Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
File: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft (raw, json)
Hash identifier: FY6jyofUMO5xqfiuXJLFd6+GNztHT64Vy5c9D+kk6oc=
Subject key identifier: A4:E2:A1:D8:08:6A:94:E1:21:C2:62:86:8D:3B:AB:CE:4D:D1:64:70
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Certificate issuer: /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial: 01967E3375BE845D48493FA64FBE93F256C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
Manifest number: 1153
Signing time: Mon 28 Apr 2025 21:00:23 +0000
Manifest this update: Mon 28 Apr 2025 21:00:23 +0000
Manifest next update: Tue 29 Apr 2025 21:00:23 +0000
Files and hashes: 1: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl (hash: F/MAKs3sx3C54eL0sGR3D2doq5uMFWxSAWYjb19XAn8=)
2: UHZDSCwg4-DjCTw2ThSV9YMjtY8.roa (hash: yjuNgWENrQcHvxeDeJWLJxEQH/+1ANaZxCVsNSQeLLY=)
3: iXVDb19kvukiKPCGR7Xk4m4waFo.roa (hash: doLRr6Uuft22RZholuz/UG1fqLztwMyrNWgGHx261cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:75:be:84:5d:48:49:3f:a6:4f:be:93:f2:56:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Validity
Not Before: Apr 28 21:00:23 2025 GMT
Not After : Apr 29 21:00:23 2025 GMT
Subject: CN=a4e2a1d8086a94e121c262868d3babce4dd16470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:99:5b:08:5b:f7:41:4d:4c:2b:e1:6a:c5:
c2:2e:4b:97:a5:b4:3d:ef:8c:99:f4:96:eb:d4:21:
7d:56:aa:37:54:31:70:f6:af:d2:33:cd:b2:bf:1c:
d7:db:32:58:92:d5:7e:08:16:89:7e:60:77:a8:22:
2d:fd:5f:68:78:59:03:1d:14:89:77:a5:f6:49:a1:
15:c7:3c:32:65:d0:a2:51:4c:f3:6b:5a:04:fb:62:
0f:f6:42:14:4e:b8:dd:d9:ab:02:8e:33:c3:d3:92:
08:67:37:5a:d1:ca:54:68:76:ef:c1:f2:d6:37:76:
71:bd:8f:c7:59:bd:19:cd:f6:4d:50:e5:3a:24:0c:
1e:00:22:00:2d:30:17:29:52:1a:03:bb:36:99:59:
54:d9:4a:14:86:1d:55:2f:f7:05:95:fa:1d:98:65:
8d:61:4b:f1:9b:32:ea:d7:fe:15:f1:fb:e4:23:1d:
49:2b:1f:65:cb:d1:ef:34:f1:53:81:be:32:a5:77:
2a:1d:d4:10:2b:d4:04:56:d8:9f:ff:39:6e:82:f9:
a8:bc:05:22:5d:bb:59:3f:d2:49:10:1e:6b:8f:f9:
e6:5f:45:1e:64:42:ee:f6:b8:0b:50:64:b9:de:e0:
29:72:3c:1e:cc:26:4f:3f:31:63:c3:24:96:e2:da:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E2:A1:D8:08:6A:94:E1:21:C2:62:86:8D:3B:AB:CE:4D:D1:64:70
X509v3 Authority Key Identifier:
keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:58:73:e1:49:dd:85:84:b1:93:2b:11:16:cb:13:0a:fa:71:
c2:38:1a:31:a0:ee:98:fc:2c:a1:74:22:d6:76:98:1a:75:7d:
d6:83:82:9d:9a:92:71:ae:16:6f:3b:6a:fa:c3:42:8c:06:0f:
2f:9e:6f:d3:07:98:88:37:0a:b7:30:44:e5:17:2a:4d:f9:90:
2a:7a:d7:63:2f:1f:85:cc:3b:d3:15:5d:ae:9d:ab:a2:b4:38:
bd:cc:69:a2:38:7e:e3:d5:6c:07:53:a6:6b:a5:67:cb:1b:34:
9d:d9:65:4a:66:79:89:e9:7b:b3:41:ca:b8:77:d6:1f:39:64:
23:44:4a:b7:1e:28:e8:de:b4:ce:78:3b:c7:37:25:b7:08:96:
45:fc:a0:f5:9f:5f:94:07:41:92:d3:f2:34:fd:82:9c:07:cb:
09:e2:f4:13:f5:31:d6:d9:35:c8:8b:1f:28:d7:c5:b0:35:b2:
3b:ac:c2:9d:b4:30:42:ab:68:b8:56:6c:b3:57:11:f6:28:a4:
1e:94:2a:fe:37:8e:cd:4e:91:98:ea:4d:9d:41:ba:69:de:e0:
6e:31:c8:84:f9:88:17:d0:0c:78:05:c6:f9:54:ff:0b:50:40:
a1:b5:b4:a3:bf:05:97:73:db:de:ca:72:ac:a1:6c:5f:92:83:
1e:a4:16:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:36:24 2025 by rpki-client