Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File: 7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier: UC9IZCWSlN4HSlAdTKXAKDvSaJPMeS1zP+HIobo4A3A=
Subject key identifier: CF:15:B8:51:8F:CB:E7:9D:55:2E:60:E9:E7:F0:8A:93:F8:FF:7D:6A
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial: 01964DEC566D4D2E5CB1E1C4151F1F84F02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 12:00:56 +0000
Manifest this update: Sat 19 Apr 2025 12:00:56 +0000
Manifest next update: Sun 20 Apr 2025 12:00:56 +0000
Files and hashes: 1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: U0sdR5rmXckdOYSIk51zPbyvqa26a2aUQ5XSNJou180=)
2: PGTEyuyHfVxWRtCLWSM0Bggjqk8.roa (hash: LpN4nDf3nPAGvaIylopZoGcsyeFo20wtey+AbU/Sxvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:56:6d:4d:2e:5c:b1:e1:c4:15:1f:1f:84:f0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
Validity
Not Before: Apr 19 12:00:56 2025 GMT
Not After : Apr 20 12:00:56 2025 GMT
Subject: CN=cf15b8518fcbe79d552e60e9e7f08a93f8ff7d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:03:24:a2:3c:44:bd:96:8a:c9:33:5d:ac:
42:57:61:d8:f8:7c:bf:e8:b9:0e:87:d0:34:00:fb:
1b:cb:bb:63:c0:71:4b:6e:4b:90:87:e3:8e:0d:56:
2e:e0:32:87:65:c0:1f:4b:73:34:e4:3e:b8:6b:36:
f0:21:f4:e9:dc:69:b3:eb:62:f6:ed:2c:fc:ef:54:
cf:44:fb:91:91:e9:3b:81:ef:1a:b7:c8:9f:27:f4:
01:52:52:56:f3:83:51:40:9d:93:26:47:4e:26:41:
c5:81:46:ff:b0:29:9b:a0:9d:b2:4b:af:09:f6:c5:
94:f1:17:dc:21:18:a2:9d:08:54:74:0b:a2:10:69:
87:0c:fb:0d:b2:4b:6c:8d:fd:0d:35:64:4e:0b:ee:
e9:cb:a0:ff:69:9c:92:6d:42:a1:ab:88:b2:4b:ba:
56:84:a1:ee:c4:55:d7:5d:a5:30:8e:7d:75:92:bb:
26:32:5c:83:45:1d:b6:25:97:1a:b5:f8:e4:0c:1c:
eb:99:38:e5:24:ee:42:93:4e:e8:bb:76:cc:be:0a:
61:38:a7:f0:1d:fd:ee:b4:8f:ab:a7:06:ea:fa:47:
01:73:89:b2:cc:56:91:6e:23:b0:e4:be:87:2b:21:
c5:eb:51:45:63:50:5a:3e:c3:21:2e:f3:03:46:ea:
b2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:15:B8:51:8F:CB:E7:9D:55:2E:60:E9:E7:F0:8A:93:F8:FF:7D:6A
X509v3 Authority Key Identifier:
keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ea:13:d6:59:52:c9:f4:4e:96:8a:d1:3f:14:67:b4:a8:fb:
b5:c8:07:29:2b:9f:ad:f4:b1:d2:96:56:7d:6c:a1:88:2e:20:
8e:e2:93:87:49:06:19:a8:6b:21:7e:c0:9f:d6:e0:ba:9d:39:
a8:2c:44:3d:10:bd:e0:3a:95:3c:63:22:f3:37:c1:ce:fa:2e:
ac:32:26:5a:9a:9e:05:ee:42:2f:a6:5b:cf:62:f3:a9:13:e1:
da:b5:5a:f0:3d:b6:6a:64:dc:23:33:9f:76:3d:d1:86:3a:e3:
b8:c0:8e:1f:d6:47:2d:3d:6e:79:54:21:6a:e5:09:c7:7c:8c:
64:8c:46:01:ac:fc:53:87:e9:3d:72:58:37:6b:cf:8c:a2:40:
02:01:15:e6:82:82:96:9d:b0:85:3c:9f:20:57:1f:a7:9f:76:
b9:47:e8:91:87:55:45:a1:4d:06:54:ce:a4:a2:7f:84:b6:e8:
76:8a:17:e9:52:0a:e4:a5:88:38:ec:a1:8b:93:7c:dd:07:74:
88:a2:89:01:76:2e:96:27:5d:f6:41:50:2e:bb:49:0b:81:11:
b6:ab:ec:c4:34:86:a8:31:20:4f:88:d4:bc:61:69:6b:8f:a1:
33:f4:af:68:d9:fb:ab:85:f4:f2:de:52:47:af:cc:81:27:2d:
4f:cb:af:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:24:55 2025 by rpki-client