Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft
File: 7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft (raw, json)
Hash identifier: PUYnICRHDQwckzOgURzhpLJTbCNNbcU0JNDZuxpwD0E=
Subject key identifier: 85:D5:23:8A:08:79:6A:AC:C6:67:3D:85:A7:13:2E:3C:AD:93:CE:E7
Authority key identifier: EC:24:08:F5:45:24:25:58:C1:10:3C:01:94:B4:F5:61:EB:9A:23:A2
Certificate issuer: /CN=ec2408f545242558c1103c0194b4f561eb9a23a2
Certificate serial: 01963C1CE81D130441829A22E6678743A6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CQI9UUkJVjBEDwBlLT1YeuaI6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft
Manifest number: 0BAA
Signing time: Wed 16 Apr 2025 01:00:49 +0000
Manifest this update: Wed 16 Apr 2025 01:00:49 +0000
Manifest next update: Thu 17 Apr 2025 01:00:49 +0000
Files and hashes: 1: 7CQI9UUkJVjBEDwBlLT1YeuaI6I.crl (hash: DSkYEe3XIWAQYIAx5oJgDoPbDz1ttkf9VZiAXlTUHiY=)
2: W3UE20l_8Px6YA0EYO3_NVSjfaA.roa (hash: SmuzL3cKoEYF8dbOh8LZGbcugb4WzfvFlt+ZhSQ+t5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CQI9UUkJVjBEDwBlLT1YeuaI6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:1c:e8:1d:13:04:41:82:9a:22:e6:67:87:43:a6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2408f545242558c1103c0194b4f561eb9a23a2
Validity
Not Before: Apr 16 01:00:49 2025 GMT
Not After : Apr 17 01:00:49 2025 GMT
Subject: CN=85d5238a08796aacc6673d85a7132e3cad93cee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:e6:37:65:23:5c:56:32:d7:51:50:1d:67:
c9:79:d8:34:ee:26:34:ac:b9:2c:31:5c:02:e2:4d:
1f:72:e9:47:b6:b8:ec:ad:cf:45:a2:d7:73:e1:20:
f6:09:f2:9f:42:37:c4:7a:8c:c4:41:a4:85:be:21:
0b:0e:c6:01:96:f0:76:0b:25:48:fe:8c:71:25:30:
27:26:33:62:c4:08:32:2b:5c:ce:99:11:a1:bb:29:
1c:f0:e2:5e:11:a1:49:3e:3a:c4:67:68:5e:42:42:
3e:46:30:7d:92:1a:33:8b:74:61:1c:63:c0:e5:a7:
5a:af:e6:4d:f7:d4:a3:37:ba:3c:fe:0b:e6:26:4c:
c3:8c:56:44:cf:71:f2:b1:2e:0c:a5:e3:21:e3:46:
05:7a:89:10:86:a8:0f:34:4d:2e:c5:26:f9:4a:e2:
a9:f2:e9:af:83:cc:70:04:a2:61:26:fa:53:e1:1e:
3a:bd:8a:6b:15:88:c6:55:7e:c8:09:22:e5:ab:ba:
4e:d7:ad:cd:3d:48:95:0b:bd:8b:74:d5:14:d3:dd:
3f:6f:1e:fe:86:13:c8:c8:89:77:41:88:64:dc:1b:
f4:c6:77:c7:4a:da:20:b4:77:72:ea:ce:fa:10:c9:
76:09:6f:9d:27:fb:a8:bd:6e:e5:e3:79:ba:56:c4:
f1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D5:23:8A:08:79:6A:AC:C6:67:3D:85:A7:13:2E:3C:AD:93:CE:E7
X509v3 Authority Key Identifier:
keyid:EC:24:08:F5:45:24:25:58:C1:10:3C:01:94:B4:F5:61:EB:9A:23:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CQI9UUkJVjBEDwBlLT1YeuaI6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5e:75:f7:df:22:27:09:07:43:f7:4a:fa:80:59:97:6c:5c:
74:c0:d4:31:8c:ff:16:84:97:75:32:63:53:80:c4:7e:23:e4:
0c:a8:55:38:e6:3a:40:56:a3:c1:29:8f:cb:30:51:05:ab:7a:
3e:80:37:3b:41:ac:46:16:25:5e:e8:cf:46:b3:3b:98:c9:5f:
e0:3c:2f:e4:97:fa:d1:8d:74:d3:a8:20:6c:e2:51:fb:de:3e:
72:78:3a:65:46:ad:20:5e:62:94:06:3a:44:e7:1a:ce:71:98:
4e:23:07:4d:ab:29:92:6a:48:8e:b6:db:a1:25:5c:7c:7e:a1:
a9:ee:12:57:ad:62:f7:ce:89:00:1b:39:df:2f:f6:94:1f:28:
4f:9d:e5:86:7b:1d:1c:d4:57:5c:7d:86:20:03:26:be:9d:85:
cd:1c:6d:d9:84:27:12:6b:11:31:65:c7:92:49:16:45:08:d0:
76:a6:72:3e:33:09:4d:05:7c:c8:89:89:b4:7d:86:9d:cf:84:
6a:11:1f:9f:c1:a9:90:55:9f:43:f8:a2:9c:54:42:3f:3b:8b:
ae:27:01:79:1f:de:e0:9f:f1:86:0d:f5:ab:1d:97:91:76:fa:
8f:a6:21:98:78:d5:e4:7d:aa:be:9a:f8:00:f1:9f:70:f2:01:
f4:87:1b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:37:50 2025 by rpki-client