Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
File: 7f_7PGYeL3ileFvpWRYESwavUdI.mft (raw, json)
Hash identifier: dOgTy9QtIzO8CgbNXMVGEoTJK5p6iYrfKmclmJErchY=
Subject key identifier: E2:A2:69:20:73:0F:16:5C:87:F3:C7:59:28:30:86:2F:0E:B1:64:AF
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial: 01967FB43B60938C03399157CDCF340DEB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
Manifest number: 03CB
Signing time: Tue 29 Apr 2025 04:00:40 +0000
Manifest this update: Tue 29 Apr 2025 04:00:40 +0000
Manifest next update: Wed 30 Apr 2025 04:00:40 +0000
Files and hashes: 1: 7f_7PGYeL3ileFvpWRYESwavUdI.crl (hash: olbseVQYdDQa0cgDpKamWFrAefoqQqpZXlHCLxzzcvM=)
2: gWV79z64-K00_T5p42GewWgp3cA.roa (hash: WMmpO9e9AU6ZoJLpGqYgkYyyLRC76igWs/Qlt0mpVE4=)
3: hRbNAGx7LG2xMTgP4Ix7XGLNZow.roa (hash: cOuDxG6cm5XwU2pZ0JZKfoGVa6Tbrkfv+67mL24RJLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:3b:60:93:8c:03:39:91:57:cd:cf:34:0d:eb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
Validity
Not Before: Apr 29 04:00:40 2025 GMT
Not After : Apr 30 04:00:40 2025 GMT
Subject: CN=e2a26920730f165c87f3c7592830862f0eb164af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:b9:a4:e2:38:1e:d2:02:60:70:e4:ed:c4:
49:eb:a9:2e:d1:2f:8a:84:ca:f1:8c:6e:40:ed:a5:
b5:6b:80:f8:32:bb:f4:a5:b2:81:91:db:91:e7:d7:
70:47:15:88:6d:ee:69:f4:58:74:b1:3a:97:d3:d9:
a4:95:74:a3:52:23:e1:77:b9:ef:46:ab:16:0d:88:
7e:4b:52:87:6f:f4:2a:ed:1b:b1:c8:9c:ec:f1:5c:
40:5b:8a:00:0d:54:5c:cc:32:3e:dc:0f:e6:6e:80:
f7:1e:11:e7:91:c1:c0:8b:ce:83:29:25:a5:93:22:
a4:19:78:33:39:04:10:df:a5:7f:8e:31:04:c5:dc:
92:d7:9b:40:3e:71:a2:43:4c:50:7c:1c:c3:57:e1:
0b:4b:dd:ba:c3:e7:7f:bf:b7:45:6c:af:d4:08:74:
68:88:9d:d9:5e:5b:e9:36:d1:74:29:37:58:45:f6:
44:a4:f3:57:74:1b:85:99:44:91:ed:c1:39:8f:73:
62:f4:d3:b3:7c:7f:3f:6c:2d:d7:f5:5c:56:15:1b:
3d:dc:93:13:61:b2:b9:15:50:20:ba:9c:5b:25:72:
03:c2:64:2f:a3:51:4a:f6:24:41:ca:4d:37:b9:5d:
11:c3:30:6f:fa:be:da:11:32:f7:fe:01:63:2d:6f:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A2:69:20:73:0F:16:5C:87:F3:C7:59:28:30:86:2F:0E:B1:64:AF
X509v3 Authority Key Identifier:
keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4f:9c:9b:8b:48:c6:c2:65:36:44:9c:5e:2d:05:7c:1e:d4:
de:f2:c8:8e:31:7f:5e:e2:fc:04:44:59:7a:76:3a:70:dd:34:
ff:39:84:14:84:e6:da:b7:7c:b0:f5:76:fc:85:3f:db:30:03:
3e:93:4f:5e:d8:01:e8:5c:06:6b:97:74:43:fd:a7:58:87:46:
ae:40:e8:62:50:1b:63:e4:22:56:4b:8a:f0:d6:99:15:ce:6f:
20:a8:7a:00:d5:19:7f:24:ee:22:ec:7a:9d:e9:40:4a:3c:59:
3c:4d:a5:ac:be:51:97:ae:b1:c1:1d:5d:6e:53:31:fe:42:49:
7c:e6:80:87:82:f6:05:fa:f3:e4:c8:0a:02:43:fc:ec:4c:0b:
9e:11:45:6d:e4:c7:43:54:0d:4d:d7:6a:89:40:92:55:dd:99:
28:56:aa:19:b9:19:bd:85:54:bb:d6:24:2e:d2:99:b0:48:fb:
af:9a:b1:48:b4:0d:c0:1b:9e:c1:36:58:90:25:4a:d2:82:d3:
e1:dd:d5:0c:ef:41:6e:1a:89:e1:25:9f:35:fa:cc:cb:ea:39:
76:9f:0b:09:b4:90:47:e6:b7:16:ff:2b:0d:07:9a:df:f7:db:
91:ee:e4:de:ba:27:72:ba:81:2b:f3:08:ec:56:94:5a:02:f2:
75:c0:90:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:49:01 2025 by rpki-client