Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: m1wDTmI7grbpa/0K23UX+pFVhyIgwk4DYHm92snjmxY=
Subject key identifier: 5F:B0:6B:32:DE:D5:41:8D:C3:AD:6A:E4:E4:19:F5:7B:04:B7:AA:E4
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 0196C570BD40543916E25AF52626B1E60E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 17:00:22 +0000
Manifest this update: Mon 12 May 2025 17:00:22 +0000
Manifest next update: Tue 13 May 2025 17:00:22 +0000
Files and hashes: 1: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: 1I7YwcIoR6yLcgcU/+Rdaug2nf8mEK1H06ZXBTzXQ0s=)
2: QmonITNns_8Q9qn9QpgL_m0jbZY.roa (hash: lePHGLh8RQcKhBsHHefYW0245CnYH1iaj+dz5PW9vD0=)
3: jPA51IVoNgHj7WtWvD3gzuO1ESo.roa (hash: 1OIwLVWMLOnuWB49hstWycn0Dp3PUqU3H2e7UthawGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:bd:40:54:39:16:e2:5a:f5:26:26:b1:e6:0e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: May 12 17:00:22 2025 GMT
Not After : May 13 17:00:22 2025 GMT
Subject: CN=5fb06b32ded5418dc3ad6ae4e419f57b04b7aae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:65:05:15:1c:74:03:12:27:ce:8c:20:87:
a3:46:1c:16:fe:08:90:40:61:6b:fc:f2:a8:64:ae:
67:cd:b1:37:60:28:38:1a:c7:07:63:04:d4:eb:cb:
f1:f7:61:56:a6:c1:e7:95:6f:c1:2e:56:a6:ca:9c:
38:36:43:9f:8c:c3:44:e5:11:1b:ce:c7:e4:1b:a6:
23:85:96:9e:94:ca:2d:c1:26:01:e3:70:b3:97:1d:
8f:2c:75:1e:a7:47:80:4d:5b:72:58:8f:a7:ec:53:
91:05:6a:da:55:af:f1:a5:e4:b1:51:de:d0:51:4e:
98:1a:81:98:5d:a5:91:be:fb:21:20:f7:a4:5f:1f:
0f:55:f5:7a:7c:7d:ca:d1:d5:cc:50:6a:8c:07:65:
fa:b0:64:06:68:d3:75:3e:8a:b9:a7:8b:26:36:7f:
a1:fb:38:9a:64:a7:81:66:07:7c:5e:38:1c:b8:bd:
06:b3:86:db:86:c1:6a:47:b9:42:89:e1:30:df:85:
28:73:a4:9f:d6:a5:a4:dd:e1:fe:70:f4:02:c9:d0:
73:77:dc:bc:ea:78:e6:9c:94:58:52:71:2a:8c:0a:
08:62:ab:0f:1d:d0:69:0c:b1:78:0f:50:cd:96:e7:
13:36:8d:6e:6f:78:08:9a:2b:56:4f:00:da:63:87:
a9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B0:6B:32:DE:D5:41:8D:C3:AD:6A:E4:E4:19:F5:7B:04:B7:AA:E4
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b0:53:ce:85:8f:39:f5:c4:b0:18:67:e4:29:40:33:38:34:
c4:81:c0:d5:33:8b:2b:7a:23:47:ad:1d:bb:6d:3c:9a:00:8a:
7f:de:2f:b6:ab:d6:8f:9f:8f:2c:78:29:c1:fb:07:12:7f:af:
7b:f9:7a:1d:30:e0:60:4e:5a:7f:df:7b:9c:11:fd:0a:c2:4f:
0c:9c:1a:aa:69:dc:f1:ab:ea:7d:82:64:61:c9:59:4e:25:f6:
92:55:34:2c:60:99:5d:54:ee:c0:0e:84:eb:5b:71:3c:50:f4:
19:ae:58:d5:c8:2c:16:13:1f:b1:8d:9f:0b:e9:51:e3:c9:fe:
0a:85:dd:28:c5:dc:ad:9d:89:aa:6c:5e:9e:d5:9b:84:7e:21:
da:90:4d:aa:a7:1c:e4:80:93:94:41:44:9f:d3:37:42:6a:d6:
5c:5f:3a:4e:72:71:36:8e:d2:3d:c1:f1:bf:cc:1a:b7:c3:87:
09:a1:b0:f7:31:77:0a:a3:3f:45:66:5d:49:8a:79:93:06:27:
af:15:25:a9:4c:02:35:58:25:97:a9:f2:b5:50:3c:80:9c:74:
a2:1e:95:f8:f8:a0:29:3a:f6:84:18:d6:49:d0:a5:b4:27:db:
ea:fe:00:98:37:1b:e9:71:05:da:fd:98:4c:52:60:11:de:05:
b9:4b:7a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:04:24 2025 by rpki-client