Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: iFdGd+w+vBgeOO2m8b5JAkoYnozdSsocIexoCV2kNVc=
Subject key identifier: CC:29:D5:9C:C2:BC:17:E0:6C:66:FC:E5:E9:07:6A:03:11:4D:0E:4F
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 01968FCC0053C636E59C0503B5E784A9CC2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 151D
Signing time: Fri 02 May 2025 07:00:33 +0000
Manifest this update: Fri 02 May 2025 07:00:33 +0000
Manifest next update: Sat 03 May 2025 07:00:33 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: XIAyOYQ0Kqk9gNF/0v4vXhcgkFReAaGbSs4cUkP8+64=)
2: nigLCn7wWT0ueFZoLpA3hlPaWgA.roa (hash: q+VheV55aItc4rpRaaib9XdkzvuIJSEg9slh0BtNQXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cc:00:53:c6:36:e5:9c:05:03:b5:e7:84:a9:cc:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: May 2 07:00:33 2025 GMT
Not After : May 3 07:00:33 2025 GMT
Subject: CN=cc29d59cc2bc17e06c66fce5e9076a03114d0e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:b8:0e:6d:30:de:7b:56:5b:de:6c:16:d2:
86:d8:29:19:05:fd:53:3c:e9:a6:de:26:07:86:11:
8b:bf:dc:e6:36:23:73:b9:47:90:d9:94:b3:4f:7f:
85:92:9c:8c:e7:e4:8a:a2:2a:57:4f:b1:19:27:66:
d0:eb:26:33:36:05:cf:57:86:0d:14:82:60:fa:ca:
4b:0a:f9:45:ec:9e:f1:87:8a:34:00:0d:4c:ba:8c:
68:9e:d7:4e:85:bf:fc:ff:bc:78:e4:59:90:ac:b6:
85:2e:7a:1e:8f:6d:6d:18:80:dd:0e:86:18:82:04:
b9:e4:d9:8c:e5:67:3e:bf:8e:ed:af:48:98:bd:01:
58:1b:02:fa:3e:8d:74:8f:8a:e4:44:14:70:67:16:
cb:db:c2:fe:d3:ba:86:a6:6e:98:cc:d4:5a:c1:50:
87:f5:55:73:6f:6f:0b:41:cc:92:dc:77:fa:2e:f2:
38:ac:e2:fe:df:fc:11:36:4a:cc:7e:fc:82:d8:c7:
d7:7f:56:d9:97:06:ff:eb:1f:ab:01:c8:f2:4c:1c:
64:0d:c1:49:45:f5:e0:19:0f:41:cb:bd:20:9f:09:
1f:ca:bb:2b:31:95:50:d0:cb:5e:c3:d5:3e:f0:00:
70:58:01:9c:8a:a5:9b:47:11:5f:1b:91:69:98:1f:
3f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:29:D5:9C:C2:BC:17:E0:6C:66:FC:E5:E9:07:6A:03:11:4D:0E:4F
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3f:eb:08:0c:1d:75:e6:57:1b:16:c3:9f:c7:cb:1a:85:34:
de:93:bc:07:4a:9d:e3:79:cd:e2:74:70:39:5f:fe:1a:26:11:
8f:60:97:07:df:c2:c8:04:2d:d4:81:e2:50:fa:f2:3e:0b:65:
7e:97:cd:f0:ac:93:a3:85:92:b5:be:05:8d:08:95:ba:5d:f7:
62:a9:38:c7:15:38:17:d4:70:b2:32:cd:d8:c5:1f:63:9c:f9:
45:05:4c:f0:62:4d:63:89:d8:9f:8e:bb:7a:fe:8d:6f:f5:4f:
67:a8:31:34:f0:66:64:b0:b2:6e:a6:1a:e8:5a:48:3c:9d:16:
59:79:38:4d:42:7d:16:e7:fb:18:91:17:a2:b3:ca:6f:e9:5c:
89:e6:93:f3:15:93:48:ab:ac:2c:70:e9:19:2f:3e:3b:73:dd:
04:69:2c:c6:22:9f:ad:34:46:f4:b4:b4:06:e5:88:47:f4:cd:
b0:3f:65:08:fb:80:2e:d8:ef:66:6e:4e:ba:a4:d1:dd:ae:b8:
ad:57:0b:71:f7:54:6e:44:b4:ad:3d:52:ce:f8:79:0b:8b:1e:
86:28:6b:a5:78:af:fb:3a:1d:6c:08:a9:72:63:23:3d:3d:f3:
0d:83:b8:d1:3b:d2:90:fb:e1:ef:fc:a8:43:0c:7a:41:54:6b:
43:f0:6b:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaPzABTxjblnAUDteeEqcwrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDI0ZTQ2YTc0NmJmM2IzYWYzZGVjMDgxY2U3ZWJjNDQx
MTAwYTMwHhcNMjUwNTAyMDcwMDMzWhcNMjUwNTAzMDcwMDMzWjAzMTEwLwYDVQQD
EyhjYzI5ZDU5Y2MyYmMxN2UwNmM2NmZjZTVlOTA3NmEwMzExNGQwZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPq4Dm0w3ntWW95sFtKG2CkZBf1T
POmm3iYHhhGLv9zmNiNzuUeQ2ZSzT3+FkpyM5+SKoipXT7EZJ2bQ6yYzNgXPV4YN
FIJg+spLCvlF7J7xh4o0AA1MuoxontdOhb/8/7x45FmQrLaFLnoej21tGIDdDoYY
ggS55NmM5Wc+v47tr0iYvQFYGwL6Po10j4rkRBRwZxbL28L+07qGpm6YzNRawVCH
9VVzb28LQcyS3Hf6LvI4rOL+3/wRNkrMfvyC2MfXf1bZlwb/6x+rAcjyTBxkDcFJ
RfXgGQ9By70gnwkfyrsrMZVQ0Mtew9U+8ABwWAGciqWbRxFfG5FpmB8/6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwp1ZzCvBfgbGb85ekHagMRTQ5PMB8GA1UdIwQY
MBaAFO4CTkanRr87OvPewIHOfrxEEQCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQt
MzExMzA0YTlhMjExLzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQtMzExMzA0YTlhMjEx
LzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVz/rCAwd
deZXGxbDn8fLGoU03pO8B0qd43nN4nRwOV/+GiYRj2CXB9/CyAQt1IHiUPryPgtl
fpfN8KyTo4WStb4FjQiVul33Yqk4xxU4F9RwsjLN2MUfY5z5RQVM8GJNY4nYn467
ev6Nb/VPZ6gxNPBmZLCybqYa6FpIPJ0WWXk4TUJ9Fuf7GJEXorPKb+lcieaT8xWT
SKusLHDpGS8+O3PdBGksxiKfrTRG9LS0BuWIR/TNsD9lCPuALtjvZm5OuqTR3a64
rVcLcfdUbkS0rT1Szvh5C4sehihrpXiv+zodbAipcmMjPT3zDYO40TvSkPvh7/yo
Qwx6QVRrQ/BrIA==
-----END CERTIFICATE-----
Generated at Fri May 2 12:07:57 2025 by rpki-client