Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File: 7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier: rZcY1l54lE9u/xuKOoP3YXlqCIeearDha5qExHCJEzw=
Subject key identifier: D3:8A:17:79:A7:B2:D1:C0:3F:51:F9:86:8F:5B:A0:E7:E3:17:84:19
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer: /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial: 01962C3C72CDB6B3F1AE47F1F07DFFD1655D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number: 037C
Signing time: Sat 12 Apr 2025 23:01:20 +0000
Manifest this update: Sat 12 Apr 2025 23:01:20 +0000
Manifest next update: Sun 13 Apr 2025 23:01:20 +0000
Files and hashes: 1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: dZ1kgJAIln1AcR5j5o80gDUBkIk3qPvjLicoMfT7hb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:3c:72:cd:b6:b3:f1:ae:47:f1:f0:7d:ff:d1:65:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Validity
Not Before: Apr 12 23:01:20 2025 GMT
Not After : Apr 13 23:01:20 2025 GMT
Subject: CN=d38a1779a7b2d1c03f51f9868f5ba0e7e3178419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:0d:ba:d9:e1:08:86:41:d2:e3:59:ec:a7:
a3:31:94:12:78:e3:f0:77:b9:6d:08:a0:18:6c:31:
13:d0:58:fb:4b:39:82:b4:5c:21:4a:70:fd:85:f3:
50:d1:88:10:28:88:e9:86:8c:88:f6:e5:b1:d9:d1:
f1:80:1d:7e:73:56:69:63:8b:47:67:66:db:e5:a9:
6c:1c:a5:e6:ca:0b:46:b6:17:0c:e6:75:17:70:ab:
77:68:0b:20:17:2a:71:78:b5:f9:d6:24:22:29:45:
b6:70:38:7b:e9:33:66:d9:5a:80:f6:05:e5:99:8e:
5c:c2:d4:64:df:80:00:89:b5:56:af:53:f0:07:89:
82:3f:01:b8:c8:3c:9d:70:61:aa:45:e8:69:4a:fd:
3d:0f:5b:a4:e1:e8:50:cd:c3:80:73:7b:38:05:e0:
ac:37:65:d3:6b:61:bf:65:55:f8:c5:3f:d1:98:4c:
05:38:d7:4d:29:95:6d:be:0b:37:0f:19:63:13:fd:
47:68:6d:7b:fb:50:b3:f1:14:b4:8f:4f:ac:45:72:
e0:67:26:1b:1e:30:75:0a:57:d2:92:c0:c7:db:7e:
2b:c5:fc:79:ce:a3:6e:99:8a:16:55:d3:3f:ea:b6:
00:08:1e:a6:cc:e5:a5:af:ed:19:89:50:b6:60:9e:
6f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8A:17:79:A7:B2:D1:C0:3F:51:F9:86:8F:5B:A0:E7:E3:17:84:19
X509v3 Authority Key Identifier:
keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:cc:11:a0:de:56:1d:b4:73:e4:ae:3e:c1:bc:c7:ed:d4:4a:
de:05:20:f2:c3:be:82:20:9e:3e:f0:11:64:e6:48:87:e6:8a:
7e:bc:1f:e4:94:9f:cd:5d:39:85:1e:8a:5f:9c:d0:06:c2:b0:
6f:83:85:f4:90:8b:19:4b:26:eb:66:4c:61:24:18:f7:ee:95:
d9:b7:87:f5:89:9a:83:62:66:f4:63:9a:3d:af:84:ed:29:e7:
5c:5f:c6:ff:c1:a6:dd:c5:81:99:a7:13:56:25:b9:3b:4d:57:
55:be:0f:89:63:f8:c5:ae:38:be:37:77:a3:05:f0:fd:9a:f5:
bd:37:39:bf:42:98:4e:0c:99:e1:3e:b0:ff:d9:17:28:ec:59:
11:31:d5:5d:d7:58:d6:99:27:61:60:aa:34:a0:c5:8b:13:57:
02:7b:f1:c2:2e:ba:f1:81:d6:dc:5d:f3:80:83:8f:b5:45:70:
c5:8d:66:4f:a6:a5:51:f9:c8:f9:75:11:25:45:e9:66:b0:85:
d7:ba:a4:31:b4:03:21:f3:55:21:2f:5c:a1:90:5e:12:4f:71:
51:ec:0d:96:5b:7c:71:a3:07:e2:f1:cf:34:c4:b7:a8:ec:54:
13:91:08:a7:5b:6a:9e:67:2d:4a:03:19:f4:6c:c3:27:6d:83:
d7:d7:b7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:43:35 2025 by rpki-client