Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier: N9ehQTtG/Djxo9wRIIvijwBqpogzZN5Nw9ELT6MQTH4=
Subject key identifier: D7:70:C7:EC:2D:32:79:1E:96:38:C5:23:85:4C:F4:2A:03:09:02:A0
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer: /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial: 01965BDF413BBE54F9193B31C656F0923CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number: 14FF
Signing time: Tue 22 Apr 2025 05:01:19 +0000
Manifest this update: Tue 22 Apr 2025 05:01:19 +0000
Manifest next update: Wed 23 Apr 2025 05:01:19 +0000
Files and hashes: 1: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: G/8fRScmGKxRFOgfMq5IcCKhGodzqPDt2e84iabHDqo=)
2: Uol637i_aGyEjqsV-G-zBBGF_fM.roa (hash: GHwCfKteNhzkVgd1pFW2ZoKvEFt5K3t+m0uHz8s/0GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:df:41:3b:be:54:f9:19:3b:31:c6:56:f0:92:3c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Validity
Not Before: Apr 22 05:01:19 2025 GMT
Not After : Apr 23 05:01:19 2025 GMT
Subject: CN=d770c7ec2d32791e9638c523854cf42a030902a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:b3:90:18:f4:ac:8e:00:d7:7d:03:13:97:
a7:30:a9:1c:18:6d:78:f5:07:71:5a:64:69:24:8e:
2f:d9:1b:82:3a:6a:28:f8:e5:5e:c5:62:9e:d5:33:
70:c4:9a:b7:57:40:bf:9f:64:6a:26:a2:2b:20:a0:
4d:31:c6:c2:27:ef:fc:24:c1:b6:b6:be:ce:82:41:
9c:9d:33:b2:51:c0:cb:4e:40:fe:76:cc:07:0f:74:
6c:77:5d:3b:f4:22:11:79:17:62:1a:74:ec:32:6f:
4b:9d:20:b0:6b:f6:e7:5a:16:e4:81:b8:1a:8e:b9:
da:cb:c0:17:d8:f3:ed:5b:14:94:df:85:1d:f1:03:
9f:23:c0:ba:ad:b1:74:13:f1:89:5a:12:80:63:1e:
47:62:1d:71:62:54:4e:31:f7:1e:ba:e9:bf:3e:03:
69:ac:a6:3b:ba:2a:93:ba:80:d0:e1:9c:4c:6a:99:
9a:06:ca:7c:c5:2b:0e:46:0f:24:1f:7b:a3:a6:cb:
0c:fd:48:84:a8:1f:ce:5e:9a:2f:66:e0:ab:d1:f9:
1a:ba:b9:3a:65:f2:55:a3:53:d4:a7:2f:0c:b5:32:
df:a7:b9:2f:3a:b2:1a:52:1b:c4:ae:e6:90:d2:50:
01:d3:e8:b4:0f:43:67:23:d9:ca:c3:e6:c9:1e:c3:
fb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:70:C7:EC:2D:32:79:1E:96:38:C5:23:85:4C:F4:2A:03:09:02:A0
X509v3 Authority Key Identifier:
keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2c:8b:6a:93:c1:4e:5f:63:d4:6b:a2:74:58:a8:5c:94:04:
b3:1b:79:48:de:3e:98:7d:cc:5a:45:01:57:83:9a:bc:1e:0d:
31:af:9c:c8:a4:d8:50:37:64:30:3a:6f:a9:b8:a3:72:a3:6c:
3e:5e:be:86:23:a8:7b:fe:88:a2:96:a7:6f:1d:91:24:6c:f9:
65:02:2a:16:0a:21:13:60:a0:d2:71:47:42:5b:8a:14:6c:5a:
6d:7e:bc:b2:c1:28:ee:48:2d:30:b9:3a:f2:bf:70:a4:88:10:
44:26:8a:f4:b4:b3:b8:50:ea:13:ce:99:5b:88:e9:ce:c7:5c:
4d:64:29:54:df:57:ef:64:51:48:33:ab:1b:75:d0:7a:e9:12:
37:4e:e3:22:de:17:78:31:ff:db:37:40:9b:bd:6d:5b:21:8c:
51:9b:c9:e6:03:e6:2d:c6:72:65:ba:82:40:0d:3b:3a:06:9a:
55:eb:73:8b:98:ae:19:a5:cf:a4:b2:e6:c8:23:c1:fa:c8:08:
90:8a:3a:02:ed:b8:15:ce:e4:b9:1e:e8:6b:99:4c:91:69:cb:
5c:47:8c:bd:85:6d:4f:0c:9f:5a:06:b3:e1:2b:81:be:a5:2d:
cd:b0:aa:46:f0:be:21:9f:f7:aa:f7:6d:cf:8e:e7:08:ad:da:
23:55:19:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:09 2025 by rpki-client