Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: fNjix3r5n3ExYPyLZsYGkmJAq0xSfq9olSFKIYjy/UA=
Subject key identifier: 13:5B:C6:5B:B7:6B:1B:8A:49:E5:1D:09:02:C7:EA:89:F7:4F:05:6E
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 019676B0EDCC7D1CAC3638807B4D134735F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 1523
Signing time: Sun 27 Apr 2025 10:00:28 +0000
Manifest this update: Sun 27 Apr 2025 10:00:28 +0000
Manifest next update: Mon 28 Apr 2025 10:00:28 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: eyU3pV0LwIbVFZd3kK8XqZv8uhomh63fMTjz0WG1MFU=)
2: BuLlbSCfr8m5R0bdvUy2auaVYo4.roa (hash: 5vhRJn1bAKiGFLiI67C1axUPj/VuaBvfb8oPGD+JOlw=)
3: MiQ5lO70RTIllrRi3q-oV9hjYQY.roa (hash: bCltxRSzrKGlzGDkjY4BpBmmHNltm/4kHnZFojNlryM=)
4: USr1BZseWrfiddVmQ3oagoYeVS8.roa (hash: fHK4bL/1/KZuBDBsjanJjPnUX5OQraHpiXiVTlsikY0=)
5: YaWraI8rZ3g7qo7uwVIGgMNHmoY.roa (hash: fh8nT5vZdM5ZHaPxQ043knM/D5f5HwhE2yBZCYzTFqQ=)
6: afEdQgqnbCftaot9zEVr5N_KEik.roa (hash: Lhf9vxXJqsESp4nJxNUJAzjKFEVMzT7S69LVaasmd6w=)
7: rELj50bmqX-dlIZz4LmRngTG7Ls.roa (hash: Dvzjy4JJ4c7OB88K3L17CIigy3BXYYRK2W4QmjOw5Z0=)
8: tzvqdjfI-5GkWfLXDw0rhlyGwjE.roa (hash: WRtCEE9bn80NcIoJC83Nzrz1w5Lqw7rz3krWgHW5q2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:ed:cc:7d:1c:ac:36:38:80:7b:4d:13:47:35:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Apr 27 10:00:28 2025 GMT
Not After : Apr 28 10:00:28 2025 GMT
Subject: CN=135bc65bb76b1b8a49e51d0902c7ea89f74f056e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:09:c1:e5:50:34:cb:f8:14:44:33:dc:95:0e:
51:c8:fb:b7:75:d7:7c:23:75:9a:4f:12:86:ce:20:
b9:7a:e6:21:73:90:54:14:e1:06:22:9e:35:66:76:
9a:21:7a:4a:91:fe:c3:26:82:a1:e9:fd:90:68:e4:
ec:bf:f5:5a:b9:df:57:2e:6e:09:71:a4:c9:70:42:
6c:94:1c:fe:ce:05:1a:37:bd:89:0d:e1:36:70:13:
e7:a8:10:3e:fb:1f:46:2f:95:09:c1:8e:a2:7d:4a:
21:57:47:d0:20:65:05:74:53:84:d2:03:72:aa:49:
6c:38:5d:9e:d9:f5:7b:27:2d:b4:47:6a:1a:73:49:
78:21:a4:ba:cb:1a:b1:db:17:39:ad:c0:28:7a:c5:
7f:df:a8:b4:57:6f:61:52:fd:49:7e:86:61:d3:5a:
11:bc:38:8d:14:43:b9:2c:e3:e3:70:ba:6b:ea:67:
81:2b:23:dd:f9:b0:75:fb:91:db:c4:ed:2d:ac:73:
9b:84:d2:59:4b:8a:27:20:2e:ac:18:aa:1c:a2:9f:
9d:49:f0:d0:d2:4e:ca:01:e8:24:ff:3d:16:39:66:
c8:9d:fd:45:b1:5e:bf:d6:9b:08:15:22:9c:91:59:
fc:f8:1c:81:b4:cb:64:a6:b1:70:ad:94:9e:d0:99:
bc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5B:C6:5B:B7:6B:1B:8A:49:E5:1D:09:02:C7:EA:89:F7:4F:05:6E
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5c:5d:7c:6e:9a:f4:43:07:67:5c:51:8b:d2:1c:1e:87:2b:
eb:a5:00:c6:cf:f8:6a:73:89:a7:5b:25:64:09:de:20:07:4e:
a0:32:c7:0c:c8:b7:c6:f2:f0:2b:ce:f4:44:6f:24:30:78:1a:
34:01:98:f0:2c:71:74:17:24:84:1d:76:dc:e2:af:20:83:8f:
28:dd:1e:c4:5c:c5:7e:ac:02:33:d9:a4:a6:f1:95:59:7f:ea:
27:eb:8e:ed:0d:83:0f:bd:c5:63:c8:af:c5:3c:7f:7a:f9:47:
37:96:12:3c:5c:ec:90:8b:06:d3:ad:f0:75:7c:72:4e:e8:6b:
0d:2a:3f:a5:a0:d6:c8:55:a7:4a:9e:f6:58:3e:38:d6:23:c6:
6a:ad:cd:f7:ea:0f:a4:c3:2c:62:ee:5a:86:da:ea:4a:eb:08:
fa:30:df:f1:ef:bb:89:56:97:d5:1d:d1:7f:56:a0:21:24:66:
84:12:c5:c1:4c:55:78:36:d0:8b:47:47:a0:54:66:56:f7:e3:
00:02:6c:46:c0:ba:cd:62:5b:bb:5c:2e:fb:59:75:7b:de:50:
0d:a5:56:44:09:0d:df:ac:b0:f5:36:2f:13:c4:69:89:83:b1:
ac:bf:85:d9:1a:27:3f:c9:25:8f:39:48:ce:e1:c5:6f:f4:06:
21:e9:9b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:30:17 2025 by rpki-client