Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
File: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft (raw, json)
Hash identifier: x2LvK9CHK0CL9PJxmQ/lLc9HMt/wp1iWyt7zy4y5ajg=
Subject key identifier: 72:A4:BB:AA:42:43:D3:43:2E:22:AC:C8:89:0D:63:60:00:61:9F:BB
Authority key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
Certificate issuer: /CN=ee82395001b03c663509909979dfb78445b3d9c4
Certificate serial: 0196C64CDA5277962FAA9D5091F3AA7089B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 21:00:47 +0000
Manifest this update: Mon 12 May 2025 21:00:47 +0000
Manifest next update: Tue 13 May 2025 21:00:47 +0000
Files and hashes: 1: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl (hash: 4gETvy7NFYbPQLmPamEVpi8WWFB+qxwi+1+6HkkT8i0=)
2: ucKWTlPN-FuM9B9rpIaHmjJB0uU.roa (hash: NuV8RJZOUsktn6zLXnq7yOANvHrLINcgvHUFAyEOS84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:da:52:77:96:2f:aa:9d:50:91:f3:aa:70:89:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee82395001b03c663509909979dfb78445b3d9c4
Validity
Not Before: May 12 21:00:47 2025 GMT
Not After : May 13 21:00:47 2025 GMT
Subject: CN=72a4bbaa4243d3432e22acc8890d636000619fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:88:14:8a:d5:8e:73:10:18:51:01:85:04:8f:
70:c2:a5:ce:9d:7e:8d:38:d7:62:8a:5b:ba:15:fa:
f5:05:d6:c6:54:62:ec:71:a1:c4:06:39:7e:34:99:
a5:cc:ac:78:f0:41:fd:1f:be:93:e5:93:58:1c:6c:
12:5f:fa:f7:e9:89:66:a3:18:4d:fc:33:0a:6e:7c:
a9:2c:80:84:77:69:34:a0:6a:fb:83:20:a8:34:8e:
7c:fa:35:34:f9:2c:19:5a:68:77:ee:52:ab:a7:f7:
1c:b0:cd:4a:a4:f2:b4:0c:95:bb:70:25:3f:3e:22:
e4:8f:72:c7:d6:01:a6:f6:3c:65:39:3e:9f:ab:5a:
11:7b:41:1a:d4:a2:f9:df:08:36:0d:89:bd:62:b2:
60:ab:06:9e:0e:b8:48:96:e1:65:ac:40:1d:8a:52:
22:23:2b:48:e8:8c:bc:cb:21:0e:1a:2d:91:2b:ff:
1e:34:56:b8:7c:ff:5c:58:48:ee:72:f5:d3:51:42:
ae:a3:6a:d1:6c:f6:e8:43:e4:bc:30:3c:23:c7:3b:
a1:5d:80:fa:cd:23:00:e5:1b:59:50:f7:59:32:13:
b4:23:75:01:b0:df:5d:a8:41:3e:2b:1e:6c:49:21:
89:88:5f:3e:2d:2b:9e:67:4b:e8:ef:b7:bc:33:a4:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A4:BB:AA:42:43:D3:43:2E:22:AC:C8:89:0D:63:60:00:61:9F:BB
X509v3 Authority Key Identifier:
keyid:EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f0:c8:3e:77:f6:eb:01:07:84:81:3d:a7:4b:05:2f:96:b3:
4c:b4:66:11:33:72:c1:1e:aa:0d:e0:f3:04:20:41:32:39:58:
9e:fa:a3:92:3a:25:3e:13:e3:3b:92:b6:bc:95:fd:54:6b:b7:
d4:3f:87:b3:3a:04:d1:ec:a2:5f:85:a7:cc:94:d4:4f:9a:17:
45:93:bc:41:bc:02:b8:a8:c1:cb:40:6d:a9:ac:21:ec:13:fb:
9f:19:95:f9:19:17:41:ac:e1:98:f5:e1:f3:34:e2:34:61:99:
21:89:27:19:84:8c:6c:27:f3:15:8e:94:5f:8c:69:8b:01:4d:
f8:86:59:8a:a4:75:07:06:5b:4a:46:fa:b3:61:52:4f:0c:68:
b5:fb:29:95:08:67:50:09:d3:8e:2a:91:4d:1d:67:07:10:67:
ba:7f:e1:9a:72:38:72:45:e0:cc:11:49:89:2a:96:5d:23:aa:
56:3d:7e:1d:01:75:a7:d0:da:d5:53:9b:ee:7c:89:85:49:3c:
4c:1c:f0:93:40:06:aa:90:ac:2c:79:a2:1a:7c:7e:c8:19:e9:
16:9a:aa:9d:91:bd:23:40:32:da:bc:9c:fa:e4:94:ec:b9:e3:
30:d1:23:f9:94:ae:48:94:b3:ad:03:0d:14:85:28:2c:02:bf:
ef:0a:83:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:47:23 2025 by rpki-client