Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: P82A91uEmSAjvLU1flWegjwEy05J7nTdA6q0pRCD2Us=
Subject key identifier: AA:66:6C:58:54:4B:5A:47:A8:EE:B8:68:66:92:48:27:09:26:BA:44
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 019620A620F3EA2F7E391C7E04DAC429A13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 14E2
Signing time: Thu 10 Apr 2025 17:01:20 +0000
Manifest this update: Thu 10 Apr 2025 17:01:20 +0000
Manifest next update: Fri 11 Apr 2025 17:01:20 +0000
Files and hashes: 1: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: Gs1RC+NECboaeX9UgKvhr9qBnaSmLX6A8eH1uW1ukhI=)
2: jJfOPh4XYz0bStaxv-izcSg_mmc.roa (hash: I9zOxo3FRJE3Zqu7rer6Rr4TRL9Sp9aojJllGRgbeX0=)
3: pp9HRbSEXg1Djpwq9U2x1ut0P3A.roa (hash: eLTqAfDKOrIieHKE4CKftQ8WCB5K7yV6FjmVMCdNg0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:a6:20:f3:ea:2f:7e:39:1c:7e:04:da:c4:29:a1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Apr 10 17:01:20 2025 GMT
Not After : Apr 11 17:01:20 2025 GMT
Subject: CN=aa666c58544b5a47a8eeb868669248270926ba44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:8b:49:f0:42:78:24:34:d4:1e:88:f0:7d:
80:d0:f3:26:0e:58:19:2c:62:04:df:9e:9d:34:63:
9f:77:5f:cd:46:bc:c4:74:08:29:a7:bb:09:71:98:
78:b8:62:95:fb:f8:2c:6e:f3:f2:c6:91:4b:71:c4:
c2:b5:d5:20:04:e6:40:6e:83:1c:7e:33:3a:57:1b:
8d:db:52:87:e9:ce:ca:78:b7:52:0a:fd:0a:6c:b3:
a8:84:d1:d3:41:76:0c:50:81:1b:be:80:0c:4c:6f:
ee:cf:bf:4c:b0:4b:b5:89:3b:31:df:46:9e:3a:33:
29:0d:ec:2e:78:7b:32:8e:76:42:92:07:b8:4a:02:
30:51:07:2d:fa:bf:30:1a:2d:51:f7:7b:ab:81:d2:
95:7f:d9:d6:61:89:3e:7f:58:03:98:5f:92:14:5c:
98:8a:7c:95:68:85:c1:69:08:19:7d:6a:b1:76:c7:
f6:9b:b4:40:ad:36:45:51:9e:28:32:fa:57:8a:74:
9a:cf:90:f9:64:a0:60:d2:14:9c:43:1a:33:ba:6f:
ab:bf:58:be:53:06:9e:40:27:b3:10:26:ee:5a:76:
90:35:9a:44:cd:6c:f6:93:59:80:55:a3:6f:73:1b:
46:46:34:6b:81:e7:12:04:da:1f:1c:e8:61:18:46:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:66:6C:58:54:4B:5A:47:A8:EE:B8:68:66:92:48:27:09:26:BA:44
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:bc:1c:d3:56:fe:e2:57:fe:3f:da:6a:67:8a:73:1e:23:29:
c9:ce:09:d1:02:78:ae:d7:48:a0:4d:c9:49:6c:84:6f:48:9b:
b8:a4:69:35:a8:36:a6:da:b2:d8:51:ea:4e:1b:ad:b9:57:df:
aa:93:43:50:5e:43:5a:7a:b7:5c:42:bb:e8:f8:6c:e6:0c:1f:
82:6a:e5:ee:39:74:7d:14:f3:10:4c:55:fd:fd:3d:21:81:04:
cf:1e:71:fa:af:83:d7:64:cd:78:50:34:56:2a:fd:f2:b7:d4:
19:6a:0d:7b:c3:61:d6:37:33:88:45:25:a5:e8:58:f5:cf:4a:
ba:3c:00:75:dc:e3:38:76:b3:d5:1a:4d:26:f3:2f:72:8c:9d:
2d:1d:d2:46:73:e0:9f:6a:5a:42:42:f5:2e:9d:e2:10:43:f5:
00:ae:f6:42:c9:81:2b:77:c3:0f:00:07:f5:0b:f1:1c:bf:ee:
bf:b2:f5:de:ee:c6:b1:1f:2c:57:f1:44:c6:f1:3d:28:95:ee:
11:ac:4d:df:4b:db:4a:ec:5b:b9:52:71:83:d2:93:10:4e:0f:
6f:cf:f9:4f:a1:04:ea:ac:0a:13:0d:4f:75:f4:2c:08:6f:6e:
a4:25:17:06:e2:71:9e:eb:c8:05:6a:07:aa:f0:51:23:6d:ba:
66:36:d4:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYgpiDz6i9+ORx+BNrEKaE/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZjU0YmUxYjVlZDVmZDU5MmZhY2E0NjhkZjExMTAwOTVm
M2VhMGEwHhcNMjUwNDEwMTcwMTIwWhcNMjUwNDExMTcwMTIwWjAzMTEwLwYDVQQD
EyhhYTY2NmM1ODU0NGI1YTQ3YThlZWI4Njg2NjkyNDgyNzA5MjZiYTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fuLSfBCeCQ01B6I8H2A0PMmDlgZ
LGIE356dNGOfd1/NRrzEdAgpp7sJcZh4uGKV+/gsbvPyxpFLccTCtdUgBOZAboMc
fjM6VxuN21KH6c7KeLdSCv0KbLOohNHTQXYMUIEbvoAMTG/uz79MsEu1iTsx30ae
OjMpDewueHsyjnZCkge4SgIwUQct+r8wGi1R93urgdKVf9nWYYk+f1gDmF+SFFyY
inyVaIXBaQgZfWqxdsf2m7RArTZFUZ4oMvpXinSaz5D5ZKBg0hScQxozum+rv1i+
UwaeQCezECbuWnaQNZpEzWz2k1mAVaNvcxtGRjRrgecSBNofHOhhGEZG1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpmbFhUS1pHqO64aGaSSCcJJrpEMB8GA1UdIwQY
MBaAFO31S+G17V/VkvrKRo3xEQCV8+oKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUt
OWU2MTRmNDQ2NmM1LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80MGQ4OTMtZTA5OS00MTQ4LWIyOGUtOWU2MTRmNDQ2NmM1
LzEvN2ZWTDRiWHRYOVdTLXNwR2pmRVJBSlh6NmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7wc01b+
4lf+P9pqZ4pzHiMpyc4J0QJ4rtdIoE3JSWyEb0ibuKRpNag2ptqy2FHqThutuVff
qpNDUF5DWnq3XEK76Phs5gwfgmrl7jl0fRTzEExV/f09IYEEzx5x+q+D12TNeFA0
Vir98rfUGWoNe8Nh1jcziEUlpehY9c9KujwAddzjOHaz1RpNJvMvcoydLR3SRnPg
n2paQkL1Lp3iEEP1AK72QsmBK3fDDwAH9QvxHL/uv7L13u7GsR8sV/FExvE9KJXu
EaxN30vbSuxbuVJxg9KTEE4Pb8/5T6EE6qwKEw1PdfQsCG9upCUXBuJxnuvIBWoH
qvBRI226ZjbUig==
-----END CERTIFICATE-----
Generated at Fri Apr 11 03:10:50 2025 by rpki-client