Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
File: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json)
Hash identifier: 36PHh8XhwozMVUb2zk6EC58CKAMoif66UUmm8lf22Gg=
Subject key identifier: 89:E1:28:E8:8E:32:3B:A0:31:5D:4F:98:BB:7C:EF:83:39:9C:DE:E0
Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Certificate issuer: /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Certificate serial: 0196AB7A636AD2F421B622CA71B93412803D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
Manifest number: 128A
Signing time: Wed 07 May 2025 16:00:46 +0000
Manifest this update: Wed 07 May 2025 16:00:46 +0000
Manifest next update: Thu 08 May 2025 16:00:46 +0000
Files and hashes: 1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: nHbtVKuAQeX47OdFo9jzZ8G4UKPqma2krl2XBei5BJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:7a:63:6a:d2:f4:21:b6:22:ca:71:b9:34:12:80:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Validity
Not Before: May 7 16:00:46 2025 GMT
Not After : May 8 16:00:46 2025 GMT
Subject: CN=89e128e88e323ba0315d4f98bb7cef83399cdee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:84:cf:d5:c1:67:23:30:8c:ea:54:95:75:74:
ee:0f:53:46:f1:70:ca:8c:db:d9:bc:8b:60:61:cd:
90:1e:a6:74:50:58:fc:2c:6a:2d:e7:90:ba:9c:9f:
55:bb:f8:93:a0:d4:73:9a:72:cc:27:c7:e1:73:fc:
84:ec:75:4f:71:b9:ea:0b:4e:b3:56:f4:28:f4:db:
97:4e:55:44:35:13:c5:4a:bf:27:60:bd:98:ad:8d:
f0:d0:32:15:de:2d:1e:b3:e4:5e:ba:e7:a3:cd:b0:
14:1c:b6:14:11:49:95:f8:c9:10:68:9b:48:ad:64:
0a:51:f4:ba:94:a4:2d:09:60:9e:26:9b:ac:19:9b:
85:4c:3f:c8:81:67:9a:08:b7:20:37:d5:37:79:09:
dd:c2:5c:cd:bf:c6:59:83:8b:6a:05:a7:9d:13:03:
31:c6:59:b8:50:c0:df:df:89:a9:91:cb:df:4f:2b:
42:85:5e:e9:4b:07:86:e4:7a:c6:4d:1b:80:77:99:
52:1b:81:6c:b6:5f:c8:4a:be:e2:01:13:39:82:8e:
2c:f3:2f:bc:f8:bb:f4:6a:f8:c0:34:06:29:7d:e8:
7b:6e:4c:db:52:37:b3:05:d0:bb:f2:a8:d1:c8:bf:
bd:01:6c:42:32:99:31:19:14:a4:34:65:8e:7b:46:
19:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E1:28:E8:8E:32:3B:A0:31:5D:4F:98:BB:7C:EF:83:39:9C:DE:E0
X509v3 Authority Key Identifier:
keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0e:2a:07:4c:98:6b:e8:e0:f6:08:85:e8:f5:09:1d:1c:64:
db:d3:37:9f:c0:b1:23:37:d9:e6:c6:a7:42:27:79:75:fe:ca:
4f:db:84:3f:50:ff:3b:d6:24:5a:0b:c4:ba:5f:48:88:08:e3:
9e:a4:b7:16:bf:67:2b:a5:b4:4c:fb:0b:ba:b7:25:b2:20:f6:
0c:a9:a7:15:65:a9:d6:64:d4:3d:63:d2:72:59:2c:b9:af:6d:
fe:1d:76:d4:cf:50:c2:5e:10:cc:ec:f0:95:7c:1b:25:97:0d:
ef:9b:41:65:fc:4f:13:c1:c7:9a:96:9b:ac:76:fd:e3:7e:a7:
ce:b6:cd:2f:d1:80:68:e3:80:2a:d3:f5:12:ad:53:6c:cc:63:
86:09:d9:41:db:6f:89:cf:12:e7:9e:52:9c:4a:a8:b7:1c:28:
88:fd:63:92:30:43:80:63:bb:33:fa:0c:96:0b:0b:b5:6f:37:
16:31:b0:c1:ca:e4:db:3b:62:fd:ed:d2:04:87:b6:c2:00:70:
45:c9:5a:80:42:ee:e1:ad:77:5f:87:9b:f4:64:86:42:53:f0:
3a:14:ce:a7:35:62:6b:22:bb:7b:c3:5f:34:12:d2:f6:66:8a:
3e:25:b4:91:60:e2:22:d5:b7:07:e5:d8:c5:84:78:5e:d5:81:
06:da:52:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaremNq0vQhtiLKcbk0EoA9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZmQ4ZWFhYjVhZWFjM2NlOTQxZmUxMjU4NTliMzJhMzUy
NTEzNDQwHhcNMjUwNTA3MTYwMDQ2WhcNMjUwNTA4MTYwMDQ2WjAzMTEwLwYDVQQD
Eyg4OWUxMjhlODhlMzIzYmEwMzE1ZDRmOThiYjdjZWY4MzM5OWNkZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YTP1cFnIzCM6lSVdXTuD1NG8XDK
jNvZvItgYc2QHqZ0UFj8LGot55C6nJ9Vu/iToNRzmnLMJ8fhc/yE7HVPcbnqC06z
VvQo9NuXTlVENRPFSr8nYL2YrY3w0DIV3i0es+ReuuejzbAUHLYUEUmV+MkQaJtI
rWQKUfS6lKQtCWCeJpusGZuFTD/IgWeaCLcgN9U3eQndwlzNv8ZZg4tqBaedEwMx
xlm4UMDf34mpkcvfTytChV7pSweG5HrGTRuAd5lSG4Fstl/ISr7iARM5go4s8y+8
+Lv0avjANAYpfeh7bkzbUjezBdC78qjRyL+9AWxCMpkxGRSkNGWOe0YZdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInhKOiOMjugMV1PmLt874M5nN7gMB8GA1UdIwQY
MBaAFOz9jqq1rqw86UH+ElhZsyo1JRNEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYjg4M2EtNDg2ZC00OTc1LThkYmMt
ZDRiOTBiNmY0NjU5LzEvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iYjg4M2EtNDg2ZC00OTc1LThkYmMtZDRiOTBiNmY0NjU5
LzEvN1AyT3FyV3VyRHpwUWY0U1dGbXpLalVsRTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIg4qB0yY
a+jg9giF6PUJHRxk29M3n8CxIzfZ5sanQid5df7KT9uEP1D/O9YkWgvEul9IiAjj
nqS3Fr9nK6W0TPsLurclsiD2DKmnFWWp1mTUPWPSclksua9t/h121M9Qwl4QzOzw
lXwbJZcN75tBZfxPE8HHmpabrHb9436nzrbNL9GAaOOAKtP1Eq1TbMxjhgnZQdtv
ic8S555SnEqotxwoiP1jkjBDgGO7M/oMlgsLtW83FjGwwcrk2zti/e3SBIe2wgBw
RclagELu4a13X4eb9GSGQlPwOhTOpzViayK7e8NfNBLS9maKPiW0kWDiItW3B+XY
xYR4XtWBBtpSEw==
-----END CERTIFICATE-----
Generated at Wed May 7 19:03:14 2025 by rpki-client