Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
File: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json)
Hash identifier: /SaO2svBw2Ick3pL6hRaYHIWJKjpjoVwwq6iIhjLjC4=
Subject key identifier: E9:A1:74:0B:DD:00:96:17:1C:41:37:C7:10:99:D7:BC:7D:E1:DD:BE
Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
Certificate issuer: /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Certificate serial: 0196748B7186F7F6EABA5D680156C43C19C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
Manifest number: 0C7C
Signing time: Sun 27 Apr 2025 00:00:17 +0000
Manifest this update: Sun 27 Apr 2025 00:00:17 +0000
Manifest next update: Mon 28 Apr 2025 00:00:17 +0000
Files and hashes: 1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: EDkpmCxS+p3CUhY7GfOC7Sxh4RJK1jStNVV0kb+pUZY=)
2: VXStklzuRlpg_R8nfz573Xq7Noo.roa (hash: IbT51sa2OOKxE/XOPtTGvEY7Cw0dCovzg7t9jfSRhHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:71:86:f7:f6:ea:ba:5d:68:01:56:c4:3c:19:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Validity
Not Before: Apr 27 00:00:17 2025 GMT
Not After : Apr 28 00:00:17 2025 GMT
Subject: CN=e9a1740bdd0096171c4137c71099d7bc7de1ddbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:70:b4:6e:98:27:f6:1d:38:01:40:69:5e:
0c:fb:16:c8:bd:ed:2f:22:cf:04:c2:42:41:f8:18:
48:83:1e:c5:92:2d:40:51:f5:57:d0:d5:38:70:4a:
9a:93:10:fe:cd:bc:26:5e:3a:3a:92:87:1d:29:b3:
7a:6a:22:7f:60:49:40:ef:eb:13:9d:30:c4:32:49:
8b:d4:ff:32:5d:f7:3d:37:96:26:0b:b3:e4:2a:9a:
da:f6:e9:2b:65:8e:1f:79:81:c3:d5:43:30:83:c0:
96:0f:6a:1d:23:ca:94:e7:fa:87:00:58:84:e0:3a:
04:58:92:4e:09:1a:f2:52:dc:59:b3:3e:7d:9b:aa:
4b:bd:18:45:34:c0:35:27:da:ff:f7:e7:db:07:d7:
6e:e2:39:09:1c:48:ef:53:5c:65:f7:56:f6:ba:6c:
9f:fe:0e:ff:35:44:4f:bd:7f:56:cd:88:96:0a:c9:
6e:6d:16:16:90:04:9d:c5:2c:e0:b9:79:45:d8:eb:
0b:ee:bc:53:ec:56:e4:f8:bf:eb:09:41:35:01:71:
cf:84:30:f5:2d:96:a9:76:96:c3:3f:ed:39:83:2d:
b5:21:69:a2:71:fc:e8:51:02:72:1a:b2:92:2f:5b:
e5:cd:25:5d:bd:29:94:ac:c9:36:ab:77:5a:a0:05:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A1:74:0B:DD:00:96:17:1C:41:37:C7:10:99:D7:BC:7D:E1:DD:BE
X509v3 Authority Key Identifier:
keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b5:57:eb:19:45:fc:54:d2:6e:78:ad:d2:51:27:1b:de:a2:
3f:4a:ef:93:fd:a1:df:f7:a5:e0:53:94:3f:5b:2a:fe:9b:e8:
cf:2d:88:93:ef:74:c4:d0:da:60:1e:f4:87:90:55:6c:82:21:
d6:e7:ef:fb:07:c8:e8:96:d3:50:ea:e1:06:e2:a4:02:46:d6:
1c:3f:62:c4:b2:c9:6c:cb:ad:4a:fa:13:b2:25:30:cc:b6:b1:
e3:5c:22:34:89:5e:e8:82:f0:8a:f0:d1:43:24:6b:11:3d:00:
e9:9e:3b:99:59:1f:79:6a:c1:65:79:30:31:c4:e7:d6:24:37:
21:8d:44:2b:9f:48:54:50:09:68:f4:cd:6c:16:39:65:c0:93:
cb:72:62:77:0e:84:a9:26:71:73:15:a9:6d:7f:87:e5:f0:7e:
11:33:f3:c6:48:9f:3c:7b:48:05:b5:f6:68:94:da:38:7f:d6:
13:b6:9a:60:cb:ec:dd:a2:9c:d4:21:f4:50:67:50:bb:bf:de:
f8:8b:f6:dc:8f:36:f2:df:bd:af:0f:7d:6f:bf:e4:72:67:17:
4e:89:7c:8d:95:5f:60:a6:20:39:37:f8:2c:4f:e7:d0:f4:07:
71:80:87:3a:73:1f:c4:f5:ca:9c:e1:6c:4f:92:5b:8f:e8:a3:
c6:a0:52:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:06:13 2025 by rpki-client