Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
File: eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft (raw, json)
Hash identifier: 1jNU1aDdxa5608irZCSxbYbpNH1bOfGbwdIw6bNEzLo=
Subject key identifier: 4F:07:3B:A7:8B:40:2D:E8:9C:F3:DA:E6:E1:CB:80:37:55:12:E4:A9
Authority key identifier: 79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F
Certificate issuer: /CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
Certificate serial: 01967A56B3B8C87F076BFB7E8BE841D95D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
Manifest number: 150E
Signing time: Mon 28 Apr 2025 03:00:24 +0000
Manifest this update: Mon 28 Apr 2025 03:00:24 +0000
Manifest next update: Tue 29 Apr 2025 03:00:24 +0000
Files and hashes: 1: eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl (hash: 2EL15T1nloOvrzWv1XLzmUnYgdoDjPOXoXzh7QmS3s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:b3:b8:c8:7f:07:6b:fb:7e:8b:e8:41:d9:5d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
Validity
Not Before: Apr 28 03:00:24 2025 GMT
Not After : Apr 29 03:00:24 2025 GMT
Subject: CN=4f073ba78b402de89cf3dae6e1cb80375512e4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:a8:ba:cc:cb:59:4b:2d:db:53:27:d2:e9:
21:0c:89:f7:a2:14:03:32:a0:29:ce:d1:40:fe:23:
f5:23:83:b2:62:10:83:cf:59:c2:f8:42:68:62:a4:
0d:db:2a:92:87:2c:82:63:33:ab:7f:0e:ee:39:27:
2a:85:62:a0:f4:a2:fa:11:73:97:f4:3b:15:93:59:
2f:3c:39:de:93:0e:e8:07:d1:e2:5e:cf:c2:25:0d:
7f:b9:f5:f6:17:da:37:9d:58:5f:81:00:5e:fd:3c:
83:fc:3e:f1:d5:99:33:15:55:a8:78:24:dd:6a:7b:
a9:b4:a2:e6:bc:cd:a4:4d:ee:93:6b:d0:e7:7e:24:
be:7b:c4:3b:66:3b:dc:69:54:71:b8:4f:25:06:4c:
43:cc:bf:98:6a:41:2b:7f:ff:d7:08:3e:25:52:d0:
d1:e0:5c:e4:ad:e5:71:51:07:b0:ae:b6:0a:cc:59:
53:53:b8:7a:03:8b:ab:29:36:e1:f5:53:c3:b5:ff:
8d:f6:a6:a7:4f:c5:3b:59:97:e3:c9:ba:54:33:7e:
66:b5:9e:61:92:aa:d2:47:62:d4:a0:0c:47:82:91:
d9:29:f9:bd:d5:39:a3:23:c9:93:32:90:90:75:d5:
03:b3:2e:55:da:7b:58:68:1e:87:11:c0:cb:c0:b2:
d5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:07:3B:A7:8B:40:2D:E8:9C:F3:DA:E6:E1:CB:80:37:55:12:E4:A9
X509v3 Authority Key Identifier:
keyid:79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:50:56:ab:4d:4b:e8:e0:24:88:94:78:41:58:9a:ce:4d:51:
55:7a:9e:0e:cf:31:b2:b0:2b:2d:b2:33:27:94:53:9b:ce:72:
98:47:08:a3:1d:16:09:02:6b:33:24:39:70:73:e6:91:c7:f9:
30:f6:42:6a:66:4e:8e:c5:67:f6:0b:b6:01:c3:e9:01:e3:09:
ac:79:a2:62:b8:19:d3:f7:35:ed:8b:66:00:a0:0d:d5:e3:71:
01:4e:70:72:d9:56:75:84:f4:51:53:2a:38:25:69:69:77:e8:
bc:db:2d:b5:6b:92:63:8e:dc:0a:e7:9f:88:28:b9:b5:9a:53:
39:d7:97:c3:ec:3d:63:00:f1:29:d8:bc:0c:f3:91:9c:8a:20:
aa:ca:63:1f:fc:1c:5e:87:46:0d:ac:b6:36:43:0c:2d:3d:8f:
39:3c:1c:76:58:cd:58:5f:23:f4:2f:de:50:42:b1:f8:cf:63:
75:20:2f:7e:00:1f:43:90:92:75:d6:6a:72:33:04:ca:a0:e0:
14:ee:35:9e:6f:7d:53:45:ed:b2:9a:d3:e5:ef:fd:f3:25:53:
3e:88:c6:b3:26:7d:a3:0f:d5:11:fe:4e:6e:cf:9c:db:41:03:
14:7f:a1:dc:96:0c:2c:f4:27:be:36:5b:2e:d4:c6:8d:a0:db:
c0:7e:e0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:34:04 2025 by rpki-client