Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: oA8N/PG9AmF+8Lu5gCup5nxogDNFTeixlcviZg5rlJ0=
Subject key identifier: C3:C1:07:CE:68:EB:3E:09:5A:09:3D:5A:73:BD:E9:27:1F:C6:3B:63
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 019691F156A9D54FA4F4E5EBA684C4077943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 0FA9
Signing time: Fri 02 May 2025 17:00:34 +0000
Manifest this update: Fri 02 May 2025 17:00:34 +0000
Manifest next update: Sat 03 May 2025 17:00:34 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: tXUXbyeBYtT3bi7D4mNI1rLJIJOE5GyMgVTswHhaOwM=)
2: 8IeUbOwS853SmApxlhlEYT9gqJU.roa (hash: rGq2PKCmYf+7DCOarfnzmeAZXnBOsSkimboD75gDmOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:f1:56:a9:d5:4f:a4:f4:e5:eb:a6:84:c4:07:79:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: May 2 17:00:34 2025 GMT
Not After : May 3 17:00:34 2025 GMT
Subject: CN=c3c107ce68eb3e095a093d5a73bde9271fc63b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ed:21:b4:34:86:14:29:5c:be:75:f0:48:14:
7d:a3:24:d0:b6:97:2e:2a:72:0b:ab:bb:7a:17:37:
de:b7:1d:f0:a5:a5:8b:5c:b6:f4:a0:7f:65:f4:81:
c4:5b:6c:bc:5d:e4:10:09:43:13:8d:41:dc:0c:ba:
4a:f3:c3:42:6e:05:00:1f:6d:fa:62:3d:62:38:0e:
c1:44:6c:46:1c:41:45:ba:56:7f:a0:6d:86:de:41:
8b:4c:e2:b8:2b:d2:f2:54:90:50:7a:1d:86:0a:95:
a7:32:b5:79:be:eb:a5:4d:dc:5c:6f:b9:40:75:5e:
e2:42:3d:24:d2:74:10:e3:9d:e4:f3:2f:f4:78:6f:
60:c2:cb:fc:ef:a7:e3:84:72:15:f3:54:42:fc:53:
43:7b:85:2b:78:05:c6:08:a9:b3:58:71:ed:89:eb:
ef:34:b1:46:b1:7a:ce:6c:4a:7d:b4:5f:7e:3c:8f:
b3:fb:3c:37:eb:3f:e1:dc:66:fe:54:70:99:95:a0:
0a:26:b3:70:f3:45:8c:ad:88:82:fa:a8:c3:29:5e:
b8:9d:1c:12:e7:90:8f:4d:3e:78:ca:79:dd:5f:e2:
0d:61:84:0e:4b:15:cc:76:2f:bd:95:d9:50:b5:e9:
cc:37:68:40:da:ad:2f:fd:ef:77:7c:72:6e:b2:0b:
7b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C1:07:CE:68:EB:3E:09:5A:09:3D:5A:73:BD:E9:27:1F:C6:3B:63
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:33:f6:79:b2:2d:60:b6:05:a4:dc:05:f8:eb:10:90:39:83:
f5:5c:58:00:fa:77:83:da:0c:1d:6f:4d:4d:74:b6:0a:49:72:
ca:78:6c:0d:b8:d0:c0:1f:f3:56:22:94:e2:50:ea:f3:7f:05:
5a:5b:f2:bd:a9:dc:5f:e4:1e:11:2d:0c:14:86:a9:f3:6a:1e:
de:d7:87:04:35:c5:71:6a:a4:f0:74:d1:ab:46:50:17:b0:5a:
fb:9d:4d:90:8a:f2:86:c7:88:a5:03:0a:cf:41:46:f8:88:a6:
8c:38:be:21:7a:26:1a:85:33:50:a8:69:8d:cb:dc:88:8d:43:
a7:90:c0:6a:75:71:58:98:c2:0a:46:bc:ce:dd:b8:28:c4:25:
4b:e4:86:86:c3:bb:26:09:22:9c:e8:3b:50:00:28:c0:23:b7:
d5:57:ef:bb:3f:0d:76:34:39:57:5d:56:7d:21:3a:48:5f:16:
fa:ae:a3:1a:82:59:1a:40:ee:8b:24:b2:fe:88:8c:fd:fa:db:
e8:c2:a9:b7:d8:b3:ea:6d:89:b1:8a:71:3e:ef:f5:bd:1b:77:
16:d0:a3:ab:26:66:5b:87:9f:30:91:2c:f8:6d:bd:05:39:3b:
ec:d2:2b:91:de:6d:41:18:b8:25:ea:7e:48:04:2e:3c:4d:2a:
85:5d:2e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:49:31 2025 by rpki-client