
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
File: F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft (raw, json)
Hash identifier: Wz8JdEri646BjJAFoG+MIzIqtiz586bAdn+kXr1eSOM=
Subject key identifier: A7:59:52:90:80:79:67:D9:30:17:B4:AC:97:0B:A2:71:01:2A:95:89
Authority key identifier: 17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
Certificate issuer: /CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Certificate serial: 019699AA88B2BFAA0A0352BD8E424F32E433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
Manifest number: 07F0
Signing time: Sun 04 May 2025 05:00:12 +0000
Manifest this update: Sun 04 May 2025 05:00:12 +0000
Manifest next update: Mon 05 May 2025 05:00:12 +0000
Files and hashes: 1: F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl (hash: wlAmm9luAV6+2/dnw2jEU+bxYQzijVGM9PNMBTPbd/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:aa:88:b2:bf:aa:0a:03:52:bd:8e:42:4f:32:e4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Validity
Not Before: May 4 05:00:12 2025 GMT
Not After : May 5 05:00:12 2025 GMT
Subject: CN=a7595290807967d93017b4ac970ba271012a9589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a8:e6:a5:7c:53:b6:c0:cd:b4:46:97:0c:3d:
80:75:e6:00:ec:11:21:be:b0:d1:81:72:e8:e0:8d:
ff:1e:bd:b6:7b:cb:47:85:ad:28:0c:47:1d:24:8a:
b0:68:ab:2a:53:4e:a8:71:a4:25:70:2f:8a:66:41:
ec:e5:a5:ab:b2:ed:2c:52:f0:f7:d9:50:de:1f:bc:
28:2a:5f:42:2e:cc:96:7e:a4:ed:1a:68:be:d5:f7:
90:5e:4d:c6:c8:49:dc:96:4a:41:c0:9d:44:eb:11:
72:68:39:fc:c2:e9:30:3b:14:0f:06:57:c6:bf:e1:
12:84:4a:9b:75:48:1a:99:fe:ba:ac:6e:71:5b:a6:
3e:67:05:b3:44:29:58:80:72:a5:5f:53:dd:55:68:
57:da:a1:cc:8a:9d:85:75:38:ad:02:d3:e7:6f:9b:
f0:1e:50:a8:ad:72:9b:44:9d:9a:06:07:bf:cf:b0:
a6:87:43:db:af:ab:77:f2:1e:f3:bb:2a:5a:bf:19:
e4:74:32:d0:46:3d:61:04:6d:21:85:f8:32:d2:14:
d9:5f:56:79:8e:2a:89:66:8d:5a:d1:c4:6c:57:9f:
33:80:d3:74:a5:f3:90:e9:96:37:b8:c4:c2:4b:de:
59:a7:ff:39:0e:64:e5:de:d2:34:ed:7b:d5:22:1e:
59:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:59:52:90:80:79:67:D9:30:17:B4:AC:97:0B:A2:71:01:2A:95:89
X509v3 Authority Key Identifier:
keyid:17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:34:e3:92:2e:2b:9d:8c:ce:b2:a8:e4:fb:e9:b5:2c:2e:ee:
3b:e3:6f:e3:ed:3c:91:0b:09:f2:0e:63:26:2c:b2:1e:38:a1:
fd:5b:ad:a3:4b:fa:d4:ef:c6:ac:34:aa:23:8e:8f:d1:94:28:
79:2c:f4:b6:2a:64:30:c0:08:b2:85:14:38:fb:28:dd:74:80:
78:c5:33:7a:6a:09:99:27:5a:67:3f:0e:f2:90:97:92:f0:23:
10:9c:b3:47:a1:09:0f:3a:2b:41:64:9b:9a:a5:9c:33:5f:25:
f1:2a:d2:72:b4:51:61:be:42:ee:3f:57:aa:dd:b9:d1:f7:df:
37:cb:b8:d2:71:aa:88:a4:a6:95:af:14:c3:4f:2c:e1:c2:3e:
0f:30:02:80:9b:f4:d4:4a:28:ca:94:02:73:96:80:98:22:aa:
79:47:01:53:df:87:53:2d:04:b5:28:f2:ef:ff:ff:67:25:fc:
dd:80:2a:79:6a:84:cd:2a:69:a7:91:67:e6:d4:e6:85:f3:2f:
1b:35:51:fa:54:c8:91:35:13:51:52:87:a7:f6:e0:33:3f:b5:
83:95:64:ad:75:9b:08:dd:43:b3:9f:e9:f8:63:02:fe:d7:42:
f7:bd:61:fc:e2:73:98:bc:66:db:ba:b8:9b:65:de:a5:b8:7d:
96:7a:7f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:33:17 2025 by rpki-client