Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
File: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft (raw, json)
Hash identifier: aUNpNAzjpEZVTlNrTJ1j0AGgod9BP21OvcaVkrWJNn8=
Subject key identifier: FE:11:8F:AB:61:DF:45:B1:17:C5:90:BD:39:5B:C5:0B:C8:EA:28:57
Authority key identifier: ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
Certificate issuer: /CN=ed740702247a2feaccdebe13a9842cffd3b40c96
Certificate serial: 0196591426D0F2BC0CDEC835BD7CBED39A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 16:00:14 +0000
Manifest this update: Mon 21 Apr 2025 16:00:14 +0000
Manifest next update: Tue 22 Apr 2025 16:00:14 +0000
Files and hashes: 1: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl (hash: pt8hq5NyVGnd91/9y5u6YjJYca9xwWqG5ViS7L9i7f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:26:d0:f2:bc:0c:de:c8:35:bd:7c:be:d3:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed740702247a2feaccdebe13a9842cffd3b40c96
Validity
Not Before: Apr 21 16:00:14 2025 GMT
Not After : Apr 22 16:00:14 2025 GMT
Subject: CN=fe118fab61df45b117c590bd395bc50bc8ea2857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:8e:67:ad:91:0e:d2:81:95:3c:46:37:8b:
61:57:99:18:7d:03:3b:9e:3a:31:67:5c:79:6b:17:
48:2a:9c:11:d3:1a:68:eb:c7:7d:03:b2:5f:aa:bd:
b7:ea:4e:04:c3:29:f7:2d:7d:a7:dc:38:66:14:a5:
59:5c:17:d1:e2:4f:37:44:3f:63:e0:fc:de:bb:b2:
85:43:19:24:06:73:2b:4a:67:15:5e:ec:85:0e:5c:
55:ca:34:2f:b5:51:00:29:81:07:75:fd:f8:ed:dc:
51:8a:e0:b9:6f:4e:fb:b7:94:e0:88:13:01:21:4b:
35:a6:34:a8:26:66:88:7e:bb:b9:6c:9d:6d:0f:1e:
b7:26:1a:b8:e2:b4:89:61:c4:88:72:93:51:07:2c:
44:bf:bc:b7:a5:1d:38:2e:7a:79:15:7d:ca:57:91:
3e:ae:b8:9c:91:c8:79:79:03:18:f3:07:9c:d2:64:
22:d6:90:a7:d2:65:81:cb:0c:39:78:40:df:60:cf:
fe:83:87:af:d4:cf:a2:f8:df:b2:ae:10:f0:5a:08:
05:2e:5c:28:c0:ef:96:7a:01:95:00:e4:b4:6f:9f:
a2:a1:1d:6f:3a:b8:47:8b:9c:30:bd:90:9d:cc:15:
a6:d5:b3:50:47:c7:8a:de:02:38:f6:e8:45:9f:35:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:11:8F:AB:61:DF:45:B1:17:C5:90:BD:39:5B:C5:0B:C8:EA:28:57
X509v3 Authority Key Identifier:
keyid:ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:fa:f7:e6:22:41:00:2d:6d:2a:b3:db:a0:d5:ea:b9:a8:c7:
c9:2b:97:81:f2:3e:f0:94:be:53:2d:87:4c:64:25:86:3e:6d:
ca:b4:cf:9b:8a:d9:af:ad:44:26:7b:98:21:8d:1c:5e:f0:5d:
6d:89:24:94:23:d0:de:3f:1e:59:78:fd:0b:58:ee:bb:00:7f:
db:04:cd:e6:4d:61:e6:d7:c3:65:54:7e:0c:3e:3a:d4:38:0d:
5b:10:bb:c0:19:92:19:4d:fa:f6:e5:cd:2d:5a:57:9c:f4:de:
c6:8a:77:2c:15:58:6a:c5:28:69:ac:c7:cc:d1:36:b1:e2:8c:
6d:0d:ad:f3:16:43:e6:b3:ed:90:5b:36:97:d3:d0:0d:01:b1:
53:a3:94:45:fb:13:08:c1:14:60:22:a8:15:e2:6d:70:bd:cc:
2b:78:69:b4:60:27:77:8c:51:0f:05:1c:71:8f:00:b0:85:db:
a2:2f:e2:78:c3:4a:1c:8a:80:e5:e1:4d:d8:ff:17:a7:48:d6:
aa:c4:16:92:64:08:c8:c1:12:93:97:47:af:7d:8b:b4:54:12:
01:a3:c0:a8:97:44:71:0b:f0:fe:8c:a0:a4:9e:21:8c:2c:b7:
b2:00:a0:42:e5:40:d2:32:78:33:b7:c7:06:91:ec:c8:97:b5:
26:f8:35:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:54:08 2025 by rpki-client