
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
File: k7MitZBI4Qe5Sm2wZVevXwycKQw.mft (raw, json)
Hash identifier: znJ8x8VyM8ZWTWwHcgLV4II0SQ63bMMfCoRxNuknYzk=
Subject key identifier: B7:3B:E7:2B:7C:5D:8B:20:8C:64:42:37:6A:A2:47:CE:77:73:D3:32
Authority key identifier: 93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
Certificate issuer: /CN=93b322b59048e107b94a6db06557af5f0c9c290c
Certificate serial: 0196DA791DF20C71C29AD168C8FB3E2530A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
Manifest number: 14D5
Signing time: Fri 16 May 2025 19:01:32 +0000
Manifest this update: Fri 16 May 2025 19:01:32 +0000
Manifest next update: Sat 17 May 2025 19:01:32 +0000
Files and hashes: 1: F5bs6DNVTHOaUsVHiFb7UzCDu7c.roa (hash: w/qr34whaxn4VYChdCHJu1JeKElghciF+2vacPtM24Q=)
2: k7MitZBI4Qe5Sm2wZVevXwycKQw.crl (hash: bzGxXsMtGDbRSoYyNyLFhAOhMXCkhlOiR3uUvVu+y4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:79:1d:f2:0c:71:c2:9a:d1:68:c8:fb:3e:25:30:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b322b59048e107b94a6db06557af5f0c9c290c
Validity
Not Before: May 16 19:01:32 2025 GMT
Not After : May 17 19:01:32 2025 GMT
Subject: CN=b73be72b7c5d8b208c6442376aa247ce7773d332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:97:3d:af:d0:57:fb:da:7f:ac:97:22:77:
f2:16:ad:8a:32:73:e7:67:4b:7b:f7:6c:47:d8:bc:
82:42:dd:7a:f2:29:40:d2:31:2d:9c:45:8d:a9:da:
d9:d3:21:cc:2b:9f:5d:65:ea:5b:45:57:8c:54:f8:
bb:c4:67:c8:48:1f:b5:97:e3:6e:12:c6:4d:92:9a:
62:7e:64:72:33:43:19:49:82:5f:9d:9b:5e:c6:d3:
bb:54:be:97:1a:d5:0f:a1:4c:97:54:08:22:ac:97:
58:c2:df:c6:6f:f0:e9:cc:53:07:86:25:51:30:c7:
ef:f1:d4:d6:b0:45:54:72:ee:1a:d3:d5:89:6a:6e:
1b:fb:dc:a6:73:0f:45:63:6a:1c:19:3f:f4:61:75:
ce:dd:a9:9b:c5:72:45:28:b3:49:84:95:0c:a0:ec:
e7:4d:9d:db:8b:58:4e:fe:20:86:5d:78:ab:12:1e:
0d:fa:9b:fd:af:bc:db:e6:35:e0:22:f4:93:2d:eb:
0a:0a:f6:0b:b2:23:f9:0c:37:79:ba:55:b9:64:1e:
03:12:3f:5f:30:62:d4:e2:4a:26:42:b1:5c:25:20:
cf:0d:a9:f0:bd:2c:c4:da:36:06:85:5d:d5:61:16:
0a:4f:af:c8:51:7b:5f:61:8e:93:80:e8:a9:e0:7f:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3B:E7:2B:7C:5D:8B:20:8C:64:42:37:6A:A2:47:CE:77:73:D3:32
X509v3 Authority Key Identifier:
keyid:93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:77:07:9b:7a:33:5f:ca:f6:18:4f:fa:da:86:8e:88:16:e8:
07:db:3b:d4:3a:d3:4c:fc:43:99:d6:fa:19:cb:f7:12:03:96:
c9:03:1c:06:06:ac:af:f2:77:e7:ee:b1:23:e1:40:f1:6f:31:
67:ab:fb:ca:1c:df:27:9c:fe:53:72:46:ac:9b:40:88:0e:da:
84:06:ca:20:21:92:54:a4:b0:9c:ce:f1:93:ab:70:f5:1e:c4:
12:18:64:32:3b:48:02:9a:05:96:dd:01:12:20:f9:42:d7:1f:
d3:ab:69:ae:f4:0e:9e:f5:59:8a:f4:50:9a:e9:f5:84:1f:17:
cd:6b:4f:04:6c:8f:52:21:a0:08:33:e7:61:2d:63:10:4f:97:
04:59:1b:5e:e5:0e:c4:e6:c0:48:1d:60:58:90:d3:0b:f7:55:
60:92:fc:03:65:4d:8d:22:15:35:d3:58:50:13:e0:e5:83:13:
07:f9:29:68:2d:8c:76:68:cc:f3:3f:94:fc:fb:cf:20:0b:79:
09:cb:cd:5a:53:78:9c:54:c4:cb:6b:99:14:ab:67:6d:78:87:
f7:42:da:90:10:cf:da:da:ba:0e:8e:b2:2a:b3:a4:58:d6:85:
e8:4f:9f:9f:55:8d:0d:be:e6:62:d7:ce:69:41:e6:29:bf:63:
f3:eb:24:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 20:53:38 2025 by rpki-client