Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: gQ5aNEOkm1SMWPmUeJVulK3NOgTC8pd7Hx1CaAV1PCg=
Subject key identifier: 5A:BC:6D:9D:48:DC:33:9C:D3:70:19:D0:92:2C:3E:00:E0:1D:B5:46
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 019648585C04B3E9DAFFB6A3E3115D0588CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 10:01:12 +0000
Manifest this update: Fri 18 Apr 2025 10:01:12 +0000
Manifest next update: Sat 19 Apr 2025 10:01:12 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: TtnOl07XARl6gEFWvWISUsrcU20xcLf1bZaguLkfYoM=)
2: nigLCn7wWT0ueFZoLpA3hlPaWgA.roa (hash: q+VheV55aItc4rpRaaib9XdkzvuIJSEg9slh0BtNQXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:58:5c:04:b3:e9:da:ff:b6:a3:e3:11:5d:05:88:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Apr 18 10:01:12 2025 GMT
Not After : Apr 19 10:01:12 2025 GMT
Subject: CN=5abc6d9d48dc339cd37019d0922c3e00e01db546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3b:6b:d3:a9:b6:0a:c7:c5:8c:9a:ae:9f:60:
8a:8c:6c:e7:4c:f9:bc:82:08:47:80:42:a9:54:c0:
03:4c:a4:cd:1f:57:46:7c:f2:8e:0a:cb:0e:f0:ec:
c6:68:66:6b:ea:97:d8:97:27:13:26:c5:ce:69:c9:
24:62:e3:b6:00:a6:af:43:ef:46:55:1e:61:07:a7:
c6:ff:03:c7:25:00:cf:54:24:16:eb:b2:56:db:ed:
e9:16:af:d6:2e:b9:5c:f5:1d:e5:90:e5:f9:4a:28:
ca:68:db:02:cd:62:4e:00:49:a4:2c:8b:7d:a8:d1:
a7:a4:5d:5b:fe:5b:68:52:f3:01:b8:2c:97:de:2a:
1d:fb:c9:88:41:74:71:3b:11:ec:26:f4:f8:f8:93:
6c:b8:14:6f:29:9f:97:3c:a0:52:4b:d1:55:7c:56:
c7:95:f7:19:27:1e:f2:47:7c:20:8c:93:90:40:4f:
9f:2c:ea:dc:8f:1d:28:c8:d9:e1:0c:74:78:87:d1:
d5:67:b1:e0:f8:38:aa:86:01:38:72:80:42:3e:d0:
7e:7a:ea:32:9f:48:de:80:eb:b6:98:60:db:a9:58:
23:9f:44:6c:73:39:84:8e:51:68:da:63:09:19:aa:
c1:72:c5:40:88:3f:5a:4d:ae:5c:11:5c:9b:dc:d1:
91:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BC:6D:9D:48:DC:33:9C:D3:70:19:D0:92:2C:3E:00:E0:1D:B5:46
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:42:09:2e:61:cb:11:2d:d8:86:09:08:62:59:37:48:b6:63:
d4:be:c6:36:6d:21:b3:16:69:31:f1:bd:4b:c8:8c:02:76:29:
11:9d:dc:86:14:1f:40:e5:66:db:c5:ac:a9:88:82:ac:3e:57:
4f:96:5d:f6:c9:ef:78:c2:a1:52:cd:1b:04:50:16:87:f9:32:
4e:f3:08:af:36:b6:65:de:df:0c:ba:55:6f:1f:a8:85:e0:f7:
93:d1:3e:60:5e:24:c1:d8:ba:c3:85:88:7c:1f:6d:f7:1b:98:
99:a3:b2:6e:63:76:ac:b0:f6:88:1d:81:f9:36:ef:53:e5:65:
e0:9e:f4:99:80:57:57:fe:9f:61:60:ce:ab:59:54:cc:52:65:
20:b4:59:91:46:cf:35:2d:a4:0d:a0:de:c2:5e:67:53:bf:25:
24:07:09:81:a6:41:54:ee:af:62:53:c9:25:48:75:9c:f8:1e:
5f:a1:53:8e:48:af:64:e6:63:e1:cf:0a:5a:77:1a:95:b4:cb:
08:d6:63:07:71:a6:f4:dc:7f:a8:6d:99:6e:58:90:c3:07:00:
5e:bf:06:f0:2a:19:ce:90:08:14:a3:e2:7c:66:bc:9b:34:57:
e5:ad:86:0c:12:5a:84:66:97:31:68:22:45:91:f9:2a:03:fb:
0f:80:8a:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZIWFwEs+na/7aj4xFdBYjLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDI0ZTQ2YTc0NmJmM2IzYWYzZGVjMDgxY2U3ZWJjNDQx
MTAwYTMwHhcNMjUwNDE4MTAwMTEyWhcNMjUwNDE5MTAwMTEyWjAzMTEwLwYDVQQD
Eyg1YWJjNmQ5ZDQ4ZGMzMzljZDM3MDE5ZDA5MjJjM2UwMGUwMWRiNTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTtr06m2CsfFjJqun2CKjGznTPm8
gghHgEKpVMADTKTNH1dGfPKOCssO8OzGaGZr6pfYlycTJsXOackkYuO2AKavQ+9G
VR5hB6fG/wPHJQDPVCQW67JW2+3pFq/WLrlc9R3lkOX5SijKaNsCzWJOAEmkLIt9
qNGnpF1b/ltoUvMBuCyX3iod+8mIQXRxOxHsJvT4+JNsuBRvKZ+XPKBSS9FVfFbH
lfcZJx7yR3wgjJOQQE+fLOrcjx0oyNnhDHR4h9HVZ7Hg+DiqhgE4coBCPtB+euoy
n0jegOu2mGDbqVgjn0RsczmEjlFo2mMJGarBcsVAiD9aTa5cEVyb3NGRIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFq8bZ1I3DOc03AZ0JIsPgDgHbVGMB8GA1UdIwQY
MBaAFO4CTkanRr87OvPewIHOfrxEEQCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQt
MzExMzA0YTlhMjExLzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQtMzExMzA0YTlhMjEx
LzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEIJLmHL
ES3YhgkIYlk3SLZj1L7GNm0hsxZpMfG9S8iMAnYpEZ3chhQfQOVm28WsqYiCrD5X
T5Zd9snveMKhUs0bBFAWh/kyTvMIrza2Zd7fDLpVbx+oheD3k9E+YF4kwdi6w4WI
fB9t9xuYmaOybmN2rLD2iB2B+TbvU+Vl4J70mYBXV/6fYWDOq1lUzFJlILRZkUbP
NS2kDaDewl5nU78lJAcJgaZBVO6vYlPJJUh1nPgeX6FTjkivZOZj4c8KWncalbTL
CNZjB3Gm9Nx/qG2ZbliQwwcAXr8G8CoZzpAIFKPifGa8mzRX5a2GDBJahGaXMWgi
RZH5KgP7D4CKOg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 20:09:31 2025 by rpki-client