Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier: g5SlSQ1krBQ0LkArtwmloGMrFoqLQUlTLDMzLi7OWwc=
Subject key identifier: F7:17:26:3E:B5:E5:87:4C:7C:2A:6A:64:95:83:66:FB:6A:50:CE:DD
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer: /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial: 0196507ED6926DB71C95D6B98C721907ED0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number: 148E
Signing time: Sun 20 Apr 2025 00:00:11 +0000
Manifest this update: Sun 20 Apr 2025 00:00:11 +0000
Manifest next update: Mon 21 Apr 2025 00:00:11 +0000
Files and hashes: 1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: NMFBaRcpEKewJ1xAWsEbQ//g38+l27AGjbeAp2ZGcbo=)
2: J9Y5qrjsI2Qtuq7klk41lQwg1og.roa (hash: NNuL/WZWhtDsn2nhsgr73rvUsNOJxUI43avvh9gIeRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7e:d6:92:6d:b7:1c:95:d6:b9:8c:72:19:07:ed:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
Validity
Not Before: Apr 20 00:00:11 2025 GMT
Not After : Apr 21 00:00:11 2025 GMT
Subject: CN=f717263eb5e5874c7c2a6a64958366fb6a50cedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:7e:38:f2:0d:35:50:37:0f:3d:1e:94:12:
18:2c:98:fb:b0:30:4f:4f:53:07:ef:18:b3:2d:39:
64:2e:11:b5:74:e5:5f:0e:97:9f:ce:51:52:5a:24:
b2:46:31:71:94:bd:a8:9a:0c:05:25:69:6e:0e:d8:
99:aa:e2:3e:77:64:e5:2f:5e:19:c5:11:b9:17:2d:
88:b1:23:b3:ad:00:3b:ce:1a:71:53:17:5e:a1:7d:
ff:39:e6:0f:5e:f1:eb:bb:a9:92:f4:ae:ce:57:62:
bc:6c:3c:2f:24:89:62:30:51:23:4e:a6:28:34:43:
27:ae:c0:ef:80:dd:65:19:42:e3:0c:84:81:1a:10:
07:13:f7:77:25:17:99:ab:94:47:f0:77:ce:6f:93:
01:1d:5f:c9:b5:02:96:34:29:ca:75:c6:e9:a6:d5:
47:bf:9f:7e:ac:ca:04:a2:cc:74:f0:8b:68:3d:7c:
d0:29:19:e2:0e:63:ac:8e:9c:95:65:b9:08:6f:fa:
f3:86:18:2e:12:64:c3:f7:25:b0:3f:07:c7:95:8b:
e9:3f:f2:85:2d:c2:05:1c:ea:f9:82:c1:71:3f:bb:
2c:2c:3c:35:9d:77:eb:97:75:65:c1:1f:4c:18:1a:
b9:86:4c:01:da:4f:7f:02:8a:e8:24:87:20:17:a0:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:17:26:3E:B5:E5:87:4C:7C:2A:6A:64:95:83:66:FB:6A:50:CE:DD
X509v3 Authority Key Identifier:
keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d3:86:fe:9a:09:81:d2:3f:2c:a8:7e:88:92:77:6c:09:16:
d6:f2:9f:7b:2b:ef:e0:a8:73:a4:0a:24:9c:99:4c:97:69:66:
e2:fa:9d:5d:96:d6:7f:b8:3e:26:c1:4f:94:62:fb:b9:b0:fe:
eb:03:9c:3d:d5:2f:89:37:4c:a7:ec:a4:fa:64:87:f0:1b:19:
80:c2:63:9d:f4:96:43:d1:ad:cd:85:36:6e:98:fc:f0:02:68:
62:fb:70:f7:6d:73:c2:39:28:fa:47:be:6c:9e:41:df:eb:72:
ae:1c:6b:23:29:76:0f:b9:8e:e9:de:3b:69:a3:80:b2:0b:2a:
6c:5b:26:af:3d:69:75:81:72:ec:32:05:7c:8a:8d:8c:5a:08:
64:51:c6:25:95:15:88:85:8c:1d:da:ad:d1:5f:1d:d3:82:56:
47:1f:54:b0:e7:22:37:a0:58:0c:c0:13:8f:54:03:b4:15:3c:
58:13:83:56:9b:60:93:0b:80:5b:b1:9c:ca:49:8c:61:a2:0b:
a7:b8:14:78:36:78:42:f8:f1:0f:10:cb:8b:cc:a1:10:3a:c5:
d8:ba:aa:3d:41:22:a7:4a:99:6d:08:37:56:98:1e:38:ce:4a:
56:9d:59:77:a3:07:86:c4:43:36:42:66:9e:9b:3b:fc:85:d4:
ed:77:3f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:37 2025 by rpki-client