
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
File: 7_vi0INCz7z3p9dOiOvQMeEgItk.mft (raw, json)
Hash identifier: JOd5tZ9/Rq1RG0MQD82w0oxHAL471jcl8H7CxKDgJss=
Subject key identifier: 39:02:C7:D8:6D:B7:95:C5:46:F7:DD:E3:D1:E0:86:4D:FF:D8:2C:64
Authority key identifier: EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
Certificate issuer: /CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Certificate serial: 01969F3F1443C156F3ADD755CE148AB3A248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
Manifest number: 0319
Signing time: Mon 05 May 2025 07:00:33 +0000
Manifest this update: Mon 05 May 2025 07:00:33 +0000
Manifest next update: Tue 06 May 2025 07:00:33 +0000
Files and hashes: 1: 7_vi0INCz7z3p9dOiOvQMeEgItk.crl (hash: p6mKWuWFTkIrEILpmM1yJIQcCxtJHoGrRByGmQe/n/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:14:43:c1:56:f3:ad:d7:55:ce:14:8a:b3:a2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Validity
Not Before: May 5 07:00:33 2025 GMT
Not After : May 6 07:00:33 2025 GMT
Subject: CN=3902c7d86db795c546f7dde3d1e0864dffd82c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:91:13:9b:18:b1:03:1d:78:4f:95:c8:c4:50:
91:19:8c:43:16:f0:90:a8:d5:17:24:04:86:34:07:
99:6c:e2:93:f6:fe:5a:7f:9a:3e:c0:ab:3f:d0:af:
9c:69:9e:2b:65:79:f2:14:28:41:79:c7:20:d7:9d:
84:a3:5b:c4:80:b5:ad:f4:a1:e1:92:9a:0b:19:d7:
5e:85:8d:f0:c8:a6:80:ae:a0:f2:d2:7a:f8:f3:80:
70:7e:c9:f2:a8:1d:8c:fe:06:56:59:52:14:71:46:
6d:23:bf:c6:f3:d2:34:5d:c9:81:fc:e0:97:bd:73:
af:04:7f:29:af:af:fa:64:fe:e2:32:9b:4f:20:28:
19:4b:8d:65:2a:da:bc:75:ea:a0:8a:65:ac:24:d8:
bc:60:bc:ff:34:3f:b3:3f:95:2c:9a:69:7c:20:bb:
e8:91:07:c2:1c:4f:91:e1:ba:36:bf:6d:56:a7:21:
44:e2:70:ac:ce:d6:64:4c:b4:ca:f5:07:60:9d:85:
62:f1:bc:f6:2e:c4:41:9e:07:35:ef:c1:4c:27:54:
d5:17:0a:1f:cb:39:36:32:98:8a:54:67:cd:54:43:
b6:fa:a7:ba:ca:bf:43:b1:a2:76:c5:a3:a7:56:96:
b0:00:bb:e7:05:47:ef:21:6c:01:dc:ae:2b:5c:92:
26:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:02:C7:D8:6D:B7:95:C5:46:F7:DD:E3:D1:E0:86:4D:FF:D8:2C:64
X509v3 Authority Key Identifier:
keyid:EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:b9:58:83:64:96:c5:ab:dc:fb:2e:38:d5:f0:fe:62:38:ae:
a7:ec:22:79:ea:32:fb:02:15:dc:91:d6:97:62:cb:0d:13:d7:
42:91:27:84:0a:61:de:72:23:46:c2:ec:fd:d2:7d:36:95:36:
aa:08:85:29:01:18:4b:36:5e:94:71:5d:36:3e:f7:39:b1:9a:
fe:2a:cc:1a:57:fd:68:17:93:05:71:a6:48:a1:99:9a:01:80:
3f:2d:d4:4d:90:8f:38:c3:9e:0b:64:a5:95:46:78:c7:d7:85:
47:7a:9e:b2:6f:06:9f:29:40:cc:25:c7:74:97:9b:21:71:58:
ad:e8:f5:6f:f5:e6:d4:b3:0a:64:81:00:36:5d:06:49:ae:fd:
5f:0a:57:49:37:6a:f6:c8:c4:8f:b4:11:ab:dc:d5:09:2f:0a:
e6:19:34:b3:ad:d8:89:e3:ac:c9:59:79:ec:c9:1e:52:b5:3c:
c9:83:ad:61:64:d6:0a:a5:2c:4a:0f:1a:ee:4c:40:3f:f0:70:
2e:03:21:80:4d:69:20:3f:90:57:7f:43:c1:f2:95:7c:ee:21:
77:99:0d:fd:a4:bd:23:6d:32:49:5b:23:8c:5f:31:9d:fd:db:
9a:7c:60:ad:6b:d2:91:15:c1:75:ae:e4:48:3e:fe:e4:4b:72:
60:05:58:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:23:16 2025 by rpki-client