Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File: 7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier: RZigHWt46GVnQjKFvr6TNtLT36HbJMM0DaSbBifuEM4=
Subject key identifier: 82:25:0F:2B:07:A8:95:FB:B1:85:E9:DF:D0:27:0E:85:1D:15:DB:EB
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer: /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial: 019677FB55901F709F5600106E09EA26988B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number: 091C
Signing time: Sun 27 Apr 2025 16:01:22 +0000
Manifest this update: Sun 27 Apr 2025 16:01:22 +0000
Manifest next update: Mon 28 Apr 2025 16:01:22 +0000
Files and hashes: 1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: 5mKELQSm5niyDbuv2e5yVKNkWaHeuziIbM/lZMdpB9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:55:90:1f:70:9f:56:00:10:6e:09:ea:26:98:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Validity
Not Before: Apr 27 16:01:22 2025 GMT
Not After : Apr 28 16:01:22 2025 GMT
Subject: CN=82250f2b07a895fbb185e9dfd0270e851d15dbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a5:9b:e2:bd:a2:5b:3a:8b:c8:63:8c:03:94:
0e:34:69:65:d5:6f:f1:11:8d:bc:37:d1:8a:bd:9d:
00:98:cf:cd:1f:3a:61:8b:5a:4f:aa:f2:8c:03:82:
3f:97:91:6f:21:9d:ae:74:23:b3:d6:77:f4:84:bd:
2b:59:99:c6:06:97:27:a7:1c:c2:d5:28:e5:91:78:
0a:ce:e3:5b:79:b8:0e:a0:80:53:26:7b:5e:91:7a:
a2:9a:b7:3d:00:07:4b:13:e0:52:83:b9:4e:00:17:
6d:98:c8:d0:62:c6:fd:de:5d:77:45:64:f4:8b:69:
a5:d9:f3:55:7b:bc:79:af:e7:b6:9b:a4:be:13:6e:
a7:ed:31:a6:c7:8a:98:52:b6:fb:73:5d:be:cb:c2:
e8:d0:68:7c:7e:a7:f7:4c:8d:19:c1:c9:c4:f8:e5:
0d:fa:25:f7:a6:11:da:b7:67:c2:2f:16:b6:9f:22:
9b:d0:fa:a3:de:68:f7:09:8a:97:d3:bf:ce:09:ff:
c7:b4:59:4e:7b:00:ac:d7:d8:60:4f:7d:2b:24:b4:
01:37:24:80:f1:59:18:cc:b8:3e:29:53:1b:f5:92:
e2:a1:97:ed:2b:d1:a3:21:a4:f1:db:a6:d0:6f:6c:
2d:a1:3f:ae:3f:16:dc:e7:51:d1:0e:c1:db:7c:f9:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:25:0F:2B:07:A8:95:FB:B1:85:E9:DF:D0:27:0E:85:1D:15:DB:EB
X509v3 Authority Key Identifier:
keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:01:78:7e:93:77:8a:67:d9:db:18:a0:99:dd:b8:f8:4a:4e:
5a:87:11:6e:df:b1:42:9c:c5:ec:4f:b8:c1:b5:ae:47:20:c7:
82:ec:3d:7b:17:8f:7e:b8:60:e1:8b:8f:fe:66:2e:1b:1a:37:
0b:81:0b:91:2f:b9:9b:df:46:39:a4:b1:8a:b3:6f:ef:d0:ff:
61:21:a1:c7:00:2b:0c:90:85:0d:c2:bc:32:60:52:25:76:9b:
af:cc:ba:27:76:00:a6:b1:ba:51:73:5d:9d:02:fd:8c:ff:82:
83:0f:ff:1e:42:0f:72:c6:21:ae:56:a0:b7:e5:3d:a0:d0:2f:
ab:d2:16:2a:4e:18:9c:43:41:81:d8:97:b6:f7:fc:9b:78:c2:
03:c7:fd:83:57:df:49:4c:72:3e:5f:ef:e0:95:fc:7f:29:03:
6d:d9:e6:15:68:a4:e7:20:88:f8:14:2a:b5:c8:e3:b5:80:55:
f7:5b:a0:87:cc:c9:6b:30:64:31:8e:2d:03:6d:5a:0e:c7:90:
a3:36:d3:b0:ad:27:80:ed:cc:56:0b:38:ca:5c:15:d6:ef:02:
db:86:4e:01:74:8f:0b:d9:24:42:31:44:a2:bc:c1:11:25:bc:
1b:5a:40:c8:de:08:8e:8c:57:8d:c8:68:a2:78:b4:c8:32:c0:
6a:02:77:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+1WQH3CfVgAQbgnqJpiLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlODAwNDJlYTNjYjM0ODczZGVkMGViMDY0OTU5NGUyZmYy
MzkwODEwHhcNMjUwNDI3MTYwMTIyWhcNMjUwNDI4MTYwMTIyWjAzMTEwLwYDVQQD
Eyg4MjI1MGYyYjA3YTg5NWZiYjE4NWU5ZGZkMDI3MGU4NTFkMTVkYmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06Wb4r2iWzqLyGOMA5QONGll1W/x
EY28N9GKvZ0AmM/NHzphi1pPqvKMA4I/l5FvIZ2udCOz1nf0hL0rWZnGBpcnpxzC
1SjlkXgKzuNbebgOoIBTJntekXqimrc9AAdLE+BSg7lOABdtmMjQYsb93l13RWT0
i2ml2fNVe7x5r+e2m6S+E26n7TGmx4qYUrb7c12+y8Lo0Gh8fqf3TI0ZwcnE+OUN
+iX3phHat2fCLxa2nyKb0Pqj3mj3CYqX07/OCf/HtFlOewCs19hgT30rJLQBNySA
8VkYzLg+KVMb9ZLioZftK9GjIaTx26bQb2wtoT+uPxbc51HRDsHbfPnwxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIlDysHqJX7sYXp39AnDoUdFdvrMB8GA1UdIwQY
MBaAFO6ABC6jyzSHPe0OsGSVlOL/I5CBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mNWUyYTctNWRiYi00YjM2LTk2MTQt
ZDUxNjE3ZTAyOTgzLzEvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9mNWUyYTctNWRiYi00YjM2LTk2MTQtZDUxNjE3ZTAyOTgz
LzEvN29BRUxxUExOSWM5N1E2d1pKV1U0djhqa0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwF4fpN3
imfZ2xigmd24+EpOWocRbt+xQpzF7E+4wbWuRyDHguw9exePfrhg4YuP/mYuGxo3
C4ELkS+5m99GOaSxirNv79D/YSGhxwArDJCFDcK8MmBSJXabr8y6J3YAprG6UXNd
nQL9jP+Cgw//HkIPcsYhrlagt+U9oNAvq9IWKk4YnENBgdiXtvf8m3jCA8f9g1ff
SUxyPl/v4JX8fykDbdnmFWik5yCI+BQqtcjjtYBV91ugh8zJazBkMY4tA21aDseQ
ozbTsK0ngO3MVgs4ylwV1u8C24ZOAXSPC9kkQjFEorzBESW8G1pAyN4IjoxXjcho
oni0yDLAagJ3cA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:18:36 2025 by rpki-client