Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
File: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft (raw, json)
Hash identifier: JG/a7aDg3NONEVlV/vJ+Pusqa/S6gyiigD6BmNTMtp0=
Subject key identifier: 14:B6:D2:DD:B0:5C:DF:2E:77:87:9E:1E:55:96:15:FE:F2:37:3E:0B
Authority key identifier: EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96
Certificate issuer: /CN=eff987189da4e38385b0721854feccc3ef466a96
Certificate serial: 01977075EA176306971EE410383C88C861C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
Manifest number: 0C29
Signing time: Sat 14 Jun 2025 22:01:05 +0000
Manifest this update: Sat 14 Jun 2025 22:01:05 +0000
Manifest next update: Sun 15 Jun 2025 22:01:05 +0000
Files and hashes: 1: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl (hash: ttfISpEWM5uvAh1XcngFJJD7rKwpdFqDBNZ527J+x2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:ea:17:63:06:97:1e:e4:10:38:3c:88:c8:61:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff987189da4e38385b0721854feccc3ef466a96
Validity
Not Before: Jun 14 22:01:05 2025 GMT
Not After : Jun 15 22:01:05 2025 GMT
Subject: CN=14b6d2ddb05cdf2e77879e1e559615fef2373e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:5f:be:72:70:4e:3b:f4:5e:0b:b0:56:d2:
0e:b1:de:ce:96:95:e9:56:df:db:e7:46:ae:87:83:
84:f2:63:51:be:a7:0c:28:d4:52:35:99:2c:d6:92:
36:7b:40:83:94:aa:2e:4d:25:c5:ca:da:45:73:40:
5a:11:ca:0b:13:f1:12:57:e8:f9:89:de:a4:79:39:
4d:a3:c0:9e:0f:c2:7b:90:cc:c2:dd:7a:de:0d:3b:
1d:77:83:fb:2a:8f:e2:2e:c5:16:4b:7b:58:08:b3:
c2:24:78:03:ae:b5:1e:dc:d9:33:45:83:42:49:d0:
2f:b9:c1:7b:62:63:2a:56:47:08:7f:a4:6b:15:d5:
10:78:e3:2b:13:5c:6e:e0:58:c1:fe:63:87:66:8d:
3c:dc:e0:d5:95:d7:8a:08:d1:4a:43:62:46:5f:50:
d4:84:22:64:0d:5d:19:07:aa:fc:0f:2b:8f:72:7c:
ff:1d:5b:6e:8e:4a:49:5b:a1:2a:3c:43:80:94:85:
e7:55:cd:bc:3f:35:33:29:83:a1:7c:84:e1:87:dc:
2a:93:98:40:aa:47:e9:64:6a:48:db:40:01:06:4c:
88:87:06:a2:37:86:6f:03:3f:b2:03:1e:c2:9d:79:
9a:d7:cc:d9:c9:47:8b:c7:fa:f8:33:a4:f2:f0:a9:
2e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B6:D2:DD:B0:5C:DF:2E:77:87:9E:1E:55:96:15:FE:F2:37:3E:0B
X509v3 Authority Key Identifier:
keyid:EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:20:aa:ce:b3:92:2e:8c:49:db:a6:92:e6:ea:8f:0a:ee:53:
6f:6b:c0:ef:ae:2c:c1:dc:c5:e5:76:2a:5d:30:7a:fe:1c:a7:
b1:0f:dd:0d:d6:c9:7b:f4:20:fb:20:0f:60:3f:1e:78:a1:06:
7a:2b:dc:1b:7f:b0:92:6c:4c:33:fc:3b:4e:6d:85:98:02:f7:
9d:46:2b:e5:51:8d:c6:2e:53:77:70:87:9f:b1:0b:4f:20:d4:
04:a9:47:8e:b7:6e:4f:da:4d:78:2a:d2:01:c7:d1:f8:37:c2:
df:c5:23:05:4c:bb:9a:d3:48:b9:25:d0:0a:a1:ce:f3:2f:51:
42:2f:1d:b5:3f:09:c7:d2:90:d4:a1:65:00:91:6e:42:c3:f9:
c7:13:fe:4a:a2:f5:60:91:71:01:28:ec:c6:56:a3:4d:3d:4e:
09:a6:8a:c0:a0:9c:80:6b:50:6c:b6:54:aa:f1:53:e4:0d:e5:
1a:a5:de:36:19:69:2e:20:17:9a:5d:19:b5:2f:13:8d:35:8f:
3f:02:7f:0f:97:ca:e3:7d:9a:4a:35:a9:85:d8:e0:29:ed:9d:
4b:ce:f4:ea:03:1f:76:7d:67:a3:e0:e7:b3:69:7b:7e:ba:d3:
a8:6f:c4:aa:8d:5b:48:23:ce:90:0e:12:e5:15:b1:89:aa:ca:
5c:6a:f5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:09:20 2025 by rpki-client