Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.mft
File: 7piHul9FfXl6_awsVVHe-0U9iPM.mft (raw, json)
Hash identifier: DyUDGBP4pdVYjQHf5EZ3ob0BWtuRipez8Dth3MsbrTE=
Subject key identifier: 79:F1:E4:DA:88:18:97:3E:CE:CF:D5:2A:60:D5:86:49:0A:5B:37:9B
Authority key identifier: EE:98:87:BA:5F:45:7D:79:7A:FD:AC:2C:55:51:DE:FB:45:3D:88:F3
Certificate issuer: /CN=ee9887ba5f457d797afdac2c5551defb453d88f3
Certificate serial: 019678314AD06DC6003EF0352E8BB6B0FAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7piHul9FfXl6_awsVVHe-0U9iPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.mft
Manifest number: 04D7
Signing time: Sun 27 Apr 2025 17:00:18 +0000
Manifest this update: Sun 27 Apr 2025 17:00:18 +0000
Manifest next update: Mon 28 Apr 2025 17:00:18 +0000
Files and hashes: 1: 7piHul9FfXl6_awsVVHe-0U9iPM.crl (hash: LuMXCvYQuy/Q30SoOgurZKEN0gEDJL58yFKpVpePTJA=)
2: xAERLAW9yeSp7-IVDIC_ELETFQs.roa (hash: 8vMoTFjOsjQqMO21PnDb5Vdq3wS8nDT+pMvDuXAJq8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7piHul9FfXl6_awsVVHe-0U9iPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:4a:d0:6d:c6:00:3e:f0:35:2e:8b:b6:b0:fa:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9887ba5f457d797afdac2c5551defb453d88f3
Validity
Not Before: Apr 27 17:00:18 2025 GMT
Not After : Apr 28 17:00:18 2025 GMT
Subject: CN=79f1e4da8818973ececfd52a60d586490a5b379b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:20:55:da:77:d7:79:74:8b:37:cc:cc:d8:
6a:59:ac:23:69:a5:fe:7e:6c:f5:d0:1a:09:31:b8:
d4:22:be:f3:e4:c5:5c:83:75:f7:0c:b5:f4:05:fc:
70:3d:b9:62:e2:9e:8d:7b:ed:64:f4:68:69:ea:36:
c2:74:e4:fa:e5:a4:8f:ed:94:52:ea:e6:4a:7e:b1:
ba:5f:2a:53:08:4c:9f:f2:b4:83:f6:e8:5f:0d:51:
53:b3:75:44:fb:c7:e9:44:89:89:af:17:ea:c0:bb:
12:8a:a0:0f:e9:02:bf:04:fe:97:79:f9:69:88:e1:
11:e0:7d:de:51:f4:12:0a:51:1f:bc:b4:5c:8e:c5:
8d:6a:39:8e:a0:d8:ea:53:1c:d1:ce:ea:34:79:a9:
7f:b1:f2:23:1e:f5:b3:9d:16:20:5a:32:b6:dc:4c:
ce:ad:2c:3e:c6:69:34:d4:a2:67:84:cf:c6:c6:83:
c4:15:02:15:45:50:0c:14:4b:74:d1:c8:20:0e:0d:
d9:dc:3d:b4:46:76:89:0c:14:9e:a0:bc:f4:04:e5:
4a:9a:b0:0c:85:87:3d:db:6b:ae:da:2b:3c:41:2f:
ab:c9:b1:0c:ff:fd:93:bc:b8:0a:55:d3:36:71:04:
93:6e:9d:f9:db:6d:ea:10:9f:3c:51:36:3c:92:03:
ba:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F1:E4:DA:88:18:97:3E:CE:CF:D5:2A:60:D5:86:49:0A:5B:37:9B
X509v3 Authority Key Identifier:
keyid:EE:98:87:BA:5F:45:7D:79:7A:FD:AC:2C:55:51:DE:FB:45:3D:88:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7piHul9FfXl6_awsVVHe-0U9iPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b4:0f:a3:7a:28:5b:58:ce:e9:07:47:8e:bf:d0:a9:7b:4e:
92:3e:e7:ea:53:e2:7d:26:87:9b:14:9c:9c:0d:f0:d4:fb:4d:
fc:ff:ad:be:86:eb:93:5c:ec:18:ba:84:1e:cc:3c:0c:51:42:
69:4d:17:33:94:b0:d5:88:17:1d:5f:56:44:05:a4:c2:58:b0:
a2:85:0c:25:58:e9:58:60:77:9a:83:63:24:1a:f1:92:d8:d7:
c0:1d:01:35:1b:7e:6d:a7:2b:b6:e3:22:ba:76:8e:9c:65:23:
be:d0:eb:10:d9:a2:dc:f5:db:25:c4:03:28:6c:f9:c8:81:c5:
bb:e7:76:9b:d3:f9:d8:f7:21:11:63:14:83:d9:56:b9:96:f7:
e6:f8:cb:07:dc:63:8c:f8:f7:09:b7:48:7b:75:98:3e:93:7e:
9d:8f:9f:77:b9:31:04:80:3b:cb:f5:f2:39:cd:a1:00:71:a1:
18:5b:5a:f1:c6:ea:8c:93:0f:94:f4:c2:24:12:36:70:3b:94:
7d:f5:4c:94:a2:6c:8e:fa:60:6e:e7:04:f6:c2:d7:c3:04:57:
a3:6f:9c:ff:1e:d0:a3:d1:3b:cd:8e:67:2f:a8:71:ef:35:ee:
63:40:37:06:81:ea:09:ff:f4:26:dd:33:1d:55:eb:6a:47:e0:
ce:ad:1f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:03:41 2025 by rpki-client