Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
File: 7q2qYzkQO9tVZtgycdPEfABcJQ0.mft (raw, json)
Hash identifier: mmGQUK1Ck29At9do82uoJ11Z64KpJfXA/0WYyxJhIvY=
Subject key identifier: CC:83:13:CA:FE:13:53:64:B5:80:42:F2:25:C4:A1:D0:E0:F4:7C:1D
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Certificate issuer: /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial: 01958B4D948D2856CED0FB1FE7050894FCF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
Manifest number: 08FB
Signing time: Wed 12 Mar 2025 17:01:12 +0000
Manifest this update: Wed 12 Mar 2025 17:01:12 +0000
Manifest next update: Thu 13 Mar 2025 17:01:12 +0000
Files and hashes: 1: 7q2qYzkQO9tVZtgycdPEfABcJQ0.crl (hash: FnmzShk9FGoCB27nUGP0VIbjYe+kwo5ft5yG4W8iYgs=)
2: mx5KYeLzr9lyOwTUvCRgpGpeZ4E.roa (hash: lpv0D5SfwmuFWskD1jXdGqPckfHmRNfDU4m+hRisO84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:94:8d:28:56:ce:d0:fb:1f:e7:05:08:94:fc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Validity
Not Before: Mar 12 17:01:12 2025 GMT
Not After : Mar 13 17:01:12 2025 GMT
Subject: CN=cc8313cafe135364b58042f225c4a1d0e0f47c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:4a:c8:35:d2:e7:77:11:3b:31:ed:ce:b6:
b9:1d:2d:28:72:30:9c:a5:98:d6:1f:ae:89:c3:8f:
9a:1f:a7:72:fc:0f:71:e2:63:89:e2:8a:97:dc:0b:
3a:f2:64:27:2f:da:b8:60:fa:ec:e8:d6:6c:81:b9:
f0:76:87:1d:67:4a:a1:93:ea:70:51:95:42:1d:3a:
a7:a8:cb:f4:e9:1c:fa:71:8e:09:53:53:e5:10:4e:
c1:eb:10:75:e0:91:98:c6:5a:e1:c3:d7:14:e8:1e:
b3:b9:c0:42:47:1c:4b:66:2a:62:6f:fe:be:e1:55:
ed:56:86:de:76:00:05:fd:72:55:f4:ab:4b:75:d6:
37:29:40:98:af:dd:85:73:06:26:5f:1c:8b:8e:3a:
35:8a:de:3d:ad:21:c3:c5:4b:30:d5:79:5b:84:27:
20:94:80:36:9c:1e:38:1e:ed:21:c0:e6:45:a4:f5:
c8:00:04:c8:a3:fa:81:f4:bb:e7:37:23:fe:cc:3f:
3d:9f:ac:29:1a:ac:62:3f:10:a6:85:6b:e5:dc:10:
97:26:ae:87:ad:71:95:90:43:89:d4:b4:fe:63:a6:
c7:ae:f7:34:df:c2:7f:86:6c:ce:40:25:ca:bf:15:
31:7c:84:d8:7a:04:2c:f8:dd:9d:e9:67:d2:60:93:
09:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:83:13:CA:FE:13:53:64:B5:80:42:F2:25:C4:A1:D0:E0:F4:7C:1D
X509v3 Authority Key Identifier:
keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1f:f2:c7:b3:0f:7d:c1:26:6d:c7:04:26:c4:c0:13:bb:1a:
ed:57:35:de:48:63:9a:48:a8:46:68:c5:11:0e:3b:8d:62:c4:
a1:b6:cb:8f:0d:7c:08:19:9b:c8:5e:80:9d:9d:f0:5a:d2:b8:
24:fa:b2:5a:63:88:e6:a3:eb:06:31:a2:77:a0:07:29:57:48:
d2:69:20:76:b4:c0:a1:4a:e7:70:e5:6a:c4:02:00:a1:ad:3c:
f7:c4:c2:8b:a8:44:43:d1:8f:6d:22:ff:c3:bb:3f:2b:c6:f8:
f0:b1:17:e8:ed:c9:8d:e9:19:0e:2c:fb:0a:24:9f:80:d0:50:
07:a4:8e:7f:2d:7c:dc:aa:8b:74:31:16:3d:c7:6c:df:ad:f2:
93:ad:5d:56:ee:8b:09:f3:59:e0:1f:99:7a:88:d1:c7:0c:ef:
2d:c4:d1:b4:24:64:25:96:79:a1:90:c5:66:6c:c0:bc:35:f0:
b9:0f:c2:62:d0:f2:c0:f3:ab:b0:d1:8e:26:d5:81:e7:18:be:
52:aa:31:f0:09:93:89:12:70:e7:a3:3c:fb:04:91:c7:d9:33:
7c:45:cf:ad:cc:19:c0:b2:d1:09:0e:aa:d1:0a:bc:37:a6:6d:
be:21:81:75:f0:d7:73:99:57:bd:46:34:e9:30:8f:72:a7:66:
b9:1f:ea:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:55:42 2025 by rpki-client