Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
File: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft (raw, json)
Hash identifier: yUriq4W36NGq5Hd7H30tm/GZp0UvMKN0HwBasZ7UTas=
Subject key identifier: 32:6A:6A:C3:78:97:4C:63:D8:4F:A6:78:B3:18:17:7B:AE:E3:2D:7F
Authority key identifier: EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
Certificate issuer: /CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Certificate serial: 01964D1070AAFD30C0706ADAF3C58E9435C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 08:00:44 +0000
Manifest this update: Sat 19 Apr 2025 08:00:44 +0000
Manifest next update: Sun 20 Apr 2025 08:00:44 +0000
Files and hashes: 1: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl (hash: Nk6PoxuhBLASswLlJe21TxQTHLXI91f25gKtR9/W0PI=)
2: qrPDrPXSwyvVn-Qdl0rfUFtGg50.roa (hash: YwVpe+VwfLyswPBaEHJ3Hi4HwV3yhmlk88pkGuhRl44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:70:aa:fd:30:c0:70:6a:da:f3:c5:8e:94:35:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Validity
Not Before: Apr 19 08:00:44 2025 GMT
Not After : Apr 20 08:00:44 2025 GMT
Subject: CN=326a6ac378974c63d84fa678b318177baee32d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:e5:38:d3:82:50:28:ea:ce:e8:7b:a6:9e:
38:d3:79:af:46:d9:a9:f9:2d:19:4c:65:c2:01:93:
9d:77:f6:56:a7:7a:91:28:4a:ec:ba:0c:6c:6d:76:
f6:e3:38:82:a9:55:82:bc:7d:ce:04:24:28:97:3c:
76:e5:5a:49:d7:68:cd:92:b5:24:cc:85:16:79:65:
0f:91:8f:10:5b:a4:1d:aa:2f:52:ae:55:0f:64:86:
41:7d:e8:fd:8d:35:52:c2:9b:dd:d9:a1:76:9a:4b:
1a:a8:52:f5:dc:27:ae:00:26:db:ae:4e:b1:fb:e2:
10:3c:d3:95:20:fc:3a:13:6b:85:62:f6:00:02:d7:
02:e1:6c:5a:ef:99:64:a1:a2:06:3c:00:7a:93:49:
f2:4b:2c:1f:4d:1f:f3:4d:ed:6d:4f:78:e6:45:18:
58:a0:2c:e6:9e:4a:a0:48:70:80:ae:f8:5b:98:ba:
a1:f5:a5:e9:a6:86:8f:c9:0a:7d:4d:8f:f4:04:2b:
23:de:d3:fc:a6:cd:eb:b8:b7:69:f3:fd:f8:00:30:
67:0a:30:b5:93:6b:63:66:32:32:0d:95:cf:c3:b5:
d2:e0:a0:6d:ce:e5:82:bc:bb:32:82:f2:c9:9c:54:
0c:0b:c4:b0:f9:93:ca:02:de:38:d9:db:10:0b:02:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6A:6A:C3:78:97:4C:63:D8:4F:A6:78:B3:18:17:7B:AE:E3:2D:7F
X509v3 Authority Key Identifier:
keyid:EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cb:80:0d:bc:18:83:0a:ec:77:bc:bd:e5:3a:ad:cd:62:98:
c5:51:a7:59:6b:52:ec:d1:69:63:62:8b:cf:ba:15:aa:4c:03:
80:e9:9e:ac:f8:c6:bc:32:01:ab:0a:51:02:e1:91:ce:c6:87:
35:71:b9:98:93:16:01:95:51:3a:13:b6:cb:cd:c3:0e:4b:2e:
9c:c4:82:e9:74:6c:d6:88:be:14:24:cd:27:09:08:74:b2:39:
cb:6e:40:66:32:e7:a0:12:60:28:22:b2:d3:49:03:34:35:27:
77:7f:0f:d4:81:74:e5:91:63:d3:0d:6f:8d:c1:44:f3:7a:fb:
72:14:c1:0c:99:f5:2a:c6:26:26:d5:e9:49:2c:92:5a:0e:2a:
fd:ca:c3:30:81:a5:52:ed:71:47:46:7d:62:e3:d0:43:b2:cc:
05:7e:a0:fc:61:30:b5:16:63:10:05:a9:62:d9:e1:a8:9c:3b:
ba:29:fd:84:c8:58:01:de:fe:7f:a2:c7:3b:17:36:a1:a2:29:
ba:4d:3d:0a:10:90:c0:7f:bc:37:d4:f9:66:83:5f:f8:d6:e5:
c7:5d:a1:5c:03:ef:e1:aa:e5:39:64:ff:c3:43:85:72:0d:63:
94:46:22:8f:1b:4b:e1:52:3e:21:b4:a0:e8:b9:d0:bf:28:13:
9f:4e:b7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:16:31 2025 by rpki-client