Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
File: 7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft (raw, json)
Hash identifier: w5kTl4WgRAsldpevyu8fDutqOFDKs88uT224C5xSY1c=
Subject key identifier: 8C:09:AD:06:38:CA:80:7F:2F:89:30:60:78:AA:D2:A4:66:7F:87:06
Authority key identifier: EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
Certificate issuer: /CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Certificate serial: 01965424DC452BEDE196902FF1A0CE0521D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 17:00:23 +0000
Manifest this update: Sun 20 Apr 2025 17:00:23 +0000
Manifest next update: Mon 21 Apr 2025 17:00:23 +0000
Files and hashes: 1: 7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl (hash: Ne/iom8uGObjDZlNKA1+z7hzxwaVMZQL0/c3XvU3ENY=)
2: 8MaVf5sp5CsTyAhAGLZcOfsaJXw.roa (hash: 1dw+M1Du1swLbJQllbUZmU++FExETkfzODZl6r8vVPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:dc:45:2b:ed:e1:96:90:2f:f1:a0:ce:05:21:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Validity
Not Before: Apr 20 17:00:23 2025 GMT
Not After : Apr 21 17:00:23 2025 GMT
Subject: CN=8c09ad0638ca807f2f89306078aad2a4667f8706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:f4:c5:35:49:3e:7a:a7:73:d4:e6:4b:01:
8d:c5:a6:e3:50:9d:80:26:9d:8f:93:83:b0:b9:6e:
16:48:88:14:18:ad:3e:02:c3:2f:ff:6e:63:ab:63:
39:eb:e7:08:cf:8b:98:78:47:36:22:ec:db:7e:b9:
22:b8:d4:bd:dd:42:ab:c8:b3:54:f6:dd:95:ee:47:
aa:25:7c:a9:33:8e:f7:75:e8:0a:b2:ea:76:20:21:
01:84:ad:aa:43:4a:b2:d6:10:5a:ff:67:87:85:1d:
b4:2b:69:cc:0f:52:11:0c:f6:c0:d8:ce:f4:e2:d7:
37:d4:a5:c5:9d:0a:69:cf:62:30:e2:66:b9:f3:57:
08:b5:95:1f:eb:e1:9d:a6:2f:e6:b4:5e:3b:a4:e2:
f0:77:45:b2:ee:e6:16:9b:d2:45:06:02:ea:2f:14:
78:02:76:34:78:67:22:39:18:b3:bf:8e:fc:27:d5:
35:40:e5:c5:19:18:a8:d9:c1:b4:86:14:97:86:ce:
78:d0:a9:83:07:97:5b:ae:19:64:fd:3a:ed:b9:8d:
32:c0:be:1a:92:1a:5b:6a:e6:15:13:fb:c6:1f:ef:
8a:1a:bf:87:bf:78:f0:50:2a:f1:cb:81:cf:90:e9:
69:ef:c0:50:d8:a7:62:51:65:67:3d:b0:34:51:be:
20:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:09:AD:06:38:CA:80:7F:2F:89:30:60:78:AA:D2:A4:66:7F:87:06
X509v3 Authority Key Identifier:
keyid:EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:91:59:cc:d9:f5:0b:e4:12:63:e2:24:b2:fa:65:7e:c5:79:
e9:1c:0d:2b:62:61:e9:68:16:a8:17:e0:fe:1e:2b:f5:8c:b7:
80:5c:df:72:fa:7b:21:ee:80:0f:6b:ca:c9:02:9f:e9:1e:46:
f3:4a:46:cd:da:b1:3d:f0:6e:23:3d:b2:66:7b:26:94:71:36:
c3:c2:56:85:9b:ec:01:bf:cc:39:ff:18:a3:43:c3:a7:6d:79:
6d:07:39:45:4a:dd:3e:a4:7e:29:f8:00:88:7a:8c:73:58:ec:
82:c0:bd:a6:d3:59:bb:f7:e8:3e:61:5d:99:13:a8:97:a1:f0:
b2:1b:a8:2b:af:7c:af:d1:b6:0a:ba:5d:c1:c2:78:21:60:6b:
70:21:6a:bf:3d:70:13:38:29:12:32:2b:35:87:09:5f:13:59:
1b:c8:5d:4f:b6:14:bd:68:75:84:aa:ac:17:bc:cf:42:0e:73:
df:2d:c0:f4:1c:7d:ac:d0:78:a8:98:5d:63:30:b0:b5:36:08:
e4:d5:a4:eb:68:7d:5f:47:2d:06:80:8c:77:d4:13:c4:ea:09:
b5:7f:bb:1a:27:16:bb:b5:29:81:ab:73:93:ba:ab:72:12:a5:
22:68:b6:13:97:2d:68:f2:61:fc:e4:17:f6:eb:c4:bb:c0:67:
c9:16:be:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:33:20 2025 by rpki-client