Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
File: 59CqrsABapJr7tz991g1gVW3G-8.mft (raw, json)
Hash identifier: bmm87GXUME04ohll489M/2KDfBUBTrESrwR4j3j6DWY=
Subject key identifier: 27:93:9C:57:11:4F:06:3E:88:AD:12:EB:3C:80:5F:AB:A1:20:C2:F8
Authority key identifier: E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF
Certificate issuer: /CN=e7d0aaaec0016a926beedcfdf758358155b71bef
Certificate serial: 0196C1CB85E126FDFD1640B7F39DBBA830EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
Manifest number: 07C4
Signing time: Mon 12 May 2025 00:01:02 +0000
Manifest this update: Mon 12 May 2025 00:01:02 +0000
Manifest next update: Tue 13 May 2025 00:01:02 +0000
Files and hashes: 1: 59CqrsABapJr7tz991g1gVW3G-8.crl (hash: W3r5lfWsM+GFfJ3MLgRa6FZGjyc1b7Sa1nu8EqfmoDM=)
2: TWbavJSlzl0yvrhE4VudASOWZFo.roa (hash: ur2N9sV1aoXG7CrT2cW2W2OoDmeobx2g2/VRIr5D2Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:85:e1:26:fd:fd:16:40:b7:f3:9d:bb:a8:30:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d0aaaec0016a926beedcfdf758358155b71bef
Validity
Not Before: May 12 00:01:02 2025 GMT
Not After : May 13 00:01:02 2025 GMT
Subject: CN=27939c57114f063e88ad12eb3c805faba120c2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c2:54:b1:65:ab:6f:ef:90:f0:c1:76:34:1f:
ea:61:6a:88:65:9d:85:cf:43:9f:58:9e:40:eb:41:
3b:74:be:96:aa:be:5f:d3:18:25:92:64:b3:f8:a0:
07:32:eb:8d:06:4d:32:14:17:8b:86:9e:94:da:a7:
60:34:7b:8e:60:ea:69:9d:d9:bc:f5:96:ab:3f:ef:
9a:39:a4:46:40:55:e5:7c:44:67:bc:ca:04:53:89:
01:76:ad:45:83:0e:48:cd:2f:4a:82:4f:fc:20:c7:
da:b6:3c:f1:52:fd:30:6d:ed:45:89:1c:f4:65:38:
41:f3:62:36:17:78:13:67:2b:1b:36:d9:8b:ef:aa:
4a:c2:58:84:4a:c5:89:c4:09:73:66:2d:d0:de:e6:
09:bd:bc:2e:8a:84:da:10:95:06:c7:21:a7:46:ab:
b0:d0:fc:b4:f5:b1:90:78:72:5d:98:4f:49:83:4a:
d4:d2:13:d7:8f:ba:d6:5a:5f:d9:b8:25:ec:96:9e:
53:03:b8:18:23:ce:fc:a7:95:ef:95:b7:e0:ce:c8:
a5:e9:ee:e6:c5:e3:6d:1a:ff:15:21:8f:45:ce:f8:
fb:1d:e4:74:9f:7f:81:90:43:ec:65:f7:84:cd:ea:
1b:18:22:4d:dd:d8:05:ac:42:a7:38:93:13:0c:9e:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:93:9C:57:11:4F:06:3E:88:AD:12:EB:3C:80:5F:AB:A1:20:C2:F8
X509v3 Authority Key Identifier:
keyid:E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:46:fd:b8:30:68:39:d2:f6:d8:e5:2a:0c:9f:e1:40:bb:2b:
2b:3a:98:e3:d7:4f:ff:fc:82:44:83:56:16:3b:ee:49:f0:0b:
c1:0e:3f:05:10:f0:7f:f9:fe:c1:cd:9c:7b:7e:11:a1:b2:2d:
ab:5e:cd:65:8f:44:51:a8:f7:40:e0:59:54:9f:32:4d:ae:86:
e0:77:0f:af:92:c9:d8:ed:31:9c:9c:ee:4b:2f:15:97:e6:e9:
26:46:5a:df:fb:d0:6d:61:22:b6:38:60:d8:b3:20:08:ff:78:
af:ef:29:48:62:32:d9:08:52:f6:61:a0:3f:89:05:ec:15:44:
f2:ab:cf:3c:75:94:1d:21:a9:b4:67:52:1e:78:f4:ed:95:1d:
7a:02:33:c3:7c:ab:85:af:bb:7b:0d:52:02:62:ca:90:6e:97:
53:ba:b1:76:4b:10:84:07:63:86:c1:72:a7:16:7b:b8:cd:5b:
e1:82:1b:3b:f6:0b:65:e7:f6:76:2b:d2:b8:7b:7d:7b:9b:8c:
3d:9b:09:f8:2f:72:a6:be:b0:df:48:f7:85:40:3f:bd:87:f8:
85:c8:d5:5e:37:36:41:7f:ee:36:ac:9e:8f:51:18:7b:cc:79:
f4:ef:45:72:cd:c2:9d:81:5b:a9:ee:e9:e9:40:1c:05:cd:19:
41:4b:ca:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:59:40 2025 by rpki-client