Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
File: 7FOM3K-fkkZJfceuRYRTef5qcXQ.mft (raw, json)
Hash identifier: 0ILyvp0GekpaFCln9zB9eMo2rXRNg3FR5zvshEDNxKA=
Subject key identifier: 11:C5:DA:20:DE:44:05:72:99:EE:20:7A:81:2A:48:DE:85:61:BB:B3
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial: 0196759E886C14214A89DEC093E5954A2FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
Manifest number: 0907
Signing time: Sun 27 Apr 2025 05:00:46 +0000
Manifest this update: Sun 27 Apr 2025 05:00:46 +0000
Manifest next update: Mon 28 Apr 2025 05:00:46 +0000
Files and hashes: 1: 7FOM3K-fkkZJfceuRYRTef5qcXQ.crl (hash: lmYK3f0p/UCBJaafVfg90XJizDFx8JVUFp6xsZiaOIE=)
2: BDuB9Tdy1bkdHiiKbCLGOLXhLgM.roa (hash: /BEhxsli53ZdIFQcNasA4TXy3qdR7JtPphvJxMDLbVM=)
3: o9u62C62uEKyliiaqilmlCLeC54.roa (hash: IbrVnLHNGZTQPhCJ7F+rZGHYI9Autu0dmXqnxbbk8VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:88:6c:14:21:4a:89:de:c0:93:e5:95:4a:2f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Validity
Not Before: Apr 27 05:00:46 2025 GMT
Not After : Apr 28 05:00:46 2025 GMT
Subject: CN=11c5da20de44057299ee207a812a48de8561bbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:c1:9e:40:c9:82:57:36:aa:64:4c:44:b5:
99:9b:29:e6:91:83:da:6c:bc:d2:19:5b:9a:f8:59:
28:98:a1:62:b7:ed:3f:a1:79:5b:f7:a9:3e:47:f8:
82:e4:80:23:04:ca:79:20:e1:fe:34:86:12:63:8a:
f1:4b:76:3b:18:41:9b:ae:a5:0b:1b:ab:98:51:17:
9c:23:28:62:fb:33:28:e4:07:ee:89:d2:f9:af:eb:
7d:33:ad:87:cf:90:60:c6:ca:11:bf:ee:cc:cf:3c:
31:a6:1c:48:c7:43:20:ed:42:1e:ed:55:b9:63:b4:
f6:26:c2:ae:e6:c4:d1:4c:0c:a3:d8:57:35:3b:ac:
48:c8:2e:41:2f:e0:ee:06:30:90:4c:1e:41:ce:f9:
34:91:37:d8:78:7f:5a:bc:42:25:90:5c:6e:d1:9d:
5a:ec:4f:77:71:f8:eb:14:03:9e:19:b0:83:88:29:
52:92:ad:d4:fa:7d:0c:66:02:0c:71:3f:d5:ef:7a:
5d:9d:12:dd:c0:a7:29:0b:90:a3:28:be:e3:e4:27:
51:a4:2b:f0:c5:63:73:1f:57:3e:f6:1b:0e:6d:a1:
53:97:e8:71:21:4a:b6:5c:d2:17:8f:35:f0:2b:aa:
b0:f1:a5:f2:a7:99:74:7d:a6:41:c2:54:b8:11:ff:
f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C5:DA:20:DE:44:05:72:99:EE:20:7A:81:2A:48:DE:85:61:BB:B3
X509v3 Authority Key Identifier:
keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ae:0a:8c:e4:80:b0:1b:7c:fe:fb:44:af:6e:16:47:3e:2b:
eb:8f:86:3a:20:71:10:81:b3:96:7f:16:7b:c6:a7:81:ed:28:
af:9c:c4:3c:44:c1:c0:eb:bd:d0:13:4c:5d:0e:50:ca:6d:58:
b4:75:c5:96:0c:aa:63:5f:50:aa:9a:45:40:d4:97:a3:34:6e:
a4:c3:04:18:46:fe:16:e1:ce:79:b0:cb:35:1f:c5:eb:55:87:
16:a0:b3:3f:88:b3:24:e9:32:81:35:64:f9:29:f0:21:58:0b:
45:af:70:e7:0b:22:46:dc:20:2b:37:56:52:55:d5:ba:c1:80:
24:f6:d0:4f:7b:e2:d6:3d:8e:fe:c7:f6:82:9e:d3:9d:00:1d:
86:94:2c:27:3b:ed:3b:6d:10:98:f9:42:6e:41:e1:12:18:f4:
ea:fb:29:08:3d:5f:ac:c3:2a:d0:45:cf:55:eb:51:21:f6:5a:
74:36:59:25:37:a8:b2:82:03:9a:fb:e1:6e:41:a7:de:dc:12:
fa:56:a9:8f:03:f4:8b:4b:c8:68:8c:ec:29:54:a4:28:01:c8:
2b:11:4c:c8:26:57:fb:6f:d4:0c:89:3f:3d:83:d5:13:da:22:
27:17:59:fb:46:83:24:ad:7f:c6:b7:34:bf:8e:77:a2:1e:a8:
e7:00:07:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1nohsFCFKid7Ak+WVSi/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNTM4Y2RjYWY5ZjkyNDY0OTdkYzdhZTQ1ODQ1Mzc5ZmU2
YTcxNzQwHhcNMjUwNDI3MDUwMDQ2WhcNMjUwNDI4MDUwMDQ2WjAzMTEwLwYDVQQD
EygxMWM1ZGEyMGRlNDQwNTcyOTllZTIwN2E4MTJhNDhkZTg1NjFiYmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn//BnkDJglc2qmRMRLWZmynmkYPa
bLzSGVua+FkomKFit+0/oXlb96k+R/iC5IAjBMp5IOH+NIYSY4rxS3Y7GEGbrqUL
G6uYURecIyhi+zMo5AfuidL5r+t9M62Hz5BgxsoRv+7MzzwxphxIx0Mg7UIe7VW5
Y7T2JsKu5sTRTAyj2Fc1O6xIyC5BL+DuBjCQTB5Bzvk0kTfYeH9avEIlkFxu0Z1a
7E93cfjrFAOeGbCDiClSkq3U+n0MZgIMcT/V73pdnRLdwKcpC5CjKL7j5CdRpCvw
xWNzH1c+9hsObaFTl+hxIUq2XNIXjzXwK6qw8aXyp5l0faZBwlS4Ef/4twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHF2iDeRAVyme4geoEqSN6FYbuzMB8GA1UdIwQY
MBaAFOxTjNyvn5JGSX3HrkWEU3n+anF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS83ZDY0ZjgtZGRlMi00YTdmLTk1MWEt
YzA2YzYyYWY5ZGE1LzEvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS83ZDY0ZjgtZGRlMi00YTdmLTk1MWEtYzA2YzYyYWY5ZGE1
LzEvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJK4KjOSA
sBt8/vtEr24WRz4r64+GOiBxEIGzln8We8ange0or5zEPETBwOu90BNMXQ5Qym1Y
tHXFlgyqY19QqppFQNSXozRupMMEGEb+FuHOebDLNR/F61WHFqCzP4izJOkygTVk
+SnwIVgLRa9w5wsiRtwgKzdWUlXVusGAJPbQT3vi1j2O/sf2gp7TnQAdhpQsJzvt
O20QmPlCbkHhEhj06vspCD1frMMq0EXPVetRIfZadDZZJTeosoIDmvvhbkGn3twS
+lapjwP0i0vIaIzsKVSkKAHIKxFMyCZX+2/UDIk/PYPVE9oiJxdZ+0aDJK1/xrc0
v453oh6o5wAHhw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:10:05 2025 by rpki-client