Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
File: i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft (raw, json)
Hash identifier: jwO0MwlB42zb0iLz8i8lpU/kls2YLH9UmbJRdlwXLNs=
Subject key identifier: 5A:33:76:3E:FA:EF:F4:C7:52:60:EA:AF:25:FC:8C:E0:80:64:33:C5
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 0196BE5C57C3FDC46956F9521E9E471A2F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
Manifest number: 1542
Signing time: Sun 11 May 2025 08:00:44 +0000
Manifest this update: Sun 11 May 2025 08:00:44 +0000
Manifest next update: Mon 12 May 2025 08:00:44 +0000
Files and hashes: 1: Z9hqFRirUe4P1_J6cnVrlFkJUwM.roa (hash: 1rB513D+oaDkVMZd5WQl+V38WfLdjvRgbt7ShIhiM3k=)
2: eldr0Gd72QMDJnfB5g3XkvXB5MA.roa (hash: TtEGiXJhnS9J3b71Jc1YsSME+mGa0e8iTuBkAI+Nugs=)
3: i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl (hash: rhyZYrTBuBwp6twKyXrAufmjtfQJ82NtvhF4/+mxt14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:57:c3:fd:c4:69:56:f9:52:1e:9e:47:1a:2f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: May 11 08:00:44 2025 GMT
Not After : May 12 08:00:44 2025 GMT
Subject: CN=5a33763efaeff4c75260eaaf25fc8ce0806433c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:44:ce:7f:ed:b4:b7:35:49:89:7d:34:84:95:
7e:31:90:b5:d0:83:33:0b:89:d3:1b:9d:de:d4:88:
85:4f:68:5d:5f:fa:d9:b2:a9:e3:9f:aa:02:97:da:
74:fd:51:80:21:9e:de:d9:68:65:b3:70:f9:4e:24:
af:64:35:7e:a2:16:fd:01:fc:8f:d4:12:3d:a4:fc:
c7:2c:a3:b0:a7:9d:13:8a:96:15:33:b5:0e:1b:92:
5a:8d:8c:87:1c:0f:00:70:68:ee:ee:24:54:dc:70:
2a:30:64:87:4d:6c:b6:f8:2b:f0:04:eb:7f:61:2b:
d7:86:ba:fc:99:35:af:b0:d6:87:c3:f8:c2:9e:c4:
c6:7e:a2:50:36:9b:99:a0:fb:2d:85:61:16:58:e9:
1f:4e:0b:43:85:66:c5:77:1f:d9:80:c0:4c:59:d4:
61:1f:43:98:a8:da:74:bd:c4:dd:70:ea:d9:33:43:
ba:1a:d6:5b:c0:30:69:7c:d7:9b:80:96:54:b6:7c:
02:0a:7b:a2:43:80:89:3c:fa:34:a8:d4:49:43:13:
fb:7e:5d:85:64:e0:02:4c:fd:44:bc:f3:dd:b0:cd:
00:44:96:dd:dc:22:cf:73:07:ef:d1:84:01:19:9b:
6f:8e:8c:4c:5a:c7:62:17:e6:1c:f4:47:3a:bc:7e:
da:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:33:76:3E:FA:EF:F4:C7:52:60:EA:AF:25:FC:8C:E0:80:64:33:C5
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:89:d9:d4:55:c8:8f:c8:1a:13:41:c1:38:95:ad:a6:d9:df:
73:52:cd:88:5d:aa:12:03:9b:c2:07:c9:1b:57:2a:53:d4:f7:
fe:83:a3:0e:a5:3c:e9:72:6b:ef:7d:75:42:d2:44:38:f2:62:
72:3d:4d:75:b1:a2:dc:9d:77:90:ea:23:05:73:5e:31:c9:04:
de:2d:5c:b6:e2:f9:54:4d:0a:57:74:86:d8:9a:f0:cf:7a:ac:
b7:3e:dd:1e:d8:e0:d8:6c:5e:a5:fc:ff:68:2e:e2:1c:d4:47:
e8:7f:49:ca:2d:68:31:c1:b9:27:75:30:9c:a5:80:83:e1:d4:
d6:37:35:e7:42:43:aa:68:58:e6:4a:fc:48:39:27:d3:93:93:
49:79:3d:c4:36:f4:a5:b6:4d:d4:73:95:2f:7e:e8:f3:73:45:
6f:67:35:9c:5b:da:e5:2f:9e:e8:ab:37:5c:72:31:61:55:c7:
7a:c7:75:2b:ed:a9:dc:56:f0:57:a7:94:b0:bd:48:80:52:69:
d5:3e:a5:5a:2e:47:2a:a3:71:cb:cb:ad:d9:40:8a:32:44:e0:
59:75:64:39:f3:09:ca:d2:8e:d1:4b:e6:93:9c:e4:08:25:82:
5b:96:88:44:86:10:a6:6c:c7:d8:4c:d6:97:da:06:0a:fe:f6:
f8:cb:c1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:32:58 2025 by rpki-client