Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
File: 7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json)
Hash identifier: l+IbKf00OZgkdT7XAsKGB5lEHZCfzshq5e4f8hOwBKY=
Subject key identifier: 7E:1F:47:E6:51:89:A8:EE:31:6E:AC:26:9E:00:3C:D5:1B:F8:A1:A5
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial: 0196789F4D0167C2DC6AD2771D49D5EC73D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
Manifest number: 1291
Signing time: Sun 27 Apr 2025 19:00:27 +0000
Manifest this update: Sun 27 Apr 2025 19:00:27 +0000
Manifest next update: Mon 28 Apr 2025 19:00:27 +0000
Files and hashes: 1: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: xjAipgdbNBT5E+AExmrxjvnkieSXK5yVm73VGJX3em4=)
2: o1owePWPwjNd3b3qg8Jnc7YGiQI.roa (hash: GgOViLOKaFjeEtIxQ5QnUpa+EnCLoFvMT0viAqTgppE=)
3: tgXHz8gzde8nL8u9-odgzdtG_tY.roa (hash: XKoajYu1GkfOpe/YbTcjXkoO85ZZDvBPigMPOST+e6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:4d:01:67:c2:dc:6a:d2:77:1d:49:d5:ec:73:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Validity
Not Before: Apr 27 19:00:27 2025 GMT
Not After : Apr 28 19:00:27 2025 GMT
Subject: CN=7e1f47e65189a8ee316eac269e003cd51bf8a1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:d8:54:56:24:98:c4:69:ac:5c:d4:93:71:
cc:6f:96:e8:96:87:a2:b9:0f:81:ab:b6:60:de:67:
ff:4b:2a:f1:6f:40:76:43:29:5a:36:bd:0b:f2:42:
c3:6e:6d:40:df:be:38:c9:92:01:95:48:04:0a:de:
7c:24:45:d3:9d:8d:26:35:77:e0:8f:18:aa:23:46:
95:04:49:12:63:f4:6f:c2:69:22:e6:fe:90:38:99:
1e:3f:1f:88:c4:69:9a:20:14:19:90:be:e0:27:05:
78:7c:97:6d:3a:eb:33:e5:d9:0c:cf:8a:51:1c:50:
12:cd:7f:75:8a:e6:74:c5:d5:2a:cd:79:49:4f:a9:
2f:04:c6:99:bc:44:d7:12:80:1a:2c:d1:1a:a1:4a:
e9:cd:60:94:17:c3:2a:a2:41:42:47:43:52:6f:df:
20:3a:15:1c:15:b3:87:dc:6f:f9:10:cf:b8:a1:11:
95:f0:df:60:09:22:85:73:d5:d5:cb:9d:a3:50:70:
08:36:5d:74:10:19:42:87:40:70:c0:a4:9b:ef:a3:
90:c0:29:c1:98:87:a9:03:71:1e:2a:3f:51:52:4a:
0f:46:ad:a4:92:08:c6:79:3b:04:01:05:e3:d0:35:
2c:f8:ec:23:28:ec:9e:4e:85:1a:b5:fb:94:e5:34:
48:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1F:47:E6:51:89:A8:EE:31:6E:AC:26:9E:00:3C:D5:1B:F8:A1:A5
X509v3 Authority Key Identifier:
keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:69:27:2a:0b:2d:da:93:3f:9c:12:fb:e8:93:b6:55:95:90:
01:ba:ba:8e:98:fd:ca:b5:a8:a6:26:5c:21:a8:9c:a0:55:54:
0f:c4:c5:72:97:4d:c2:3d:49:a0:6f:08:bb:ae:b2:a0:b2:68:
26:a8:ae:c5:ed:35:79:d2:d7:44:1b:93:48:81:53:fd:f7:18:
02:e9:90:5c:28:db:59:c7:f8:e1:70:d5:5e:d4:7a:8a:82:d1:
d7:85:ce:f0:88:be:78:34:54:b1:61:ff:2b:f4:82:ee:0f:c7:
1c:7e:8b:72:6e:64:17:f2:a9:9e:e3:4d:de:b2:2b:86:06:6b:
ab:7f:a9:ce:97:0e:f0:e4:de:a1:dd:ce:db:e6:49:8b:e2:b7:
49:9d:31:94:38:fd:16:5e:60:89:82:a7:15:8b:c7:41:a5:f4:
95:c3:6f:ce:aa:45:6f:35:95:06:55:c4:e2:3d:bc:f6:e0:8c:
96:6a:69:2e:bf:d4:22:b0:0e:86:29:32:52:3b:4e:65:8d:b9:
93:33:67:75:d7:d9:88:56:3a:cc:fe:a8:46:ca:df:ba:ff:67:
a4:b7:e2:1f:e6:43:63:8b:3b:11:b2:a7:15:ad:8b:6c:cd:88:
0a:60:e5:e7:00:79:e7:99:f4:4a:15:be:4c:51:cb:b5:b3:ae:
61:0d:76:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:10:56 2025 by rpki-client