Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
File: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft (raw, json)
Hash identifier: fIJan7eE1rladPQDi/YTaTF5OWV4oL6zNgqPUEMzr8A=
Subject key identifier: 5A:A5:64:16:51:DA:8F:31:F1:24:E1:D4:27:D7:81:51:68:20:6C:9E
Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
Certificate issuer: /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Certificate serial: 01964FA3390D920F9B7B16B6ED674E6FC2E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
Manifest number: 1365
Signing time: Sat 19 Apr 2025 20:00:19 +0000
Manifest this update: Sat 19 Apr 2025 20:00:19 +0000
Manifest next update: Sun 20 Apr 2025 20:00:19 +0000
Files and hashes: 1: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl (hash: gZh9golVauVxg+cSIpSgSsGNOFB7fMlmWj3j46tXKHM=)
2: UXcHNRDTyy3PiUqS2xFpW1tKLYo.roa (hash: BltR1oVh4LzI1B9mL1LTvil5PzPzPEDEKGPAhFkqH3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:39:0d:92:0f:9b:7b:16:b6:ed:67:4e:6f:c2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Validity
Not Before: Apr 19 20:00:19 2025 GMT
Not After : Apr 20 20:00:19 2025 GMT
Subject: CN=5aa5641651da8f31f124e1d427d7815168206c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:b8:49:2b:5f:b0:8f:76:44:cb:2a:0a:2f:
21:93:5d:2b:75:13:5f:49:5d:99:8f:a4:f9:26:d2:
98:ce:97:9c:b9:e5:e0:5d:d6:dd:13:be:b6:f7:32:
9c:c1:ea:96:11:4f:9a:e2:c6:aa:2d:17:4e:ea:b9:
2b:5e:e7:71:ea:31:68:b6:e6:ff:14:73:c2:ce:e2:
73:92:ce:ae:cb:7f:c7:cb:7b:21:e3:27:60:8a:b7:
52:21:f7:4d:53:b3:19:56:bd:62:f4:ea:39:04:2a:
14:f3:2a:9d:01:5f:a2:76:c1:d7:e0:37:df:ba:db:
8a:e3:06:de:06:45:5f:34:27:4c:52:e5:d8:27:5b:
92:92:10:f6:49:a8:68:3e:65:fb:8b:9e:cf:a0:a9:
23:d5:37:2c:d1:6d:1f:cb:7d:0d:16:c6:6a:e1:f2:
91:db:63:f2:42:78:fa:8d:25:de:ce:8d:e9:c1:9c:
51:b5:d6:77:aa:95:cc:37:87:38:23:18:34:49:a5:
53:e8:e3:6a:c9:7f:f9:10:c5:9f:3c:0c:39:1a:b9:
db:af:01:9a:9f:fc:b3:c3:43:79:85:d5:bf:d9:bf:
e8:70:87:e0:e4:29:52:fa:6d:d4:83:28:c5:6c:aa:
cd:61:42:7b:da:17:2f:67:9b:0e:d8:25:59:17:73:
81:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A5:64:16:51:DA:8F:31:F1:24:E1:D4:27:D7:81:51:68:20:6C:9E
X509v3 Authority Key Identifier:
keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2b:fd:26:7f:f6:6e:7b:24:25:62:67:9c:f4:5e:74:71:e5:
2a:09:6c:e6:cf:94:f3:11:30:c3:4e:76:36:0e:6d:d0:1b:55:
73:7c:53:6e:bb:75:02:e8:4c:d5:0c:db:56:18:57:26:50:30:
c0:ae:c4:c3:57:fb:07:eb:0b:3f:05:00:13:f2:64:9a:88:46:
67:00:14:22:0d:6d:b9:12:78:c6:8b:59:c3:a7:28:51:cc:47:
39:e5:3d:b7:d6:02:be:a7:e2:7a:a8:b6:e5:c7:fd:28:84:ef:
78:66:6c:a1:87:fa:e9:b3:18:db:b5:33:5c:2e:9e:59:33:36:
53:74:7f:71:0c:7a:3d:61:6c:4b:b8:e7:cb:3d:18:e4:c9:63:
46:21:24:71:54:f5:64:21:2e:0a:b9:48:7f:b4:5b:cb:85:19:
1d:4f:51:4e:ca:cd:99:09:8a:26:2c:5b:72:b3:9f:c6:48:82:
1c:e2:28:b3:96:a7:ac:11:c2:59:2c:40:67:52:29:36:01:eb:
7f:b5:70:ff:0c:9c:ce:f6:3e:2a:80:e3:9f:7a:4d:fe:8d:f0:
2d:93:65:de:0d:51:ab:86:23:34:0d:9c:10:fe:b7:7d:43:d4:
69:33:6e:3e:3a:2e:04:de:3c:e2:e5:d9:d4:1e:d2:1a:81:af:
b6:2e:3c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:25 2025 by rpki-client