Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: T8RWIug/V+XH7XnjUlIElMDz0CXiiVRuWPgEbANNj38=
Subject key identifier: D6:D4:7B:EE:28:3B:B0:36:C0:4A:16:91:CD:C5:44:8D:D4:9B:8E:18
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 01965538331F231FB3146D65460ACD9E7E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 0771
Signing time: Sun 20 Apr 2025 22:01:08 +0000
Manifest this update: Sun 20 Apr 2025 22:01:08 +0000
Manifest next update: Mon 21 Apr 2025 22:01:08 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: iE1LaQCIyq12hhuQLU+nATcPktCvX5TkOvvGcFSS9ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:33:1f:23:1f:b3:14:6d:65:46:0a:cd:9e:7e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: Apr 20 22:01:08 2025 GMT
Not After : Apr 21 22:01:08 2025 GMT
Subject: CN=d6d47bee283bb036c04a1691cdc5448dd49b8e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0d:9b:65:36:22:98:4e:71:95:a7:03:34:e6:
ba:6e:12:89:c1:0c:2d:4c:7b:ff:c8:1a:de:fa:2a:
d2:06:33:1b:e3:81:b5:5c:17:c4:8a:90:c9:79:20:
08:18:a6:77:9d:5a:1a:b3:1f:84:9a:c9:0c:03:20:
f1:47:54:cd:8c:50:77:eb:e5:b9:00:5b:4d:61:1b:
d2:67:f0:94:70:60:ef:3e:23:8f:92:46:0a:be:1a:
0a:40:25:56:7d:9c:84:4b:3f:52:c1:f4:c7:f1:ef:
a4:ca:27:67:66:e2:ef:51:ce:d4:c9:94:96:72:e5:
42:39:3e:20:f9:c0:39:58:6f:bc:56:23:de:8d:d4:
80:8b:ca:8c:74:ad:fe:dc:2c:71:71:0f:b7:3c:19:
8e:d1:fe:b4:78:eb:54:cc:05:4b:23:6d:8c:9b:50:
09:4e:1c:b0:ad:74:55:82:ed:1e:30:8c:d9:43:ed:
64:c2:7f:52:97:5a:cf:e1:12:09:b0:de:04:4d:a4:
a4:f1:d6:5c:49:20:a9:0c:8e:78:04:19:39:b9:a0:
15:23:b1:7a:32:09:1e:26:23:8a:28:02:3c:61:f8:
3e:84:10:97:75:4c:fd:ab:7e:b2:e0:b2:7b:50:9d:
ec:b2:34:61:1d:38:c9:39:9d:a3:60:6e:2c:63:02:
45:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D4:7B:EE:28:3B:B0:36:C0:4A:16:91:CD:C5:44:8D:D4:9B:8E:18
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:49:93:f0:76:53:1e:c6:16:ec:92:2f:a3:1b:a1:77:7d:21:
89:0c:66:96:25:b4:d6:42:36:ae:20:c0:bb:4b:c2:17:c9:7a:
cc:7d:a6:76:6a:c2:a3:30:e8:11:fc:8e:2f:66:41:8d:c2:f7:
8c:51:60:85:dd:7b:cf:15:3f:eb:76:16:15:e9:23:e1:e6:3d:
08:ec:a0:58:37:bf:3b:1e:21:8f:68:67:b7:5c:f1:c0:45:b1:
b9:ac:46:fd:c5:45:08:a2:13:56:fd:db:4a:21:b5:5f:58:c3:
f1:1f:6e:2b:2a:51:aa:d4:51:92:3d:3e:89:c6:a3:56:15:b5:
88:46:52:5c:4e:ba:b3:80:ee:58:e6:d1:90:3b:ca:9d:81:bb:
f4:18:47:ea:bc:fc:9a:2d:ee:3c:23:c1:7c:85:a0:49:e4:37:
08:5c:71:97:fe:70:eb:11:43:51:e2:1d:8e:92:92:da:a6:72:
82:76:f2:0e:dd:c7:e0:00:9c:2c:e4:18:06:bb:2d:0c:f8:1a:
19:c6:67:94:a8:4d:77:e2:4a:58:4d:1e:a8:da:c2:ae:e0:2b:
3c:47:6a:90:b5:67:ea:2c:52:75:a4:cf:06:35:da:e5:c2:19:
f9:f4:c1:33:25:da:4e:37:e2:d2:f4:1b:ef:35:fe:b8:96:d9:
f9:0f:74:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:04 2025 by rpki-client