Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
File: 7xM1mLsQVCEUaB6oajXfFpgxzwM.mft (raw, json)
Hash identifier: gKZAvZjZxidSZpX8UTsmoBkBgd92H7cjgcvY4ff1eVA=
Subject key identifier: 21:DD:64:91:0E:43:8D:4B:07:5C:59:F6:EE:61:6C:31:1F:8F:1F:51
Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
Certificate issuer: /CN=ef133598bb10542114681ea86a35df169831cf03
Certificate serial: 019659820B166875370436D77024797523BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
Manifest number: 0544
Signing time: Mon 21 Apr 2025 18:00:16 +0000
Manifest this update: Mon 21 Apr 2025 18:00:16 +0000
Manifest next update: Tue 22 Apr 2025 18:00:16 +0000
Files and hashes: 1: 7xM1mLsQVCEUaB6oajXfFpgxzwM.crl (hash: BWRNF0dkBQXnkLDjYmuC1yTTMl1XHVxD98cQrv44Ips=)
2: cvihALfmaAmPqfCRAQfCnD556fE.roa (hash: XgTAh5vkPS4VZRIrGpxzNJ/k+9BNaFqmON6ZSIkPh2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:0b:16:68:75:37:04:36:d7:70:24:79:75:23:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef133598bb10542114681ea86a35df169831cf03
Validity
Not Before: Apr 21 18:00:16 2025 GMT
Not After : Apr 22 18:00:16 2025 GMT
Subject: CN=21dd64910e438d4b075c59f6ee616c311f8f1f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5b:17:c7:34:eb:eb:b6:30:66:7d:cd:05:a5:
34:70:1d:57:23:73:e9:16:54:8c:b1:1e:c8:d0:55:
24:d9:bc:4d:a2:1b:15:d2:d1:03:e5:a9:62:c2:77:
f7:99:4f:b8:ed:07:2c:65:3a:6f:2e:2c:09:52:c9:
de:e5:52:fb:d8:7e:d7:05:e2:63:13:f9:71:11:25:
7f:7b:5e:7f:c0:4a:0f:93:3a:44:11:51:f0:35:cd:
8e:4a:f1:c6:e0:0d:71:60:1d:22:ef:6b:1b:d5:3e:
da:db:ea:a7:ea:e6:31:e0:97:28:96:44:76:a6:d0:
27:7c:af:0a:ab:41:d3:89:81:15:8f:4c:05:09:6a:
62:52:22:4b:dc:12:9f:83:3c:46:5d:af:97:32:7e:
69:48:38:0f:a1:3b:3f:39:c4:29:a4:cd:17:e0:ba:
0f:1b:a4:43:49:c1:af:80:17:f9:2e:6c:77:b5:c7:
6a:91:de:6d:61:89:48:00:9c:c4:b9:fe:06:01:d7:
68:76:43:6e:18:db:6e:3d:4d:18:9a:2c:32:9b:8a:
bb:31:51:c2:32:93:44:06:d3:c7:63:68:fa:af:e6:
7b:05:35:52:50:6a:4c:25:f7:2c:7e:fe:0b:03:54:
9b:cb:c8:ff:b2:59:52:8c:47:6f:60:c9:bd:67:2e:
c5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DD:64:91:0E:43:8D:4B:07:5C:59:F6:EE:61:6C:31:1F:8F:1F:51
X509v3 Authority Key Identifier:
keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ac:27:91:1f:e2:c7:0e:47:68:3c:a9:a9:ef:23:08:e6:30:
f9:2c:b6:a3:13:e0:94:94:a5:fa:6a:b1:af:66:c1:00:37:03:
45:af:7d:2a:4b:c6:fb:d5:11:96:5d:c5:9a:96:69:55:e8:f9:
a1:13:43:06:43:5d:ef:a2:22:e5:e9:92:ba:49:e7:9d:01:b3:
73:c8:73:5d:d3:40:87:59:a0:68:1a:0e:e5:1f:d8:77:37:05:
8a:20:a5:7f:36:f7:90:41:88:83:02:a1:1a:00:2e:34:86:f5:
68:28:43:d2:85:c7:1d:ff:25:96:60:6a:97:03:47:2f:f8:03:
4d:ea:ff:39:cb:49:41:41:f8:46:22:12:82:5d:f1:3c:ec:5a:
87:86:a0:c1:f1:d9:e7:05:4a:e6:fa:0f:97:64:51:1c:d4:86:
eb:37:ce:64:4a:eb:38:81:9c:f1:e3:48:4d:52:fc:93:03:8c:
09:6d:4e:8b:24:21:b3:8a:72:80:52:b8:1d:c3:0f:3b:ce:f5:
53:5a:a8:9e:26:2b:ad:35:cb:b2:b8:18:6b:e1:fb:5e:fe:30:
26:77:7c:3d:e0:e4:85:6f:bb:c0:d1:35:bc:c7:14:ef:a1:66:
fb:88:4d:98:9d:8a:8d:5b:2b:9a:0a:b7:08:97:e5:7c:b3:62:
20:c4:61:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:25:02 2025 by rpki-client