Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
File: fZ4KWRzFKRTMcA44de11qR7JjCg.mft (raw, json)
Hash identifier: 7ZeUK7LIi9pXscBDP4Nl6wpIaRHHhqBZvigAmcUK5aQ=
Subject key identifier: 1A:6F:4A:E6:D1:5D:95:34:B0:FA:45:81:42:E7:AA:E3:C7:D4:99:09
Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
Certificate issuer: /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Certificate serial: 01962ABC50F1818C3C30AFBF35F69F5EA448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
Manifest number: 14EC
Signing time: Sat 12 Apr 2025 16:01:46 +0000
Manifest this update: Sat 12 Apr 2025 16:01:46 +0000
Manifest next update: Sun 13 Apr 2025 16:01:46 +0000
Files and hashes: 1: fZ4KWRzFKRTMcA44de11qR7JjCg.crl (hash: 623xCgfvB8GtwXYoRuUxHWU2tErFRs3MV22XJ5wGgCo=)
2: k81sGP_nTYcnr-ydvL_qIPOJOvk.roa (hash: 5IYqtPSCzWY5rft+/OTv7pak8S3Yrmu5rpVtbzra1bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:50:f1:81:8c:3c:30:af:bf:35:f6:9f:5e:a4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Validity
Not Before: Apr 12 16:01:46 2025 GMT
Not After : Apr 13 16:01:46 2025 GMT
Subject: CN=1a6f4ae6d15d9534b0fa458142e7aae3c7d49909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:98:94:c4:16:91:a0:29:1b:6b:c3:89:30:7f:
ed:13:80:1e:2f:b4:cf:1e:0b:94:e1:0a:3e:56:56:
5a:e2:53:f7:c1:ab:75:87:df:a9:02:bf:af:4c:28:
1c:60:6e:c8:e2:21:37:e5:d8:29:98:d8:11:e0:21:
31:15:b3:ec:9c:0f:2f:9d:34:a3:91:9d:5f:c3:25:
c9:52:73:79:e4:6f:49:e2:47:fa:cf:9e:26:54:35:
6d:cc:a1:b9:b2:1f:73:7e:7c:3a:cd:64:76:e5:d0:
bb:6c:1d:34:69:28:84:c9:b9:1c:bb:5b:9d:63:24:
2d:9a:02:c6:76:88:97:54:24:3e:3d:cf:f2:d0:8e:
b6:26:6c:19:6c:8c:db:45:14:f5:d9:68:bd:89:f8:
eb:3e:9a:88:11:db:33:93:bd:02:b7:13:18:d8:40:
cf:5e:5b:03:09:1e:70:75:89:2a:e5:3c:6c:31:83:
97:f6:4d:22:5e:16:8b:c7:96:46:d5:99:82:3d:33:
1c:fc:fb:55:e9:d3:55:8d:b4:6a:a2:b6:06:3d:86:
0b:38:e8:b5:7b:2f:ec:df:f2:4c:44:39:e7:23:bf:
61:23:8e:06:7d:8d:42:ae:d3:84:b6:74:2b:58:db:
ae:e3:99:c8:87:50:e4:2b:32:f1:5a:4e:fb:1e:f5:
60:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6F:4A:E6:D1:5D:95:34:B0:FA:45:81:42:E7:AA:E3:C7:D4:99:09
X509v3 Authority Key Identifier:
keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:23:fa:76:8d:3a:c6:1e:4f:49:80:53:51:a3:80:79:6e:36:
eb:1c:89:8f:4f:e7:25:b2:6c:51:1d:a3:92:4b:2e:0a:ec:72:
83:0d:5a:c0:b2:96:97:71:be:9f:73:a7:c6:42:5e:69:10:52:
a2:28:bd:0e:18:95:6c:5a:dd:76:37:17:57:c8:67:e3:84:20:
df:94:22:bf:a7:b0:0f:1e:78:d5:37:e8:6d:a8:94:c5:43:5d:
6b:7b:f9:cd:3e:53:e7:d7:4e:24:f2:8a:ea:5d:52:32:7f:50:
15:64:8c:bc:2f:1a:b6:e8:94:29:2d:93:ca:98:5b:3f:d8:f4:
90:70:05:87:93:5b:72:89:8a:3c:f7:6d:25:52:53:59:02:cd:
24:37:ce:05:6b:7b:73:bc:23:6d:88:9b:4d:08:f8:6a:2b:25:
26:f8:79:58:48:69:6f:94:37:1b:7e:b6:cf:56:29:cd:f4:af:
8c:88:95:89:96:e8:54:cb:09:c2:1c:0c:0a:29:07:94:90:2b:
28:6c:73:12:22:ff:42:d2:4a:11:ac:a9:2d:b6:80:2c:68:e9:
27:ef:29:97:57:6d:3a:14:98:24:3d:fe:f7:9f:c8:37:c8:b5:
21:fb:4b:39:c5:47:f2:26:b2:ac:18:9d:f3:ff:c3:48:fc:75:
7c:31:60:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:38:52 2025 by rpki-client