Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
File: 7wKUR5RZGCRZwV2MoBCop_R_gMg.mft (raw, json)
Hash identifier: +f60xPDFlBMO+4ty699K+Nk1FaJzl74GozzhDmmPEEI=
Subject key identifier: 25:1F:5B:88:CC:9A:F6:B2:33:0F:79:B0:1B:19:52:CD:C0:AD:D6:2D
Authority key identifier: EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
Certificate issuer: /CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Certificate serial: 019685B655B918919E598A68BA4B414A1402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
Manifest number: 0473
Signing time: Wed 30 Apr 2025 08:00:41 +0000
Manifest this update: Wed 30 Apr 2025 08:00:41 +0000
Manifest next update: Thu 01 May 2025 08:00:41 +0000
Files and hashes: 1: 7wKUR5RZGCRZwV2MoBCop_R_gMg.crl (hash: /PpIGNP5pASSPC1ebLnTePxPqX2etETWY1+PK4Oa+7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b6:55:b9:18:91:9e:59:8a:68:ba:4b:41:4a:14:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Validity
Not Before: Apr 30 08:00:41 2025 GMT
Not After : May 1 08:00:41 2025 GMT
Subject: CN=251f5b88cc9af6b2330f79b01b1952cdc0add62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:55:05:99:e5:ff:7d:01:b0:f4:17:c4:c8:
b9:f0:23:71:0c:ca:bf:2f:cd:f0:2b:62:65:56:5c:
bf:40:31:d5:9b:e8:d0:48:b6:bf:61:b5:6f:01:50:
0f:c8:fc:e7:2c:6e:29:6f:de:93:53:4b:54:c5:e4:
a6:68:5c:5c:5f:24:9f:72:16:aa:43:51:aa:37:5f:
0f:1d:08:f1:4c:53:7b:b3:5b:6e:ee:c0:ef:bb:5d:
26:91:a1:91:f4:80:b1:f0:e6:de:22:ec:81:06:9a:
b6:e9:6a:ec:ce:6c:6f:93:7b:db:de:58:e4:64:8c:
5b:c7:57:0a:6f:b2:9e:db:99:27:67:d3:52:95:2d:
da:83:bd:39:bf:7a:78:c3:d1:d8:bc:b0:2e:8f:ad:
0e:ad:5d:27:ab:4a:83:06:80:cb:4c:9a:33:b5:b8:
4e:ee:62:0c:cf:1f:3b:5a:4f:3a:89:38:07:fa:9c:
14:ea:48:49:95:6f:4d:1e:4d:9e:d9:b9:f9:a2:a9:
a9:a7:fe:7d:21:39:3c:0a:28:35:83:02:09:2d:0b:
43:c4:f8:7a:3a:7b:e3:83:cd:aa:54:bd:d2:19:9b:
4b:98:71:55:e5:19:1b:ff:54:01:d6:d7:de:12:f0:
32:18:7b:da:25:96:ef:57:6c:96:19:4c:a0:f7:ca:
33:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1F:5B:88:CC:9A:F6:B2:33:0F:79:B0:1B:19:52:CD:C0:AD:D6:2D
X509v3 Authority Key Identifier:
keyid:EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c3:1e:6f:7f:a6:1e:24:64:6d:44:e7:ad:de:7d:91:9b:fc:
c4:af:69:91:88:8d:f1:67:f2:b4:3e:22:f6:d0:da:4f:00:15:
01:31:54:39:d2:30:bd:86:64:df:28:2a:a7:c6:5c:cc:2e:de:
ca:af:21:fa:c5:ea:1b:c5:9d:3d:90:16:4c:86:95:78:94:8b:
f4:bf:e7:6b:4e:c7:8a:72:a7:d4:27:c6:4d:0a:3c:a1:31:8f:
c5:68:f1:db:61:b7:96:a7:a6:b2:a3:71:84:47:e2:a3:95:17:
a1:eb:a5:29:66:5b:af:34:3d:e3:b9:c2:84:f6:9b:4a:9e:30:
e7:54:b6:07:f4:ac:7e:46:4a:54:7c:05:90:52:05:62:8e:5e:
27:5c:54:fa:8c:c1:1d:ec:89:5a:58:e7:f4:a2:3e:87:41:77:
67:42:80:eb:d4:18:ae:24:db:c3:4c:a8:04:bd:f9:97:ee:5b:
36:d2:74:c2:56:33:80:52:0f:d6:90:fe:10:03:54:90:9f:87:
22:ae:d8:3b:d5:f0:5f:2a:20:06:99:d0:cc:89:e4:59:c2:0e:
8d:8a:d5:c5:80:3d:10:ba:f3:4f:bb:4f:2b:f9:cc:c2:60:3e:
08:35:bf:67:2b:c1:20:cc:69:4c:47:e9:90:49:16:e1:01:a4:
df:81:48:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:01:41 2025 by rpki-client