Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
File: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft (raw, json)
Hash identifier: kUIhWG3Y7OOsVSeK9qCFQQNIrxdZ1iFH8360TLoj9do=
Subject key identifier: 38:B1:5E:66:AD:75:EF:61:EA:63:4C:A2:6D:AD:C0:BF:E4:49:C1:E2
Authority key identifier: EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
Certificate issuer: /CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Certificate serial: 01968D395A7C90CE9EA9134413A8B01C62A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
Manifest number: 0290
Signing time: Thu 01 May 2025 19:01:08 +0000
Manifest this update: Thu 01 May 2025 19:01:08 +0000
Manifest next update: Fri 02 May 2025 19:01:08 +0000
Files and hashes: 1: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl (hash: rWirgkLnFA1+dv4odBk5w6myZZF/p1qYng7ca5heMUQ=)
2: m0FdEd7qA5TjbE6u-KPGxVuqdzo.roa (hash: YB/7zgnoht2aguJRWPrUhzZwqPvY+5PbEOGpRfTLI+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:39:5a:7c:90:ce:9e:a9:13:44:13:a8:b0:1c:62:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Validity
Not Before: May 1 19:01:08 2025 GMT
Not After : May 2 19:01:08 2025 GMT
Subject: CN=38b15e66ad75ef61ea634ca26dadc0bfe449c1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:fb:37:02:bc:b2:16:12:6d:59:63:42:0e:
f5:93:42:c3:ba:eb:76:71:13:89:6a:67:4a:52:b6:
62:64:78:17:d5:81:42:4f:1f:4c:b0:b5:53:e1:3d:
55:db:89:ce:e4:06:50:13:78:3b:fe:ed:3a:83:2e:
d9:71:5e:f0:73:be:d1:64:6e:1f:7f:99:c6:bd:e4:
84:de:ec:7e:8f:bb:a5:d9:19:bb:89:c0:26:d5:01:
47:0a:44:5f:73:07:2d:b9:44:01:f4:6c:18:38:ec:
1f:48:06:49:59:87:99:5d:7e:ac:e3:34:29:a0:c0:
5e:bb:2f:4b:91:11:ba:16:98:80:1c:b6:e2:bf:29:
b5:41:63:8d:1e:d2:7f:d6:2a:9e:3a:74:d5:da:01:
9b:e6:fa:2d:83:f7:9c:b3:c2:bb:03:1d:e7:e1:8e:
ac:f4:dd:dc:62:32:22:c8:ab:f8:ef:44:14:3a:b0:
b8:67:ef:96:48:c4:d5:43:8a:14:7d:6b:4c:35:f9:
d1:cd:c1:5f:0e:f0:81:b3:d3:5b:48:c4:e0:74:a9:
e7:69:89:e2:b7:f0:77:6b:1b:5b:07:9f:ad:86:f1:
0c:00:be:2d:6f:95:0d:6f:68:f7:e7:6b:57:ea:ec:
d6:33:1e:0c:92:dc:d6:b2:8e:10:e0:e6:a6:17:99:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B1:5E:66:AD:75:EF:61:EA:63:4C:A2:6D:AD:C0:BF:E4:49:C1:E2
X509v3 Authority Key Identifier:
keyid:EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:93:a0:c4:90:2f:03:6f:98:25:ee:80:b1:48:5c:5b:fa:87:
d3:dc:93:ea:8e:39:af:b9:1f:69:34:77:71:77:75:20:8a:46:
61:92:15:dd:6d:82:02:7d:40:9e:86:27:ed:f4:aa:ab:66:a1:
5f:09:4b:78:2e:57:e0:cc:83:f4:9a:d5:d2:86:cf:b6:6f:f9:
b1:61:88:4e:a5:6c:8e:c8:0f:84:68:2a:3d:e0:15:55:62:b6:
55:d2:0e:83:b3:ad:25:65:1c:a0:9f:ea:b5:00:36:24:de:33:
b6:9f:34:14:d8:10:14:2e:4c:55:0b:52:d8:f9:41:be:59:da:
31:92:9c:c0:32:b7:31:90:51:85:51:e4:17:c4:7c:59:da:38:
5b:31:b1:2e:56:e6:e9:e2:0b:e1:a7:66:05:5a:b0:98:8a:0c:
63:da:4f:c3:28:e8:d1:4f:18:05:d6:4c:fc:53:4f:f3:cc:2f:
51:b5:99:bf:ca:4f:fe:e5:e7:72:a1:f3:1c:01:c8:b0:bf:e5:
a6:0d:eb:a1:79:be:71:67:cc:e8:ea:7c:5f:36:2d:53:ae:ff:
8b:38:7e:e4:33:bd:e7:89:46:14:6d:75:ad:5d:6c:e6:a0:8c:
c1:f6:25:e0:f0:9d:15:17:54:8f:95:eb:bd:37:bf:52:59:35:
fc:d0:ef:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:05:34 2025 by rpki-client