Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
File: 735cdfZIrGkrFLwiLiwYDIY7ReI.mft (raw, json)
Hash identifier: JNRZqG3pcUwt/bALn/oENBsJDvCbqKLLvjOTi3wy5dI=
Subject key identifier: 71:6A:FD:5B:61:BB:6F:68:08:84:78:4E:96:71:48:B7:23:BF:A7:3A
Authority key identifier: EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
Certificate issuer: /CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Certificate serial: 0196741E4EBBD428D0DD8BB72B99035A17CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
Manifest number: 01AC
Signing time: Sat 26 Apr 2025 22:01:05 +0000
Manifest this update: Sat 26 Apr 2025 22:01:05 +0000
Manifest next update: Sun 27 Apr 2025 22:01:05 +0000
Files and hashes: 1: 735cdfZIrGkrFLwiLiwYDIY7ReI.crl (hash: BWvSeVsJPJ6Zbt/6zDeXrNpEWhmtyUSiggTw0xjFCDU=)
2: YvnoPFlwVSBiKu9iqRFpzb0xlh4.roa (hash: FIC2N81bANGcoREXZdDhNQ3XBvgX/G7WyyZfKBc7yTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:4e:bb:d4:28:d0:dd:8b:b7:2b:99:03:5a:17:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Validity
Not Before: Apr 26 22:01:05 2025 GMT
Not After : Apr 27 22:01:05 2025 GMT
Subject: CN=716afd5b61bb6f680884784e967148b723bfa73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:0a:55:81:27:7c:53:4b:dd:a6:b0:c1:79:
af:b6:bb:16:c1:65:d6:94:a2:0b:5b:5c:c7:6c:6b:
cc:f8:b1:37:a6:7f:e0:61:8d:0f:ef:8d:33:4d:fb:
d2:ed:46:5d:24:b4:a8:62:37:db:3f:92:e2:b5:2c:
6f:e5:f5:41:17:fe:19:3c:ec:6c:47:f7:92:e3:21:
5c:00:1b:e0:e9:ff:9c:82:95:6e:85:7d:00:b8:36:
3f:89:e0:0c:b9:f6:1f:be:8b:4b:46:d1:48:0b:e6:
1d:5e:fb:23:8f:30:4f:01:75:88:fd:9d:ad:65:b1:
92:7f:98:89:4b:11:94:9a:e1:63:80:97:c4:cd:d5:
f2:c0:56:07:61:92:2d:e2:fb:4a:da:5b:4f:4a:19:
04:e5:17:6e:f3:dd:bc:b5:26:ab:74:2f:97:17:f0:
02:c0:58:18:1a:8a:f1:6c:f4:0e:f5:66:eb:df:5c:
77:1e:be:c5:2b:cc:e3:94:fe:64:f3:73:0b:ef:45:
26:6c:25:0c:54:9e:74:b2:58:68:f5:e7:b6:32:e9:
ea:02:83:cc:31:33:72:c1:9b:85:59:99:5b:ae:f8:
b1:7d:80:02:51:0c:ec:b3:32:d1:42:5c:3e:0e:f9:
09:13:bc:21:e1:ae:24:ca:2f:74:5b:f9:e7:6b:bf:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6A:FD:5B:61:BB:6F:68:08:84:78:4E:96:71:48:B7:23:BF:A7:3A
X509v3 Authority Key Identifier:
keyid:EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:99:8c:c8:19:b9:08:76:c9:3e:d6:46:72:38:de:a8:01:6b:
8f:59:ce:6b:4b:f5:65:fe:48:4f:bf:b6:30:fe:4d:1e:80:45:
21:cb:da:16:18:0e:b4:47:07:ef:ad:5c:02:46:d9:db:2b:ee:
56:da:4c:a1:7b:40:7a:ca:84:b7:1f:7c:af:fe:d4:4e:0a:2b:
96:9a:f3:86:dd:cb:00:aa:11:84:c5:8e:48:34:f2:61:3f:d4:
30:ef:04:be:ff:10:29:9e:68:07:29:ff:44:3b:81:f5:ec:8b:
84:52:ca:b5:ff:ed:73:8d:3d:51:12:6a:ad:68:80:28:a7:60:
96:f1:e6:4b:d0:c0:84:70:c7:9a:d7:73:e5:3f:16:aa:3b:cc:
aa:f6:e1:ea:51:dd:85:61:5b:3c:96:3a:66:e4:cd:9e:f2:cd:
fc:bd:5c:7e:1b:ff:ef:9c:00:6f:d7:f6:b1:19:a7:16:56:e7:
be:b0:f6:0f:0c:02:3a:1c:04:20:80:2c:55:da:57:3f:df:26:
ad:0e:f5:11:55:a9:48:ca:90:99:2d:14:71:2e:d3:15:c8:67:
1b:e5:2a:89:1e:64:5a:fa:ff:92:28:f4:88:b3:d6:62:5e:90:
7a:76:ba:5a:59:2e:55:38:85:9f:19:b2:55:43:89:56:0a:2b:
59:86:4c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:39:05 2025 by rpki-client