Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
File: e7M4LBagpWFZkNS85jTcUWgvLqo.mft (raw, json)
Hash identifier: HeRbv528fSbYA/r1phFrO/ViVxW2KDzwSYSPBtm6Jvw=
Subject key identifier: 03:BC:F4:32:E0:D6:43:90:74:93:AC:96:AA:65:74:EC:38:0F:07:21
Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
Certificate issuer: /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Certificate serial: 0196587008A8D56813AA8F19D5C1D29D3C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
Manifest number: 07F3
Signing time: Mon 21 Apr 2025 13:00:59 +0000
Manifest this update: Mon 21 Apr 2025 13:00:59 +0000
Manifest next update: Tue 22 Apr 2025 13:00:59 +0000
Files and hashes: 1: e7M4LBagpWFZkNS85jTcUWgvLqo.crl (hash: BOBi2Nry8hq1ZECdY1X5oUiqhdJ9QQ3kVt9R/XYbBLk=)
2: qGUXVQ_YIWaxyPrsBvv99Mi17Xk.roa (hash: ahyxLXkQdJnYzPf9suZu/LdsDie1JIPApAeOAOCQ4OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:70:08:a8:d5:68:13:aa:8f:19:d5:c1:d2:9d:3c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Validity
Not Before: Apr 21 13:00:59 2025 GMT
Not After : Apr 22 13:00:59 2025 GMT
Subject: CN=03bcf432e0d643907493ac96aa6574ec380f0721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:a5:04:da:32:c4:b0:91:bf:51:d5:c1:91:
97:dd:20:17:15:f0:5c:77:1c:74:34:d1:2e:a5:69:
09:5a:4c:d2:f6:1b:8a:85:5c:1a:d4:e6:05:d2:83:
8a:eb:f8:52:ec:1e:d0:53:78:22:e4:a3:b2:14:2f:
40:5f:b2:44:ff:d2:88:f0:c9:89:81:e6:0b:1d:76:
5b:fa:f0:6f:7e:95:e4:dc:80:25:81:66:96:8a:7a:
62:50:bf:45:2f:b7:7f:37:2f:8f:41:16:4f:61:d5:
6e:50:63:c9:63:4f:7c:43:d5:35:05:45:f6:88:6e:
e8:48:18:31:ed:03:9d:9e:55:ca:94:d0:91:20:67:
f1:65:d9:14:7d:6c:cb:66:ee:2d:95:02:ad:5d:39:
e8:31:0d:df:a6:0f:a2:5f:1d:37:45:7e:0b:53:ca:
52:99:4f:b1:d8:ec:39:98:d4:9e:98:04:09:ed:6b:
99:9a:5f:63:7c:8f:e2:21:7d:49:2e:32:a6:f5:b9:
63:d4:ef:34:90:86:ab:15:e4:22:08:5c:84:6d:8a:
1e:8a:5f:e5:44:b5:ac:74:1a:f0:37:33:b5:5d:76:
45:19:aa:51:7b:53:68:44:da:07:38:7d:2a:01:d4:
2f:eb:b0:51:e5:2e:10:9c:54:68:b9:cd:f5:2a:18:
c6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BC:F4:32:E0:D6:43:90:74:93:AC:96:AA:65:74:EC:38:0F:07:21
X509v3 Authority Key Identifier:
keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c5:0c:25:7b:61:f1:18:9b:23:2b:4f:41:0d:19:05:fd:d3:
ed:94:f2:76:3d:be:ef:34:05:ba:e8:a1:b8:13:a0:6d:12:5c:
7b:99:2d:14:3f:99:22:c7:f7:61:fb:76:4e:f1:ec:0e:5e:72:
bf:94:c5:9a:7c:4b:57:35:9f:f6:09:bc:0d:23:dc:84:c4:98:
b4:e6:2a:14:9e:f4:a5:45:4b:22:f9:91:69:10:45:83:fd:fa:
e1:de:a4:86:14:52:ad:bd:d8:f3:5d:78:2b:e2:e7:cd:87:8c:
3a:d0:af:95:66:dd:3b:2a:e4:cf:f5:31:2c:a2:09:bf:36:e4:
9a:29:5b:6f:c5:9c:7a:a3:cf:78:18:e9:4a:10:ae:56:60:eb:
68:8a:ff:83:79:07:3d:c1:42:85:7c:cc:04:a7:d2:3c:89:ea:
63:45:65:96:0e:81:a2:de:ae:39:37:3c:c9:d4:5f:fc:c7:e2:
9a:d3:11:d9:9c:ea:29:4d:e7:23:35:8c:94:91:b0:84:ef:b7:
d8:86:2a:66:fa:2c:96:c3:58:bd:9a:69:0b:55:3e:f6:bc:95:
d5:dc:0e:99:39:47:a2:09:bc:eb:1f:af:34:58:bd:7f:9a:78:
a1:03:0b:c8:85:d6:9d:bd:2f:86:e0:9b:8d:41:fa:46:de:91:
3d:34:c9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:21 2025 by rpki-client