Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File: 7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier: 0BGjF5hsYVtiKarxQ6eeamgy9UYiM5D7vDxGigR32vM=
Subject key identifier: BE:62:6E:B5:CD:05:5D:DD:5E:68:A2:12:2F:56:FC:86:F2:62:81:C9
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer: /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial: 01964D7E4546143EF2445D00A65A9AB8E3BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number: 0906
Signing time: Sat 19 Apr 2025 10:00:42 +0000
Manifest this update: Sat 19 Apr 2025 10:00:42 +0000
Manifest next update: Sun 20 Apr 2025 10:00:42 +0000
Files and hashes: 1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: D/Sl6sz2Atvv9vllcH76GFFJgYRn1t4NulutjrwZo94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:45:46:14:3e:f2:44:5d:00:a6:5a:9a:b8:e3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Validity
Not Before: Apr 19 10:00:42 2025 GMT
Not After : Apr 20 10:00:42 2025 GMT
Subject: CN=be626eb5cd055ddd5e68a2122f56fc86f26281c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:a3:e4:49:bb:98:9e:f6:7e:d9:b3:fc:f7:
2d:90:6b:60:dd:c9:2b:0a:d6:72:f0:aa:64:69:76:
2e:26:e2:6d:7d:24:8c:ad:fa:d3:d8:cd:2c:d2:d8:
5e:08:df:be:81:72:2b:6f:8e:60:55:ca:e9:b7:e1:
a9:8d:f9:24:9e:9f:a2:68:b4:5f:2c:32:f3:58:20:
72:6f:a4:55:d5:9c:6b:99:b4:06:59:82:bd:97:e1:
92:16:ec:8f:f0:18:9b:25:61:da:c6:f0:71:16:52:
b0:a3:eb:86:29:d2:a8:6d:3a:4d:76:ce:16:10:7b:
50:6e:91:45:53:8f:05:31:b0:66:46:dc:d6:0e:97:
ae:e0:e4:05:1a:b4:2b:4b:32:f5:ff:d8:a0:46:bb:
8a:91:a4:0e:40:bb:5b:89:ca:73:27:ca:5e:74:8a:
aa:0a:9a:02:93:46:b8:57:68:93:ff:bc:6c:da:97:
91:6a:3b:be:b6:bf:8f:1a:73:3a:9e:7b:54:7b:8c:
0a:7b:3b:c8:9e:a8:3e:f5:18:64:ae:7c:60:be:a4:
db:fc:94:8b:16:3f:d6:92:ae:b0:ef:60:0c:43:ef:
c7:82:a4:40:09:b0:81:9d:81:10:01:fd:3b:e7:8c:
cc:87:12:9b:b1:0a:bc:63:7c:58:b1:af:21:e3:2a:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:62:6E:B5:CD:05:5D:DD:5E:68:A2:12:2F:56:FC:86:F2:62:81:C9
X509v3 Authority Key Identifier:
keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a8:0f:7e:d9:7c:67:7d:d5:f3:a9:80:ac:8e:ee:f8:55:ae:
80:a2:3a:5d:65:ba:16:f1:52:0f:33:02:4d:6a:d7:92:53:f0:
16:aa:e1:85:b2:a7:5f:be:4b:4a:a7:09:f9:93:81:98:a5:05:
78:3e:33:d8:17:b3:2d:8b:2c:af:9e:0e:c5:46:e7:cb:83:8b:
c6:04:0b:99:3d:f8:31:93:de:d8:2c:0e:7c:5b:38:80:be:bd:
49:89:41:7d:9b:a8:0f:d7:fb:93:c7:41:1b:2a:da:be:2c:a3:
6e:ad:d3:ca:3c:9c:74:a8:3b:9a:90:ae:f1:8c:d9:3f:a3:31:
ad:36:35:ac:ca:f5:1f:a5:87:61:4b:24:f6:51:cd:ae:d1:3c:
41:07:0e:58:bf:81:d2:a6:7b:13:88:b9:27:15:a2:dd:7d:d5:
1c:15:0d:ec:25:14:10:d3:12:8b:a7:c2:87:82:78:67:b9:3b:
4e:31:8c:9b:20:ed:e3:a3:08:0c:c2:f3:72:8d:14:b8:57:c8:
ef:19:13:f7:43:64:53:cc:a6:b6:a5:3d:d2:e8:a7:e1:03:fb:
94:d0:dd:80:1a:f5:54:b3:10:67:8d:07:e2:38:0e:6e:bb:d5:
69:38:82:1f:c9:1b:10:aa:13:ce:e9:28:dc:69:01:ea:e4:0c:
a0:4c:67:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:31:14 2025 by rpki-client