Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
File: 7e4lp4qBa942LEDIbjm5R9DuL_M.mft (raw, json)
Hash identifier: pkMmS7hwkqFd0RXso8HxCUYhLOrBPRQlvbGfIfIzWNU=
Subject key identifier: 7C:E0:FA:0E:18:90:D0:04:5F:93:44:F6:81:58:FF:C6:F6:C5:06:1C
Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Certificate issuer: /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Certificate serial: 019677C3C7E0DB33BC1A242269DADBF9E8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
Manifest number: 1253
Signing time: Sun 27 Apr 2025 15:00:41 +0000
Manifest this update: Sun 27 Apr 2025 15:00:41 +0000
Manifest next update: Mon 28 Apr 2025 15:00:41 +0000
Files and hashes: 1: 7e4lp4qBa942LEDIbjm5R9DuL_M.crl (hash: yyp8p0thSwp8ubNwBDSKj9ukm49//oy/2xkz2lzShk4=)
2: AXJBq8yUHFkgykgslA-fSWXTVKA.roa (hash: 7rldJllcwwKofvRznEIMSA9gArb4oK2i6gZ8ozpzOqo=)
3: CSpNr80FvoJXN9ZfztFVeZJu2dY.roa (hash: xjwSVmlVGgcseTx9+nJV5eZL5y6c+Vbmy9OOc+sD1WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:c7:e0:db:33:bc:1a:24:22:69:da:db:f9:e8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Validity
Not Before: Apr 27 15:00:41 2025 GMT
Not After : Apr 28 15:00:41 2025 GMT
Subject: CN=7ce0fa0e1890d0045f9344f68158ffc6f6c5061c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:a4:d4:d0:2a:ca:b6:94:35:b5:49:a9:61:
58:e1:1f:16:a6:ff:09:85:c3:9b:59:d6:28:e6:e5:
c4:58:34:3a:4f:0a:64:01:b5:8e:f3:af:c3:2a:41:
2d:40:4a:34:24:b2:1f:58:1a:4d:bf:64:b3:0f:b4:
3e:b2:cb:ba:a0:07:a6:90:de:e2:66:14:64:05:b8:
1f:b4:03:4a:95:13:b0:5b:26:13:35:89:62:94:db:
49:7d:bb:c4:ad:e9:ff:5e:5e:68:98:b9:8c:91:26:
29:1a:ad:8e:e3:94:f1:23:81:ea:79:54:7f:a3:26:
50:00:35:43:b1:2d:02:4d:e9:2e:e7:f5:5f:b6:da:
34:c1:0a:c8:7e:70:65:70:1a:19:84:75:37:5b:b5:
fb:43:14:8d:fc:27:17:ff:ad:0e:13:1b:16:3f:8a:
0f:91:24:d6:12:e2:cc:be:22:8f:c9:f5:24:72:17:
bf:98:7e:c4:05:8e:14:66:40:f2:e2:8e:e4:ac:f1:
cf:63:12:1b:be:71:a3:2f:e6:92:af:3c:73:cd:5a:
fe:36:21:ad:f3:1e:61:59:eb:b6:8b:b1:69:6e:78:
1d:76:11:52:b3:2e:35:fa:2f:e4:ca:96:0c:43:60:
b0:4d:df:6c:22:6f:ce:8c:f1:0b:ad:84:eb:fa:30:
c1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E0:FA:0E:18:90:D0:04:5F:93:44:F6:81:58:FF:C6:F6:C5:06:1C
X509v3 Authority Key Identifier:
keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1a:68:73:22:51:5d:be:ed:85:6d:af:68:04:fa:29:04:d3:
6f:b8:32:35:42:92:c6:8c:4c:33:62:22:9b:f0:7f:11:32:c0:
b8:cb:81:ab:c3:64:6d:eb:52:09:a8:7b:16:76:3d:e2:db:df:
06:1f:78:5e:9f:2c:38:34:86:08:34:25:e7:90:04:13:62:a7:
f5:0e:da:44:0f:41:4e:52:39:f7:d9:a0:a1:fe:d8:ce:a6:cb:
84:82:f2:05:60:1f:7a:f1:9a:2a:67:2c:b4:fe:b2:95:4b:87:
11:ba:f2:4f:8f:46:b9:38:86:fa:88:38:c4:0e:44:99:5f:5c:
c2:f1:fe:a0:4b:c7:10:10:63:ce:cf:70:e8:1c:fb:dc:9b:52:
48:db:ae:4e:da:43:a6:8c:88:e3:59:8c:ea:8b:2a:92:13:aa:
43:35:55:0e:f5:0f:b5:ea:66:8f:2e:cc:0d:15:ad:1e:de:ab:
a6:0d:ee:0a:d3:d3:94:d8:80:21:18:88:28:ab:6a:7e:6b:41:
15:6d:2b:ea:e0:e5:a8:ba:d4:a9:32:c2:45:09:46:8c:ba:ae:
ca:78:8f:e6:58:d6:de:65:4e:7a:f4:f8:2a:81:50:d4:b3:95:
ee:f0:a4:93:dd:b1:44:d5:b2:b4:87:e5:81:25:69:2e:71:11:
18:53:fd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:15:53 2025 by rpki-client