Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
File: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft (raw, json)
Hash identifier: I5Kc771hSMDkXdV10UoIrYsl2P40tUZyeoX8s2B3QJw=
Subject key identifier: A6:85:08:CB:F4:7F:7E:9B:F5:82:B8:82:F7:ED:52:53:3E:00:17:26
Authority key identifier: EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
Certificate issuer: /CN=ef1e225614c65ce2cf5275eb464334395c06f430
Certificate serial: 019650484146EF037B3F8D622A53AB5398E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
Manifest number: 148C
Signing time: Sat 19 Apr 2025 23:00:34 +0000
Manifest this update: Sat 19 Apr 2025 23:00:34 +0000
Manifest next update: Sun 20 Apr 2025 23:00:34 +0000
Files and hashes: 1: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl (hash: Stc0deuvH2HAePXJ6CDPV6bEncVOkHRNwgIBvz5YgtI=)
2: kr-CQEDCmSYwuOSJOe0IGac-Ph4.roa (hash: wykL6q5xBW3wpH/kqH9sAqNTf3knNHNn6bzejjuBpOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:41:46:ef:03:7b:3f:8d:62:2a:53:ab:53:98:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1e225614c65ce2cf5275eb464334395c06f430
Validity
Not Before: Apr 19 23:00:34 2025 GMT
Not After : Apr 20 23:00:34 2025 GMT
Subject: CN=a68508cbf47f7e9bf582b882f7ed52533e001726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:25:e2:ae:c1:55:b5:df:65:e5:2b:b8:90:
31:b3:4c:12:a8:f0:ed:5b:f5:f6:9b:8c:f1:06:8c:
c1:bf:62:38:a0:2d:ae:79:2a:1f:56:53:0f:01:92:
1c:cc:42:94:43:79:66:e6:37:d9:c8:d2:ac:92:56:
3a:29:0a:7e:a0:7e:af:3f:85:38:1d:99:2d:16:26:
b6:2c:2f:3e:0a:b4:d1:c3:6e:56:e5:57:72:b8:96:
53:4c:75:cb:fb:22:f9:7a:66:2f:50:e7:75:9e:52:
60:56:cf:9c:39:cf:33:53:3d:65:04:88:68:e9:96:
c9:5e:00:c8:24:0e:00:cf:3e:8a:32:f5:b5:cc:da:
8d:f1:a4:d4:c3:3a:b2:1a:f4:a3:ba:aa:7f:4c:a0:
91:fb:f9:61:7e:f3:00:93:8f:6e:a3:40:3c:e0:93:
e1:e9:e5:10:02:0b:61:65:62:e6:e7:61:8e:d6:0d:
ab:c5:b7:22:95:e1:2f:76:36:36:17:b2:2a:24:22:
b1:8b:2c:af:cc:2c:86:50:f5:8e:47:28:ee:0f:a9:
22:fa:1d:9a:f6:4a:ee:1d:61:66:7e:81:68:ca:68:
c9:35:f4:09:41:22:5b:e6:1f:e5:40:e0:91:2d:92:
df:fb:c4:0f:d0:69:57:3f:63:35:c9:1c:ee:e8:fc:
55:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:85:08:CB:F4:7F:7E:9B:F5:82:B8:82:F7:ED:52:53:3E:00:17:26
X509v3 Authority Key Identifier:
keyid:EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:80:fd:4b:a9:f3:30:1e:7a:37:bb:5f:e6:cf:6a:f1:f6:71:
98:c8:9b:3e:b6:e0:10:a1:c2:0e:92:f5:a8:fa:45:cc:d3:7a:
53:16:9f:82:22:fe:32:6b:40:28:1f:6e:6c:8f:9f:26:06:21:
02:4c:1f:79:e2:d7:c4:64:7d:49:10:b0:25:bf:de:30:e7:dc:
9b:e6:02:8f:64:91:63:78:35:e4:79:37:31:62:57:aa:93:2b:
90:74:58:b1:1c:6e:d2:8e:aa:b4:3c:a0:8b:ff:00:a1:76:8a:
bd:48:f3:6e:37:84:b8:9a:9e:b1:19:9b:ab:ba:7c:49:ce:33:
f0:b0:c5:b4:0d:df:6c:4e:76:e7:66:df:3e:d5:b8:0f:88:b1:
9a:87:72:8c:45:ba:6d:8a:11:66:c2:ba:97:fb:ea:bc:e0:c1:
6e:f4:54:27:27:c8:2f:62:14:ab:56:62:c0:0a:29:71:d3:d1:
2a:8a:45:9b:51:8b:5d:18:96:cc:6a:03:da:10:c1:d9:29:23:
79:1c:b7:e4:08:af:d6:4d:8c:aa:d2:c9:2c:2a:f8:a5:7d:46:
b2:0f:1d:f4:b6:d4:d0:89:18:93:ec:20:fc:4e:dd:57:a0:cd:
03:06:a9:90:5a:47:b9:e6:c3:ae:7b:27:67:be:6e:66:69:ef:
c7:3a:7f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:37 2025 by rpki-client