Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier: uI4FUD9R8TjYRFCTgULln1ExlYIMDyM/9alyVBcFxwM=
Subject key identifier: D5:5D:53:AE:51:D1:23:94:10:69:45:15:68:E5:2D:8B:17:6D:B6:7A
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer: /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial: 019677560BC6033ED67C44FB83F009B0BE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number: EC
Signing time: Sun 27 Apr 2025 13:00:49 +0000
Manifest this update: Sun 27 Apr 2025 13:00:49 +0000
Manifest next update: Mon 28 Apr 2025 13:00:49 +0000
Files and hashes: 1: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: HTXB5oIYbNQBdjPEXnF4aDZEdKzoR9mTXs+rT+6jP3w=)
2: qBI-2zh83yrxwps5B2wpeqKjzBE.roa (hash: +a40JJUntJvdA4SOSdLnTGJXNEt6hOF4b5LOIU68Stg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:56:0b:c6:03:3e:d6:7c:44:fb:83:f0:09:b0:be:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Validity
Not Before: Apr 27 13:00:49 2025 GMT
Not After : Apr 28 13:00:49 2025 GMT
Subject: CN=d55d53ae51d123941069451568e52d8b176db67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:69:1a:76:01:d3:47:a2:c5:58:79:66:41:
49:ec:5f:92:c3:3e:73:46:d9:4a:cf:86:c4:12:ca:
b0:b8:c3:70:e6:a7:5f:b5:e3:45:de:d1:d9:5c:c0:
b1:8c:2b:a5:3a:b8:1e:e4:3d:07:84:4d:d7:75:05:
da:98:95:df:e9:33:c8:e1:77:0a:a9:88:73:dc:e3:
8d:01:6c:d0:61:8e:f2:fa:db:7e:cd:f8:b2:08:7c:
9c:a7:b3:e8:86:17:6d:75:2a:71:b1:e7:a7:cc:4b:
3e:ee:4f:79:49:ff:c9:cb:3c:53:bb:e6:1b:55:ed:
2f:c2:fa:5a:e3:db:7f:f8:1a:0f:d2:89:c5:97:27:
df:ca:11:49:a0:c6:fa:94:67:28:ce:3c:6d:a2:79:
6a:ea:d7:c2:7f:df:64:07:12:0b:24:b7:46:c9:8d:
cb:8b:58:d2:bf:ce:17:be:49:0f:44:18:29:61:f0:
9f:36:c6:ee:9a:b6:56:43:06:3b:f5:51:19:50:52:
75:19:4d:f3:72:dc:cd:98:35:69:88:03:4a:62:44:
d3:c0:13:81:4f:c0:32:58:c7:60:d8:2a:23:98:cd:
26:7e:7f:a0:19:1d:b3:b7:7b:e6:24:de:dd:14:d4:
46:7d:9a:69:a9:e7:1f:bc:e1:89:14:78:8f:de:9d:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5D:53:AE:51:D1:23:94:10:69:45:15:68:E5:2D:8B:17:6D:B6:7A
X509v3 Authority Key Identifier:
keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ba:80:b8:8a:9a:07:c6:3d:9b:12:7d:15:0b:4d:49:34:32:
17:b7:6c:78:57:bc:d4:eb:42:1e:7b:f7:ef:41:55:f3:b9:ea:
25:4c:0d:0d:06:6d:91:73:fe:c0:fd:f5:b1:cc:7e:09:7d:0f:
7a:45:7b:d9:b3:70:24:13:f8:c0:93:15:2d:55:08:04:c8:8e:
62:be:ba:7b:d6:a3:de:40:23:11:37:96:57:57:5f:dc:0a:f5:
d5:0f:0f:33:eb:9f:e4:29:44:f1:ed:42:58:90:27:a0:89:f5:
fb:94:22:f8:ca:19:25:cf:40:c0:05:da:62:63:63:60:b6:80:
1e:be:80:e0:dd:81:32:ef:d5:98:03:71:a5:dc:02:2f:e3:c6:
10:27:1f:3a:fa:e6:20:4f:12:76:38:f5:ac:46:06:09:99:2c:
00:fc:49:68:f9:99:b2:10:c9:08:d2:8b:44:ca:62:6f:6a:f0:
bd:a4:e8:77:50:a8:20:21:57:16:49:d2:19:c8:ae:63:fe:40:
a0:e2:a4:ce:ba:3f:ba:90:7c:e2:2e:2e:92:ff:54:2f:d2:66:
ea:8f:27:63:a5:15:8a:4c:d1:2e:07:67:0d:d1:8a:7f:f9:81:
34:a8:23:10:80:84:2b:41:b4:aa:e9:0a:bc:00:a4:f2:40:bf:
4a:81:8b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:56:21 2025 by rpki-client