Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
File: esMB9rptscwntFS8szI5rh1kGrs.mft (raw, json)
Hash identifier: 3RLs3uoHTk8ZpBTiYQXCZz4gNQszwf1qtc/7Jn+Xu3M=
Subject key identifier: 7A:58:66:3D:6B:AD:1A:83:A6:95:8A:13:0C:6F:3D:CB:29:BC:3A:79
Authority key identifier: 7A:C3:01:F6:BA:6D:B1:CC:27:B4:54:BC:B3:32:39:AE:1D:64:1A:BB
Certificate issuer: /CN=7ac301f6ba6db1cc27b454bcb33239ae1d641abb
Certificate serial: 019656B844A0F95C2E950E1A22DA799DA2E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
Manifest number: D8
Signing time: Mon 21 Apr 2025 05:00:38 +0000
Manifest this update: Mon 21 Apr 2025 05:00:38 +0000
Manifest next update: Tue 22 Apr 2025 05:00:38 +0000
Files and hashes: 1: esMB9rptscwntFS8szI5rh1kGrs.crl (hash: 7nb3yuJLwMSpqLr6/sqVfMS07Lum6lu0V9IxBaR5+A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:44:a0:f9:5c:2e:95:0e:1a:22:da:79:9d:a2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ac301f6ba6db1cc27b454bcb33239ae1d641abb
Validity
Not Before: Apr 21 05:00:38 2025 GMT
Not After : Apr 22 05:00:38 2025 GMT
Subject: CN=7a58663d6bad1a83a6958a130c6f3dcb29bc3a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8d:f6:25:70:fc:2d:9c:68:f0:f5:e5:ff:44:
f2:56:16:34:49:81:21:80:ba:6e:29:b1:0a:eb:7a:
17:00:10:c0:6d:53:30:0e:99:25:bf:79:fe:e2:8b:
1d:a4:51:b3:10:5b:be:5c:c3:72:96:c7:b1:aa:1c:
38:1f:39:6e:82:02:b1:39:4d:55:5a:14:fa:24:0d:
e1:f4:63:11:91:cd:1c:7d:ed:c5:b4:55:9b:ed:f7:
dd:20:e9:99:87:87:94:bb:9c:6a:d5:f1:3f:32:6b:
4f:c4:bf:c6:7e:79:16:c9:b2:95:cd:d2:85:fc:eb:
dc:f4:a9:af:29:d3:ec:ed:61:62:48:f9:d3:1a:80:
1c:fc:fa:9f:6b:91:1b:30:ac:0a:61:3e:0f:5b:1f:
4f:39:10:7c:d3:b4:5f:f9:66:18:98:4e:9a:9c:6e:
63:c5:02:4d:e9:22:e5:a0:00:0c:67:46:95:39:01:
a8:0c:6c:22:05:5c:ff:4d:7a:42:f8:a8:08:f3:07:
04:1b:9f:a6:4b:39:15:7b:0b:31:6e:6f:20:48:61:
f5:01:7a:42:6a:77:dc:0a:5d:c3:ca:93:45:6b:44:
57:8c:a3:90:4a:6f:51:51:39:ce:c9:50:68:7e:c3:
f3:ae:91:4e:68:fd:ac:a6:81:3a:4d:70:6a:0a:4c:
19:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:58:66:3D:6B:AD:1A:83:A6:95:8A:13:0C:6F:3D:CB:29:BC:3A:79
X509v3 Authority Key Identifier:
keyid:7A:C3:01:F6:BA:6D:B1:CC:27:B4:54:BC:B3:32:39:AE:1D:64:1A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1c:a6:91:24:ed:63:6b:2e:78:4f:a1:b0:64:e0:ca:13:51:
42:07:85:7f:08:48:d4:5b:9c:fe:20:7e:f9:ee:e7:53:c4:e2:
c4:3d:a4:d9:45:4d:d0:01:94:e3:56:49:a9:ef:00:32:40:3c:
45:f4:99:b7:1e:0d:27:88:ca:54:b4:1a:ab:77:5b:e4:9c:5b:
fa:89:e7:04:05:a6:26:84:eb:6e:fe:64:aa:e8:d5:03:a2:2e:
2c:e7:a3:23:0a:71:73:05:d6:25:b3:c1:fd:cb:5b:0a:1c:02:
4c:45:f8:8d:68:7c:49:ab:57:2e:6a:d3:68:2d:d6:d8:1e:a3:
46:90:f3:52:fb:bf:4e:8e:df:68:78:43:37:c2:29:92:e9:36:
3b:85:de:8a:88:17:dc:fe:10:98:a8:0e:5d:86:fc:d4:33:0c:
ad:b2:5f:44:10:1b:fa:a7:7e:b5:e2:b7:ac:2e:d2:78:05:f1:
0b:88:a5:a6:f6:26:21:4f:40:89:d3:91:75:4b:8e:a6:2c:4e:
15:f5:6f:42:b8:6f:b8:bb:57:26:ce:1e:6a:40:13:82:dd:5d:
89:17:83:e6:26:23:9c:3a:c2:35:f8:a7:4f:25:82:12:c3:5d:
66:79:35:80:ca:34:7f:66:68:87:09:92:ce:3f:e1:fb:ef:89:
a6:3e:69:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:12 2025 by rpki-client