Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
File: rx7uIsUBU2MRinHSapRj3JN0uig.mft (raw, json)
Hash identifier: UvV0ycu2T63zguO8BhaC0RLVWBax6d31xLnd79xgXgw=
Subject key identifier: D9:C7:A8:E3:70:DF:D4:44:F2:41:DC:DF:61:DB:15:5C:F2:98:AB:22
Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
Certificate issuer: /CN=af1eee22c5015363118a71d26a9463dc9374ba28
Certificate serial: 0196515BDB2FF46C3D1E6C521DF9B5475AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
Manifest number: 08B2
Signing time: Sun 20 Apr 2025 04:01:36 +0000
Manifest this update: Sun 20 Apr 2025 04:01:36 +0000
Manifest next update: Mon 21 Apr 2025 04:01:36 +0000
Files and hashes: 1: rx7uIsUBU2MRinHSapRj3JN0uig.crl (hash: BVaNB+h9L1NjKNSwt5LLA2avwbHOHCLV1qPHPUmUXRE=)
2: vtzVAFS2sSXFMY4pT9LQwpwKXN8.roa (hash: IK29JkUi3ofZEZGY2PidWdMxcE655gfnkWlaKv3tisg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:db:2f:f4:6c:3d:1e:6c:52:1d:f9:b5:47:5a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28
Validity
Not Before: Apr 20 04:01:36 2025 GMT
Not After : Apr 21 04:01:36 2025 GMT
Subject: CN=d9c7a8e370dfd444f241dcdf61db155cf298ab22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:08:76:1d:67:ea:27:ea:68:e6:88:fb:8b:
7a:f6:8d:11:1c:02:48:3e:44:fd:10:3c:a9:28:12:
3b:7f:5e:4c:e3:75:aa:c2:25:5c:ff:4c:47:62:6e:
2e:0f:76:86:27:cc:55:7a:59:cc:5c:9b:eb:4f:c1:
6c:7a:0c:e6:0f:9e:35:4d:a5:3c:c1:59:29:ab:2a:
e2:c1:05:77:51:8c:e3:8f:25:3d:5c:ae:53:45:16:
92:f3:9e:c8:3d:1b:6c:ed:b4:c0:0b:9f:b7:01:d5:
82:93:d8:7e:b1:be:35:25:19:bb:59:e4:72:9a:d0:
06:02:ff:32:9f:ac:18:d3:35:34:14:b7:84:3d:89:
07:93:a9:ed:d6:b9:2c:92:9c:42:87:42:45:a3:40:
c0:3a:1f:de:c7:ef:1f:51:2d:ed:e4:c3:01:ba:ad:
3a:8c:d3:26:6e:12:9b:7b:9e:aa:a4:49:86:89:53:
b3:12:d9:a4:3d:22:75:05:06:7c:1d:3e:12:d8:7e:
6d:95:f7:1a:a0:e7:16:2e:21:e0:cd:ac:d0:7f:1e:
01:53:9e:14:b6:a5:c0:38:da:13:b9:7c:17:ef:4c:
8f:0c:dc:0a:1c:91:d5:4b:b4:eb:a7:10:ea:9d:41:
cb:22:89:a5:d8:5f:0f:38:62:b2:d0:00:a7:93:96:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C7:A8:E3:70:DF:D4:44:F2:41:DC:DF:61:DB:15:5C:F2:98:AB:22
X509v3 Authority Key Identifier:
keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5b:41:68:b6:83:75:2c:b9:e2:4b:61:e3:7e:59:26:89:dd:
6f:8c:8b:e8:b4:97:6f:6a:06:8b:d1:67:85:b7:47:57:6e:59:
c5:9a:23:6b:74:a8:dd:31:95:73:b1:73:24:1d:aa:0c:42:72:
7a:26:8b:00:8c:92:31:8a:49:9f:74:9c:b3:61:98:b8:fe:59:
1b:e0:bf:cd:3b:78:fb:16:d0:61:1c:c5:71:12:8d:a0:84:44:
70:32:71:bf:b5:8a:19:22:b8:6a:79:1e:07:f4:ef:92:ec:69:
62:33:0c:be:6b:1e:a5:a6:cc:e9:a9:34:0c:ab:1c:df:3f:a3:
2f:f5:4e:6f:09:c2:5f:b9:dd:d7:d0:ea:04:05:92:57:fa:0d:
21:4e:91:6b:47:98:39:26:ff:2a:de:62:47:e6:6d:b6:1a:7c:
2f:6f:cb:f7:e5:b4:1d:fb:e3:ac:44:b6:32:d8:43:3f:a1:0e:
e5:3e:96:47:cb:3b:e4:f0:10:53:de:e4:92:25:41:69:af:43:
8d:66:3e:58:1f:f1:3b:f7:ec:76:db:f0:a7:c7:3c:03:5e:b0:
da:9c:bc:04:ad:24:2b:fe:cf:98:61:f5:f5:6d:41:9b:32:c8:
0c:06:21:3f:ab:9c:59:c4:89:6c:e8:45:3c:e1:9e:a7:c7:65:
d8:c7:8d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:13 2025 by rpki-client