Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
File: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft (raw, json)
Hash identifier: woU8mr432+kJe9fXTK3pB3WsDQ54zQOSL3l1Sz49V4k=
Subject key identifier: A2:9E:C2:72:B8:DF:B3:7F:5B:E8:9C:9E:E9:C5:F2:68:03:95:4D:D4
Authority key identifier: ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
Certificate issuer: /CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Certificate serial: 019510C6FEE48CFC04352D2D02E5F48B1E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
Manifest number: 07DE
Signing time: Sun 16 Feb 2025 22:00:31 +0000
Manifest this update: Sun 16 Feb 2025 22:00:31 +0000
Manifest next update: Mon 17 Feb 2025 22:00:31 +0000
Files and hashes: 1: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl (hash: DbrigkgjsXKuRmMm0HeafapOXbpZhp+vB513RBoklAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:fe:e4:8c:fc:04:35:2d:2d:02:e5:f4:8b:1e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Validity
Not Before: Feb 16 22:00:31 2025 GMT
Not After : Feb 17 22:00:31 2025 GMT
Subject: CN=a29ec272b8dfb37f5be89c9ee9c5f26803954dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ea:69:43:c8:70:94:d1:ab:af:9b:f5:91:00:
56:a5:24:91:70:17:ad:11:70:46:8a:a8:7c:89:0d:
3d:ba:51:be:76:08:1e:dc:08:82:98:01:18:44:d6:
6d:d2:f2:69:6b:47:41:bc:18:39:ab:0f:02:5a:9d:
fe:4e:f3:b3:39:b2:c6:4d:da:28:f2:0d:b5:4c:f0:
67:0f:f1:a6:02:02:58:36:61:ea:91:71:9b:cc:fb:
3b:e5:9e:68:38:00:10:cd:dd:f0:97:b1:74:08:de:
53:39:6b:4c:72:6f:39:3e:67:75:b5:60:d6:49:6f:
05:69:d5:4b:6d:97:22:0f:90:45:ea:1a:9e:4a:83:
5b:5c:de:c6:14:95:d3:f3:f6:68:e2:de:9f:e2:e7:
f6:cd:86:b3:6c:ce:42:bb:15:07:ac:e7:97:ae:d4:
3f:6a:d2:ce:e4:c7:5e:4d:14:83:68:be:6a:37:53:
76:84:c0:b5:ec:ec:fd:05:b7:f0:a6:ca:4c:4c:d8:
27:be:6f:96:db:5d:8f:da:a1:31:93:82:ae:2a:01:
20:bd:6f:13:f0:e0:53:dc:a7:9e:73:f0:ea:13:a3:
0d:14:37:bf:ef:77:5c:66:92:f9:e4:84:32:a2:20:
b3:76:b6:aa:06:c7:cb:3a:48:07:40:db:df:34:cf:
d9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9E:C2:72:B8:DF:B3:7F:5B:E8:9C:9E:E9:C5:F2:68:03:95:4D:D4
X509v3 Authority Key Identifier:
keyid:ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b8:1b:7a:c5:e4:a2:5b:ce:2c:40:08:18:53:74:b2:18:ec:
a5:48:5e:4c:0a:75:32:c9:51:ab:62:0d:e1:7e:53:96:6c:36:
a1:76:6f:48:ec:af:86:7b:a2:ab:72:ed:26:aa:0b:a2:6d:af:
53:5d:fe:50:36:20:7f:e1:48:a5:ca:32:89:8a:59:74:51:05:
ce:32:83:bf:30:a8:66:e6:ed:b5:2c:a6:5e:82:8a:6c:c0:88:
c9:79:be:dc:93:13:17:c5:a4:18:53:71:7f:eb:70:ff:9c:89:
fc:c4:b3:35:c4:83:d1:3c:dd:f1:62:fc:a2:78:c1:0b:97:dd:
d3:52:7f:54:88:18:be:87:fd:10:d4:15:11:32:fc:c4:14:74:
9b:5e:59:ec:1a:d3:2a:db:f8:99:e7:69:d9:58:c2:1f:a9:2e:
22:c1:b8:2d:41:5d:ac:82:40:42:3b:53:80:b1:81:f4:fd:21:
ae:ef:2c:08:33:66:74:f2:c3:de:48:7c:3e:01:8d:9e:e8:f5:
94:9e:4f:14:04:71:f0:97:17:52:fb:f1:3d:68:a8:3a:e7:5e:
0c:96:e4:2d:bd:e4:af:d8:d8:d3:06:1c:f2:d0:41:9e:c2:fe:
f2:f3:b3:f7:89:a4:60:52:b5:b5:86:4c:3c:2b:48:a8:3c:4e:
c2:c4:22:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxv7kjPwENS0tAuX0ix5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZDk3ZjYwNzhkMjJlODJmZDNkMDRhZWM1ZDY3MjE3MTUy
NTZmMTYwHhcNMjUwMjE2MjIwMDMxWhcNMjUwMjE3MjIwMDMxWjAzMTEwLwYDVQQD
EyhhMjllYzI3MmI4ZGZiMzdmNWJlODljOWVlOWM1ZjI2ODAzOTU0ZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uppQ8hwlNGrr5v1kQBWpSSRcBet
EXBGiqh8iQ09ulG+dgge3AiCmAEYRNZt0vJpa0dBvBg5qw8CWp3+TvOzObLGTdoo
8g21TPBnD/GmAgJYNmHqkXGbzPs75Z5oOAAQzd3wl7F0CN5TOWtMcm85Pmd1tWDW
SW8FadVLbZciD5BF6hqeSoNbXN7GFJXT8/Zo4t6f4uf2zYazbM5CuxUHrOeXrtQ/
atLO5MdeTRSDaL5qN1N2hMC17Oz9BbfwpspMTNgnvm+W212P2qExk4KuKgEgvW8T
8OBT3Keec/DqE6MNFDe/73dcZpL55IQyoiCzdraqBsfLOkgHQNvfNM/ZTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKewnK437N/W+icnunF8mgDlU3UMB8GA1UdIwQY
MBaAFO3Zf2B40i6C/T0ErsXWchcVJW8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2RsX1lIalNMb0w5UFFTdXhkWnlGeFVsYnhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zYWNkZDQtNzNjYi00MWVlLWIwNTIt
NGZhZGFkMDg1ODIzLzEvN2RsX1lIalNMb0w5UFFTdXhkWnlGeFVsYnhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8zYWNkZDQtNzNjYi00MWVlLWIwNTItNGZhZGFkMDg1ODIz
LzEvN2RsX1lIalNMb0w5UFFTdXhkWnlGeFVsYnhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrgbesXk
olvOLEAIGFN0shjspUheTAp1MslRq2IN4X5Tlmw2oXZvSOyvhnuiq3LtJqoLom2v
U13+UDYgf+FIpcoyiYpZdFEFzjKDvzCoZubttSymXoKKbMCIyXm+3JMTF8WkGFNx
f+tw/5yJ/MSzNcSD0Tzd8WL8onjBC5fd01J/VIgYvof9ENQVETL8xBR0m15Z7BrT
Ktv4medp2VjCH6kuIsG4LUFdrIJAQjtTgLGB9P0hru8sCDNmdPLD3kh8PgGNnuj1
lJ5PFARx8JcXUvvxPWioOudeDJbkLb3kr9jY0wYc8tBBnsL+8vOz94mkYFK1tYZM
PCtIqDxOwsQiXA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:20 2025 by rpki-client