:87:db:81:2a:32:
b1:02:ef:ba:99:a3:5b:66:0c:cf:78:65:0c:13:db:
ec:78:12:39:dd:6c:5c:b8:15:53:f0:0e:c7:8a:73:
ad:b8:68:42:bf:65:d2:f6:80:20:23:0c:31:85:aa:
55:bd:60:d0:e5:1c:46:0f:45:e0:6f:8b:ec:43:a3:
71:cb:f7:91:58:81:b6:8a:70:98:14:8c:b1:e5:02:
a0:66:65:5a:e8:ec:6d:1e:c1:59:d8:6c:49:69:fe:
35:9b:a5:40:cb:b9:df:10:c9:08:a0:b5:b7:73:85:
90:8b:f3:dd:1d:db:83:f1:3b:5f:65:df:45:87:b9:
dc:6d:8c:d0:21:08:ab:2e:a3:06:09:38:54:ab:da:
a9:1d:7a:de:cf:8e:be:8c:43:07:df:ff:96:23:03:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A5:ED:D6:45:E5:C4:51:52:DE:CD:2C:80:4A:95:0F:F6:9F:77:CB
X509v3 Authority Key Identifier:
keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f5:86:1d:4f:76:0a:1d:3f:ff:a0:57:ed:69:b5:2e:39:3f:
ac:ca:85:c4:c3:3d:ee:f3:98:92:3b:fe:3e:ec:61:16:33:4f:
fb:c2:7c:b4:d8:0e:c6:a3:e2:07:c1:9e:ad:8f:74:f3:05:24:
48:20:f5:59:e3:5a:bf:ef:b4:08:a9:ed:73:f0:36:16:7a:db:
1d:ff:15:2c:64:43:61:69:bd:7d:c1:c9:d8:b0:06:d7:12:6b:
58:ae:52:78:a3:d8:8c:03:3b:b6:bb:0d:9f:ce:b9:3d:7e:67:
bc:15:42:fe:ec:aa:2a:44:83:d5:0b:45:b1:f7:34:31:fc:af:
4d:0a:ae:7c:27:1d:33:f2:c9:44:15:05:8f:5f:66:31:25:25:
4e:d2:0e:7f:c1:23:08:c6:9c:27:47:34:33:47:9f:d9:97:b4:
a4:dc:64:31:2e:bd:be:ea:c1:b1:97:1e:86:92:62:a6:e7:1b:
21:1b:5c:81:62:8e:57:55:9a:1d:46:88:c4:d9:16:da:05:9a:
04:6c:5c:76:ff:f1:ec:cf:f5:5c:2a:6d:54:ac:13:c8:d3:1e:
6d:23:42:e2:1e:ea:01:91:a6:e2:17:e6:da:87:6e:22:a1:d9:
4a:1f:54:f5:1b:e7:71:f0:cd:96:9b:53:b1:59:06:98:5c:51:
e7:74:cf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:37:43 2025 by rpki-client