Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
File: 7eXtRX90OCqO0LevaG4a2yk1IlA.mft (raw, json)
Hash identifier: XVPRqZuDnj/eIZltJoYpHoxdI19WSXOOk1m+TDSiGy8=
Subject key identifier: 49:C0:3A:4C:15:69:DF:EE:79:7C:5A:FD:71:71:89:0B:12:EB:05:56
Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
Certificate issuer: /CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Certificate serial: 0196586F8C500580C30D1977CB7E0193C370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
Manifest number: 0E97
Signing time: Mon 21 Apr 2025 13:00:27 +0000
Manifest this update: Mon 21 Apr 2025 13:00:27 +0000
Manifest next update: Tue 22 Apr 2025 13:00:27 +0000
Files and hashes: 1: 7eXtRX90OCqO0LevaG4a2yk1IlA.crl (hash: s4ms2HjZRrZ+oQLThrPKMJVM59kZ8FlOzWHqvr84GtY=)
2: YLm4c9_z6td3es7pEFKKfhsrqrQ.roa (hash: 3Gz8tlN20buPuiUO6QyV1TDNEzqFPjpr4haLDRM/ql0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:8c:50:05:80:c3:0d:19:77:cb:7e:01:93:c3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Validity
Not Before: Apr 21 13:00:27 2025 GMT
Not After : Apr 22 13:00:27 2025 GMT
Subject: CN=49c03a4c1569dfee797c5afd7171890b12eb0556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:d4:1e:78:57:1e:7a:c4:a5:d2:46:8b:42:
59:8c:7a:50:ec:0b:51:3c:b3:a0:9c:97:4a:ba:19:
90:4b:71:f6:b2:b6:d0:23:7b:44:8f:28:b4:cc:9a:
2b:7e:24:59:eb:02:a7:a7:df:67:2e:fd:3d:63:0f:
df:85:d3:a9:1c:cb:60:d4:5e:ef:a8:de:1d:9a:c7:
71:f6:61:4b:96:77:7c:12:a0:9e:45:58:cf:9c:2f:
4c:1d:d4:60:1a:fc:7a:37:c8:3e:ba:b1:a1:64:94:
ca:50:a6:89:06:61:c5:94:8b:5b:a6:ef:98:08:8e:
cf:d4:99:91:0e:c9:31:65:14:99:2e:b3:d4:30:34:
7a:52:5f:ee:80:5c:23:fa:fd:96:33:d8:a3:14:ed:
d6:21:ac:f0:95:03:1a:e7:7b:85:d0:52:3e:57:be:
e0:e5:63:c9:25:4b:f2:48:13:8c:7b:7f:ac:73:72:
c1:c5:ef:e4:7e:3b:a8:08:e3:cd:26:1d:be:0d:85:
18:b4:63:40:1c:ec:cf:14:38:5b:d0:ad:59:54:c3:
21:60:e5:3a:ae:9f:ab:2d:46:e7:f4:e3:49:78:7b:
8e:e7:f9:a4:e8:e7:98:93:84:40:05:e0:ea:8c:92:
51:f2:2f:e3:a3:68:0b:20:61:2e:14:e4:25:92:e5:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C0:3A:4C:15:69:DF:EE:79:7C:5A:FD:71:71:89:0B:12:EB:05:56
X509v3 Authority Key Identifier:
keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:46:ac:fa:8f:0b:7a:65:1c:23:17:2a:da:13:a9:dc:e8:07:
ef:b2:d7:9b:ed:d3:6a:96:34:3f:46:6d:8f:31:7b:dc:ae:3d:
69:ba:8f:16:34:43:93:13:85:ed:45:50:9f:71:ba:e3:e4:23:
bb:9d:8e:0e:b3:2a:56:ad:b6:d1:5d:c1:17:32:73:c0:3a:2d:
bd:f3:5a:11:d5:db:17:59:14:a6:d5:23:2a:67:8f:f6:06:02:
a6:eb:2b:64:4c:21:dc:fa:3e:ea:d3:1d:0f:e8:d1:68:4f:a1:
64:05:09:d7:f1:c2:81:70:50:ec:7a:ba:a6:66:37:77:cd:b3:
1f:28:9f:41:ea:5a:3a:c3:37:c9:2f:7b:fd:b2:bd:36:b5:a1:
64:cf:a5:3e:a0:e1:7e:c7:19:1e:bf:90:34:a5:b2:99:97:6d:
2d:23:b8:92:06:69:2c:09:3d:a8:37:71:6b:b5:5f:fd:98:f3:
2c:93:d9:15:80:b2:a7:5e:73:f7:77:50:b1:eb:ee:25:c6:e7:
95:a7:3a:c5:8a:70:2a:b8:19:25:5c:c7:af:80:48:ee:2a:25:
99:37:20:8a:63:ae:93:c5:85:fa:df:ea:32:f3:8a:e8:9d:a8:
a9:79:dc:c7:37:95:6f:b7:19:6d:dd:0c:30:6e:b4:9e:38:3b:
a4:72:e7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:59 2025 by rpki-client