Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
File: ezF1mINz5Wtv_gsVofx11Gk64sA.mft (raw, json)
Hash identifier: AfDW4d0ba1W+0/O78x9QbXCYSsWVaXJdgDWTg4NiF5s=
Subject key identifier: 06:F6:D6:50:33:31:0C:2B:C8:A0:7A:6B:B4:CD:06:5D:E7:1F:C8:02
Authority key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
Certificate issuer: /CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Certificate serial: 019649D8094EC9F90D4A10071ED4F56A7F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 17:00:16 +0000
Manifest this update: Fri 18 Apr 2025 17:00:16 +0000
Manifest next update: Sat 19 Apr 2025 17:00:16 +0000
Files and hashes: 1: ezF1mINz5Wtv_gsVofx11Gk64sA.crl (hash: DpQkJLCVXPHT6bs7HlQ8DiUfCBkPYZ6HVtlaAj3lcR8=)
2: lkZuAh9g4ZICrk8Syf8Tn6WXaNo.roa (hash: dET9fwU/izT2anivq0drVs4rmphGQ9LJ15mQDS+rUvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 17:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:09:4e:c9:f9:0d:4a:10:07:1e:d4:f5:6a:7f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Validity
Not Before: Apr 18 17:00:16 2025 GMT
Not After : Apr 19 17:00:16 2025 GMT
Subject: CN=06f6d65033310c2bc8a07a6bb4cd065de71fc802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:78:bc:77:04:90:d3:0e:7a:4a:16:d4:69:
b0:d0:f7:59:e2:12:30:fe:00:41:57:6f:64:09:9c:
96:c3:58:81:56:4f:5b:0e:69:72:d6:bf:09:14:5d:
6a:b5:66:7b:d8:aa:45:2d:e3:b0:8f:af:b4:02:90:
ef:1e:40:5d:3a:cc:54:a0:14:fb:b3:3d:e9:67:6e:
09:c5:f9:68:c3:1b:8e:21:e1:53:c6:be:7c:ba:94:
27:61:4a:65:01:2f:0b:34:3b:c2:85:77:94:e1:fb:
34:00:74:f5:17:ef:6e:82:8d:11:8a:0d:00:65:d5:
80:a1:95:2f:52:c9:44:f8:81:af:3c:ce:01:bd:9f:
b0:6a:32:0d:ff:6f:07:97:87:6f:19:6c:d8:8c:23:
66:0c:75:07:76:2e:70:72:16:25:3b:e3:5c:f5:1f:
16:4d:f9:39:23:6c:82:94:1c:59:64:da:b2:c2:21:
5e:c5:60:98:86:c9:40:a3:f4:b8:c5:3f:9d:7a:68:
b9:5f:eb:54:e4:d5:33:37:dc:77:71:d4:98:2f:c0:
ac:1a:56:dc:51:63:ec:e3:2d:7e:43:5e:6f:c0:d1:
6f:d8:4d:b9:63:9e:fc:74:db:4a:08:5a:4e:53:3e:
1a:4c:63:4d:c8:e6:b3:2c:d0:e1:d6:85:8b:d7:d1:
06:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F6:D6:50:33:31:0C:2B:C8:A0:7A:6B:B4:CD:06:5D:E7:1F:C8:02
X509v3 Authority Key Identifier:
keyid:7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d4:c9:f6:91:73:8b:e9:d5:30:1e:7a:94:90:f9:90:0a:96:
19:fe:0a:97:e4:3a:e4:73:a7:ba:ac:5f:7d:8a:98:dc:6d:d8:
2b:e1:3b:ba:f7:47:91:b3:2b:f6:ca:90:50:57:84:61:94:4d:
b3:ec:e2:26:83:f6:eb:04:9b:95:84:e3:ec:01:70:89:15:ba:
25:c7:73:95:36:61:80:3b:c8:02:eb:76:eb:2d:14:4f:6c:bd:
7c:4e:b5:ef:63:90:cc:fa:4b:19:7f:45:cb:45:37:8f:aa:b8:
ec:b4:bd:e7:31:da:4f:48:2b:c2:67:8d:f1:2c:29:a3:93:92:
5a:d0:24:c2:85:e1:ff:a0:6c:e0:4f:30:70:80:d0:69:ce:6f:
57:03:28:8e:af:cd:b4:0f:7f:6c:c3:1d:fe:83:47:44:1d:0e:
9a:5c:96:28:05:3a:31:d0:69:a4:2a:52:71:eb:09:62:a4:2a:
d1:0c:88:6f:0e:d1:f1:79:a1:af:47:b7:6c:2b:91:c5:62:9d:
07:8d:98:99:75:d3:bc:1a:ca:bf:77:78:35:51:06:12:fe:da:
19:0b:55:96:34:12:4f:b7:b4:ef:9a:1b:0d:02:75:7d:25:45:
5a:30:ca:2e:ac:af:de:d5:08:2b:3e:42:07:5d:9e:21:93:54:
04:bf:c3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:17:35 2025 by rpki-client