Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
File: 7PsAOB5zPcbkHQbbnsjd0xEoG90.mft (raw, json)
Hash identifier: Rl71VpxU3dLCe/zVtkkXKgsWTeTgshzOSTke2U6v/V8=
Subject key identifier: 57:5B:5A:CD:BD:03:0F:58:FC:ED:6F:F7:E7:DE:2E:39:A3:A1:63:4A
Authority key identifier: EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
Certificate issuer: /CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Certificate serial: 0196802272A2904E33B55F111B898311878A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
Manifest number: 0F31
Signing time: Tue 29 Apr 2025 06:01:03 +0000
Manifest this update: Tue 29 Apr 2025 06:01:03 +0000
Manifest next update: Wed 30 Apr 2025 06:01:03 +0000
Files and hashes: 1: 7PsAOB5zPcbkHQbbnsjd0xEoG90.crl (hash: BAWK1VW/PGp8VJ6QACPpJ++ZCIUw090nXDOapWctORs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:72:a2:90:4e:33:b5:5f:11:1b:89:83:11:87:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Validity
Not Before: Apr 29 06:01:03 2025 GMT
Not After : Apr 30 06:01:03 2025 GMT
Subject: CN=575b5acdbd030f58fced6ff7e7de2e39a3a1634a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:21:4a:00:ca:0f:3e:45:16:11:6c:f5:0c:e2:
08:fb:ce:7a:3a:e8:f2:e6:96:6c:94:5e:c0:30:64:
4a:90:2c:e7:41:b6:e8:f0:2a:d9:e6:2f:aa:d7:fe:
79:07:25:26:4c:4f:6c:3a:96:a1:9b:39:18:19:25:
4a:48:46:d3:ac:c8:3b:4f:cf:24:19:44:28:5f:a1:
2e:b0:af:e8:93:0d:14:af:6c:9c:5e:6e:2f:92:b0:
b8:d4:f2:6d:a7:18:5e:d4:0a:6b:e2:88:7b:fe:38:
60:2c:da:73:1f:39:8e:44:80:28:44:25:22:f7:5d:
46:e8:9a:75:ba:34:34:54:bb:72:7f:eb:ed:4c:2c:
ac:db:d6:54:d2:a5:47:9e:96:b5:b0:1b:e6:ba:c4:
12:a5:23:6b:5a:a1:50:97:b8:d5:b1:c9:d6:00:37:
ad:59:b2:f9:52:e1:31:03:e5:13:82:db:10:50:b2:
5f:78:01:f4:bf:2c:81:6e:91:6c:dd:18:df:c5:c0:
a1:06:f6:0c:04:53:76:2c:bf:93:45:ca:77:5d:c5:
b2:7d:35:04:cc:21:7d:f6:bd:ee:61:06:a0:9f:e7:
62:ce:6a:67:eb:63:ff:11:70:47:d7:37:79:f3:4f:
4e:ce:b8:9e:2f:01:65:72:e1:d6:ca:50:0b:b0:e2:
e3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5B:5A:CD:BD:03:0F:58:FC:ED:6F:F7:E7:DE:2E:39:A3:A1:63:4A
X509v3 Authority Key Identifier:
keyid:EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:89:77:e6:c0:c1:f1:a9:9b:22:d8:74:83:9f:d3:0f:cf:96:
a5:0b:9e:5e:38:75:0f:e9:90:6c:99:68:24:f5:f9:a9:b2:9d:
0a:52:6f:1a:43:2b:80:c8:71:52:0d:05:c0:62:8b:42:d0:a7:
f4:a9:a0:2f:f5:4f:86:a7:28:54:6a:04:33:59:a1:4c:7c:a4:
8a:94:c5:d6:0b:fa:58:1f:2c:ba:55:f2:bd:f1:20:ec:2d:75:
fa:f6:42:52:ef:bc:52:5c:ca:d3:33:b5:8c:9c:48:ae:5f:20:
9d:de:96:dd:e5:d4:f3:84:db:6d:cd:69:b0:fa:a0:df:10:60:
82:44:82:c1:ec:33:fe:54:b2:27:c8:56:e2:1e:4b:5e:e5:39:
03:19:a8:b5:b4:99:45:ed:9e:29:43:6d:37:a5:75:49:28:ba:
a9:d2:ae:3b:df:c4:2f:95:98:d4:34:4f:02:53:aa:25:be:f3:
65:1c:85:20:cd:e2:3e:06:16:0a:b1:da:a5:33:eb:83:2c:d1:
ef:54:eb:09:de:11:57:ec:08:14:66:fa:67:3a:d8:e9:bf:da:
01:37:04:cc:a4:c7:be:77:d6:9d:fa:9c:63:f3:60:bf:b4:5a:
a3:3a:4b:52:9d:ba:17:ff:5c:89:6a:6a:5b:58:90:58:03:14:
6d:5b:c5:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAInKikE4ztV8RG4mDEYeKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZmIwMDM4MWU3MzNkYzZlNDFkMDZkYjllYzhkZGQzMTEy
ODFiZGQwHhcNMjUwNDI5MDYwMTAzWhcNMjUwNDMwMDYwMTAzWjAzMTEwLwYDVQQD
Eyg1NzViNWFjZGJkMDMwZjU4ZmNlZDZmZjdlN2RlMmUzOWEzYTE2MzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyFKAMoPPkUWEWz1DOII+856Oujy
5pZslF7AMGRKkCznQbbo8CrZ5i+q1/55ByUmTE9sOpahmzkYGSVKSEbTrMg7T88k
GUQoX6EusK/okw0Ur2ycXm4vkrC41PJtpxhe1Apr4oh7/jhgLNpzHzmORIAoRCUi
911G6Jp1ujQ0VLtyf+vtTCys29ZU0qVHnpa1sBvmusQSpSNrWqFQl7jVscnWADet
WbL5UuExA+UTgtsQULJfeAH0vyyBbpFs3RjfxcChBvYMBFN2LL+TRcp3XcWyfTUE
zCF99r3uYQagn+dizmpn62P/EXBH1zd5809OzrieLwFlcuHWylALsOLjWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdbWs29Aw9Y/O1v9+feLjmjoWNKMB8GA1UdIwQY
MBaAFOz7ADgecz3G5B0G257I3dMRKBvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYTdlYWUtNzM5Yy00MmVhLTk0MGEt
NTgzNjZlOThhOWU2LzEvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYTdlYWUtNzM5Yy00MmVhLTk0MGEtNTgzNjZlOThhOWU2
LzEvN1BzQU9CNXpQY2JrSFFiYm5zamQweEVvRzkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeol35sDB
8ambIth0g5/TD8+WpQueXjh1D+mQbJloJPX5qbKdClJvGkMrgMhxUg0FwGKLQtCn
9KmgL/VPhqcoVGoEM1mhTHykipTF1gv6WB8sulXyvfEg7C11+vZCUu+8UlzK0zO1
jJxIrl8gnd6W3eXU84Tbbc1psPqg3xBggkSCwewz/lSyJ8hW4h5LXuU5AxmotbSZ
Re2eKUNtN6V1SSi6qdKuO9/EL5WY1DRPAlOqJb7zZRyFIM3iPgYWCrHapTPrgyzR
71TrCd4RV+wIFGb6ZzrY6b/aATcEzKTHvnfWnfqcY/Ngv7RaozpLUp26F/9ciWpq
W1iQWAMUbVvFHw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:24:22 2025 by rpki-client