Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
File: 7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json)
Hash identifier: QM7dayL9bFunR7D65snpE/ZnjC6nHnngskAQInA7/KQ=
Subject key identifier: FA:BF:9E:FB:BB:A2:9B:5F:C1:09:FA:25:6D:75:91:B4:B6:05:6C:30
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial: 0196C20276392F93D7942305B6AD80B07B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
Manifest number: 0A91
Signing time: Mon 12 May 2025 01:01:03 +0000
Manifest this update: Mon 12 May 2025 01:01:03 +0000
Manifest next update: Tue 13 May 2025 01:01:03 +0000
Files and hashes: 1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: fCjyUpG8KQV5yp0lyPB23x7Ai5MX58QoSdBC4zn2n+U=)
2: sQ3JYG1qE-VbpJkkUv7gjERWISw.roa (hash: Eu9amXI9PIYJvHJFlrP4Ds55UyoCv7usyPM4xlXYBx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:76:39:2f:93:d7:94:23:05:b6:ad:80:b0:7b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
Validity
Not Before: May 12 01:01:03 2025 GMT
Not After : May 13 01:01:03 2025 GMT
Subject: CN=fabf9efbbba29b5fc109fa256d7591b4b6056c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:29:fe:e0:62:68:e3:43:c7:bc:bd:7b:25:
58:43:83:1e:32:27:d8:3d:41:b3:ea:ab:19:12:b7:
f0:c1:86:ae:93:55:e1:fb:0a:54:fd:1d:7a:5d:a6:
aa:22:68:ff:d6:10:33:89:b3:46:fe:1f:cc:d4:4a:
64:9e:36:66:a1:ad:5e:bb:f3:70:3f:d4:7f:b9:92:
fe:a4:cc:bf:b1:f9:00:4d:51:39:0a:10:02:30:cc:
ab:e5:53:2b:82:f4:0f:f9:70:6e:de:60:81:db:f9:
4e:1a:ac:d0:52:de:6c:cf:55:91:e1:5f:67:0e:d4:
b1:3d:e2:38:37:78:a1:9c:3d:cf:bb:1b:43:ca:07:
a5:f9:f4:e3:52:c0:11:3d:2e:d5:f5:ef:32:1b:71:
29:c4:d7:ac:3b:47:d0:3f:43:33:32:21:15:7f:64:
4c:0b:0f:32:f3:60:4f:01:36:92:41:a2:75:7c:b4:
ac:28:71:d3:50:3e:28:08:ab:a9:d3:ae:1d:74:57:
d5:2b:1a:69:b3:15:e6:ef:d6:aa:73:1e:47:a1:cb:
6d:80:d6:eb:ad:2f:fe:36:3d:77:63:3e:df:cd:68:
31:c3:b6:1a:80:47:70:85:79:2c:36:41:dc:8a:a4:
cd:00:24:3d:91:bb:c9:a4:99:32:00:51:cf:37:a9:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BF:9E:FB:BB:A2:9B:5F:C1:09:FA:25:6D:75:91:B4:B6:05:6C:30
X509v3 Authority Key Identifier:
keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:24:33:30:8c:2a:f5:26:ce:19:af:3d:83:ef:5c:97:e9:28:
eb:08:19:aa:08:af:6a:86:67:bc:4b:1c:47:b6:b9:0f:16:1e:
d4:b5:c4:2b:ea:fa:15:1e:f0:f0:9b:ee:44:b8:d5:aa:fd:72:
f3:6a:e7:da:3b:0c:7e:c9:d9:e4:c6:be:7b:8d:5b:1f:a9:46:
4d:34:04:de:32:77:74:f6:21:e4:cc:a4:54:fe:8d:32:3f:1b:
bc:ee:e2:55:b0:03:3e:33:ed:ec:76:72:b1:d9:63:f4:c1:50:
8d:20:bc:70:9a:fe:36:3a:d0:50:c9:52:8f:9d:5d:4b:f0:89:
2d:32:96:a7:49:dc:09:73:41:00:a7:64:e5:2d:fa:19:d1:82:
c8:0c:63:ba:3f:65:97:57:30:c2:e0:0d:e3:4f:90:d2:f6:f0:
b2:ce:a3:d3:43:e2:91:0c:8f:86:89:31:49:25:c2:48:b6:bb:
c2:5a:9d:17:8c:a6:d4:20:aa:33:2b:21:46:38:f6:71:b7:bb:
ea:b4:a5:eb:39:3f:55:b1:80:63:21:81:ac:87:44:de:6a:cf:
bc:c8:4d:99:1a:30:64:5d:5f:b8:66:8d:87:f0:89:37:62:41:
57:26:71:39:d9:da:89:85:f1:32:bc:bf:89:2f:b7:ae:1c:a5:
83:8f:c4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:41:20 2025 by rpki-client