Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
File: fZ4KWRzFKRTMcA44de11qR7JjCg.mft (raw, json)
Hash identifier: BovpISiDUCFGSUhbX5PN+xdwkYbWhBP9EiqhCZZJI4Y=
Subject key identifier: D5:C9:DB:5D:7D:02:F1:90:1C:EF:AE:4C:BB:AA:F3:FE:8E:D9:E4:E2
Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
Certificate issuer: /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Certificate serial: 0196857F5D47D00D656D03A82FC180F63D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
Manifest number: 151B
Signing time: Wed 30 Apr 2025 07:00:38 +0000
Manifest this update: Wed 30 Apr 2025 07:00:38 +0000
Manifest next update: Thu 01 May 2025 07:00:38 +0000
Files and hashes: 1: fZ4KWRzFKRTMcA44de11qR7JjCg.crl (hash: SDDVGSN/+ayCS01A5r01KvbxhmlXjV337LUUGVDHbh0=)
2: k81sGP_nTYcnr-ydvL_qIPOJOvk.roa (hash: 5IYqtPSCzWY5rft+/OTv7pak8S3Yrmu5rpVtbzra1bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:5d:47:d0:0d:65:6d:03:a8:2f:c1:80:f6:3d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Validity
Not Before: Apr 30 07:00:38 2025 GMT
Not After : May 1 07:00:38 2025 GMT
Subject: CN=d5c9db5d7d02f1901cefae4cbbaaf3fe8ed9e4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:47:67:21:8d:50:4c:35:4f:6f:27:49:6b:
98:1f:f1:8b:c9:57:2f:26:c7:4c:17:14:63:c6:b3:
e3:8e:9a:3a:bf:ba:67:c4:2c:55:38:c3:99:e6:a2:
de:fd:27:76:1e:44:f5:90:a0:bd:0f:02:a1:f9:cb:
89:e5:d7:b2:55:77:34:32:90:d3:53:8c:b9:14:56:
e5:38:25:31:d3:47:af:fb:d3:5c:4e:ee:9d:a8:4e:
e8:7c:c0:a3:19:ee:7a:22:bd:7d:a7:c5:2c:a6:14:
e5:5f:44:88:d0:09:60:5b:18:29:d2:27:98:42:ce:
ab:d3:d8:84:13:5a:a6:cd:3a:77:e3:d8:8f:47:33:
49:f5:7e:25:c1:ae:fe:86:2c:1f:2a:c5:e0:39:c6:
26:03:39:93:a4:c6:be:9c:d5:a4:70:ed:db:d6:f0:
8f:76:d2:38:95:24:61:1b:e9:50:ca:0e:80:a0:29:
ad:d6:4c:c1:18:1d:2d:65:66:f9:06:86:10:aa:d3:
d5:9b:07:fe:e3:e5:69:15:61:0d:8c:cd:59:73:28:
02:20:db:59:6d:41:74:34:e9:1d:f8:ad:f6:43:39:
c0:48:30:3c:22:b7:02:8f:f7:41:f8:4e:32:69:61:
1f:9f:de:66:0a:5a:a5:1a:e0:e7:3d:44:09:9d:f0:
e9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C9:DB:5D:7D:02:F1:90:1C:EF:AE:4C:BB:AA:F3:FE:8E:D9:E4:E2
X509v3 Authority Key Identifier:
keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:19:81:91:eb:8b:41:96:7c:2c:dc:17:44:af:85:95:ec:89:
cd:99:d5:46:55:a8:7b:1e:25:01:d7:24:f7:0c:1b:fa:41:80:
5d:ab:b3:1d:c4:32:68:c0:b8:dd:64:b2:c7:9b:38:41:da:ea:
13:72:eb:c1:df:4e:4c:e8:9b:9c:9a:e3:80:96:80:29:3e:e0:
9c:f2:48:1b:46:08:c4:e7:f7:3a:1d:7d:bf:3b:2d:cf:de:80:
fb:71:ff:a1:01:8a:50:4f:9f:02:49:e6:80:2e:e7:c2:d6:df:
fd:18:d7:1d:a9:49:3a:14:fc:d5:25:08:cb:76:f2:a6:6d:74:
19:dd:69:ea:52:76:5a:c1:ac:94:47:66:db:84:3d:cd:2f:f0:
87:5a:f8:14:4e:59:f9:15:be:ba:12:8d:a5:b2:31:40:c8:5b:
2d:ac:09:28:06:88:ca:99:ef:fa:ba:f4:7b:42:f3:a0:10:95:
0f:32:6f:5f:e2:da:4a:2f:a5:fb:e6:57:55:22:fb:23:11:5d:
0a:f9:9a:2d:5a:48:45:da:c0:42:da:0c:39:62:6f:d4:26:e1:
86:61:d4:46:15:64:ea:27:80:da:5b:dc:d0:89:86:0b:66:94:
a0:4a:63:7d:1b:71:ed:64:16:6d:25:41:c9:c8:35:c0:9d:ed:
3d:66:0a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:34:23 2025 by rpki-client