Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier: 9zNIRUlEW1L9XkrGZTMsTqMDdMVSbsB2bZYPtbL2spQ=
Subject key identifier: FF:5C:6C:F9:52:DF:BF:75:BF:B1:A0:85:A6:33:08:00:AF:58:4E:2B
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer: /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial: 01965E3AC63836B1A61F00BFC4CE23CC5E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number: DF
Signing time: Tue 22 Apr 2025 16:00:31 +0000
Manifest this update: Tue 22 Apr 2025 16:00:31 +0000
Manifest next update: Wed 23 Apr 2025 16:00:31 +0000
Files and hashes: 1: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: CVVygS/vJi72WELA7XAYsYvnc94TY7miAWLFBjcy31c=)
2: qBI-2zh83yrxwps5B2wpeqKjzBE.roa (hash: +a40JJUntJvdA4SOSdLnTGJXNEt6hOF4b5LOIU68Stg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:c6:38:36:b1:a6:1f:00:bf:c4:ce:23:cc:5e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Validity
Not Before: Apr 22 16:00:31 2025 GMT
Not After : Apr 23 16:00:31 2025 GMT
Subject: CN=ff5c6cf952dfbf75bfb1a085a6330800af584e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:0f:7a:c2:87:14:9e:d1:11:37:8d:cc:cb:
18:1f:1a:23:6d:0d:8f:32:46:90:02:ba:ec:05:4c:
ec:60:47:1c:d9:52:de:46:cc:a2:70:0a:f5:92:5d:
bb:ea:0a:65:95:34:95:9c:15:8a:de:c7:26:40:ae:
2c:45:03:e3:80:b4:37:e1:1e:08:c0:22:5a:72:11:
04:1e:f9:d3:c5:a4:c9:be:3e:32:83:c4:71:6e:20:
32:1f:80:f6:65:86:91:d1:25:f0:d7:3f:07:9b:65:
d1:f5:36:65:11:68:62:d0:3e:2b:52:6a:cd:92:64:
25:8b:11:04:c1:d1:c2:08:fa:33:f9:1f:0f:65:01:
15:56:5e:bd:af:0a:21:7c:ce:92:33:d2:d0:2b:d4:
39:38:24:93:d2:e5:4e:31:3f:c6:a4:4c:1a:1a:bb:
eb:d6:ae:d3:0d:06:23:b9:c0:3e:f5:72:fc:b8:91:
fb:a8:f5:7e:3e:e5:92:1b:ed:9d:ea:a0:fa:6b:63:
76:af:00:d3:63:76:90:6e:e5:c1:a5:58:9e:a2:40:
3c:50:19:79:03:60:b6:b8:73:3c:5f:c2:70:67:c0:
5a:bb:c5:6f:f0:16:9e:1e:42:42:9a:52:6a:62:e4:
33:1b:1b:9c:63:26:5e:89:3e:a9:69:6d:62:80:c6:
e4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5C:6C:F9:52:DF:BF:75:BF:B1:A0:85:A6:33:08:00:AF:58:4E:2B
X509v3 Authority Key Identifier:
keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e3:19:84:93:bb:a7:a1:03:ae:79:11:f3:74:55:73:e6:bf:
f5:35:c8:13:6c:1c:a1:03:f9:2b:67:43:7f:ab:d8:c8:42:16:
6d:50:56:bf:09:9a:dd:2c:a7:95:af:4b:0c:fc:0c:43:55:3f:
fc:d1:d1:52:e5:4c:e1:a9:36:62:48:b7:a4:78:ef:ba:49:ba:
19:15:c7:23:90:0c:b7:d9:d4:d8:d1:f5:83:8c:c0:d3:00:0d:
6d:ad:f0:d2:c3:78:96:28:0b:5e:0c:07:71:91:18:e8:dc:d1:
4c:fb:83:45:87:8a:1e:b3:43:3a:32:0d:ed:74:c7:80:6f:ad:
2d:4a:ef:8f:e2:9b:ed:b1:1b:c4:3f:95:70:4f:77:8d:f7:cf:
2d:87:a5:68:16:0f:61:08:12:f2:22:c1:f2:de:16:0e:fd:6d:
09:d8:d0:99:84:d7:98:e3:ca:6e:38:b1:95:5d:17:03:51:02:
b0:30:dd:37:7c:f1:4c:a7:c0:67:5d:d5:b6:0d:1b:df:0e:10:
28:68:f7:6d:6c:a0:eb:68:89:78:72:39:cf:9a:1b:29:3d:ae:
8b:25:e4:29:c2:de:bd:bf:35:67:c9:fb:93:e2:a3:34:19:d6:
26:f7:05:1c:42:3b:17:75:3d:63:cc:4d:55:74:2c:7d:75:8b:
86:65:63:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:06 2025 by rpki-client