Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
File: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft (raw, json)
Hash identifier: ArAJbYzMJIgTWutaJeSWaaAA4wXaF1YIez57uC0hAs8=
Subject key identifier: D5:27:3F:01:40:04:27:DE:27:54:6B:32:A5:50:A5:DD:0C:23:CA:6D
Authority key identifier: EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
Certificate issuer: /CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Certificate serial: 01965613168A2D0DF129FCB7F7B785484280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
Manifest number: 045B
Signing time: Mon 21 Apr 2025 02:00:13 +0000
Manifest this update: Mon 21 Apr 2025 02:00:13 +0000
Manifest next update: Tue 22 Apr 2025 02:00:13 +0000
Files and hashes: 1: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl (hash: 6hesgvakW6CUz0A2u71o/+dvrAoVI75dgCsogqhfx04=)
2: eVimXbeUG-mEaqJ8wWvzirp1aiE.roa (hash: O9VHdGh9iSLdn0Tv56KJfU/KKXIBvl+hkZsad3bOt5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:16:8a:2d:0d:f1:29:fc:b7:f7:b7:85:48:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Validity
Not Before: Apr 21 02:00:13 2025 GMT
Not After : Apr 22 02:00:13 2025 GMT
Subject: CN=d5273f01400427de27546b32a550a5dd0c23ca6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:57:50:63:03:ee:6b:68:bc:2b:f3:02:34:
a6:ad:e8:dc:38:c2:da:17:9f:5c:13:8c:d8:10:2d:
f6:dd:f6:fe:c8:32:49:1e:8d:c8:b3:0e:9b:11:dd:
96:bf:5c:98:42:22:7a:a6:3d:ae:75:cf:0f:5e:29:
f0:d8:db:9f:b2:28:dc:c2:de:0c:0f:18:de:0b:71:
34:6d:7a:10:87:93:c5:98:99:af:e3:23:cf:3d:f2:
d4:ef:4e:1e:2f:61:ea:9e:4d:20:f0:c8:e4:c7:cd:
6b:91:ce:21:6d:40:85:3e:51:0b:46:44:ec:11:31:
d7:83:50:f8:d6:1d:0b:c2:0e:d5:e4:37:19:fc:30:
df:98:42:c6:02:d1:aa:c9:07:0e:82:88:e4:40:1e:
e5:dc:ef:9e:e5:af:61:ce:7c:05:f7:55:f9:90:1a:
ad:84:36:ec:7d:ea:5f:7c:aa:ef:45:97:79:64:cb:
f6:52:b6:57:12:9e:e8:c4:84:30:c5:a4:bd:4b:66:
76:4a:47:d7:5f:d3:d5:d8:ee:71:c7:a2:5f:f5:19:
2b:ef:47:70:0a:ea:b6:43:bf:e5:b1:0b:93:25:0b:
41:c5:d7:8a:9f:71:66:e4:f0:e2:09:30:1e:e1:7a:
5c:8b:f0:b8:5b:77:c3:49:9c:01:e5:92:be:96:41:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:27:3F:01:40:04:27:DE:27:54:6B:32:A5:50:A5:DD:0C:23:CA:6D
X509v3 Authority Key Identifier:
keyid:EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4f:a6:4e:de:1a:2b:3d:5a:8b:7b:f4:a9:d8:47:3d:f6:5e:
6c:fa:fc:7c:24:84:e8:d9:32:4a:77:28:36:f4:60:c5:67:1c:
57:9f:28:d1:27:50:27:61:db:60:6f:72:6f:a0:83:98:84:fa:
84:75:13:36:32:04:dd:af:63:05:fa:af:9c:59:5a:8c:43:c0:
b7:2b:c1:ec:43:a2:f3:9f:7c:75:14:2c:38:11:a3:5e:6c:b3:
e0:ef:0f:29:9b:a4:57:95:e9:d9:ee:e2:5c:af:87:78:0f:32:
c5:73:1c:5f:58:2c:63:50:6f:55:dc:b0:70:4c:85:b2:1c:64:
d5:8f:2a:c3:48:4e:ca:b6:58:4f:99:f4:dd:05:d1:16:5d:9a:
0e:7b:94:5f:8b:56:6d:cc:7c:5f:91:b6:19:a0:1d:6d:67:e6:
2f:90:7a:4d:d8:44:cc:2f:49:7e:c7:2f:9f:40:00:5c:81:a8:
4c:94:5b:42:b1:e7:77:7c:63:42:a7:45:e6:cc:3e:41:a2:3f:
5c:c2:f5:3c:f6:31:1f:47:ae:ca:21:36:59:6a:34:4a:9c:0e:
be:17:63:95:32:58:a2:1e:cf:39:cf:84:09:b7:d4:44:b3:67:
c7:e5:3a:3d:08:07:f1:9b:4e:6c:4c:51:50:da:0b:4c:38:2d:
d8:53:0b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:45:19 2025 by rpki-client