Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
File: 7FOM3K-fkkZJfceuRYRTef5qcXQ.mft (raw, json)
Hash identifier: smdk5fBZJyO8vMyU8TldqK5ciMnOUynXl8dikeuwJPo=
Subject key identifier: 7C:6B:18:4C:E2:92:DF:AC:89:DA:1F:8E:CE:5D:BB:7B:D0:5F:A1:72
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial: 0196B74746E6985C965210832CC8CC61BE7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
Manifest number: 0929
Signing time: Fri 09 May 2025 23:00:23 +0000
Manifest this update: Fri 09 May 2025 23:00:23 +0000
Manifest next update: Sat 10 May 2025 23:00:23 +0000
Files and hashes: 1: 7FOM3K-fkkZJfceuRYRTef5qcXQ.crl (hash: T+/jcRHraFz9GyhCP8QXm9ZVwCMd2fJ83EjR9/K2c6k=)
2: BDuB9Tdy1bkdHiiKbCLGOLXhLgM.roa (hash: /BEhxsli53ZdIFQcNasA4TXy3qdR7JtPphvJxMDLbVM=)
3: o9u62C62uEKyliiaqilmlCLeC54.roa (hash: IbrVnLHNGZTQPhCJ7F+rZGHYI9Autu0dmXqnxbbk8VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:46:e6:98:5c:96:52:10:83:2c:c8:cc:61:be:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Validity
Not Before: May 9 23:00:23 2025 GMT
Not After : May 10 23:00:23 2025 GMT
Subject: CN=7c6b184ce292dfac89da1f8ece5dbb7bd05fa172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:59:22:3d:37:81:f5:35:a8:50:26:6a:b8:
f5:e8:78:27:4f:e8:6e:d1:01:ab:76:f0:11:20:a0:
22:6d:d7:d3:e7:78:90:56:e8:34:08:24:c2:3c:ff:
ec:57:b8:7b:a0:09:e3:77:ce:c8:cc:3e:2c:35:b7:
40:71:cb:70:06:59:bd:52:31:92:b2:24:62:fb:6e:
d6:6b:d1:b2:ef:2f:5b:5e:f8:24:55:c7:f5:ba:11:
98:5b:ed:57:69:15:00:c3:52:b2:1e:33:29:fe:a2:
c1:7f:3c:3c:b2:f8:8d:3a:80:9b:3e:45:21:5d:d2:
43:00:26:eb:58:25:95:27:fc:1a:67:cc:f1:d2:29:
a8:08:b3:7e:f5:72:b8:3a:03:6a:93:cb:6c:c7:c7:
97:ba:61:7d:d3:9d:ef:08:75:e3:6a:aa:4c:4f:86:
4c:ec:0c:2a:a3:4d:9c:14:b1:e1:ad:c5:99:6c:6c:
ee:ab:66:99:b2:36:55:47:55:2c:f8:75:e1:4d:dd:
98:3f:cd:32:78:dd:1d:ec:a1:bb:ba:42:98:47:18:
c7:06:d8:15:ee:ae:73:fb:fe:58:b7:e0:a3:e9:92:
1f:f6:c8:dc:91:8d:5d:38:0e:97:b2:2c:95:00:3d:
6e:be:a3:70:d7:2b:0d:f4:1a:c9:f7:a0:28:f4:aa:
ed:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6B:18:4C:E2:92:DF:AC:89:DA:1F:8E:CE:5D:BB:7B:D0:5F:A1:72
X509v3 Authority Key Identifier:
keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:29:ef:3d:27:1b:99:c8:54:3a:42:5a:d2:87:3f:3e:b3:dc:
9b:e4:8e:7f:2e:00:41:10:ac:b8:f4:a6:bf:23:be:f2:23:f7:
21:04:1a:06:1e:48:25:bf:e4:37:1c:25:9e:15:23:42:22:eb:
59:55:9c:90:f6:be:1f:19:aa:06:e9:5f:7d:24:6b:c7:82:59:
d1:20:f3:8a:ac:70:c5:b2:dc:b3:5e:60:8b:81:73:77:57:9c:
14:55:6d:55:f7:42:2a:3e:bf:43:13:54:6e:a3:ac:c3:99:c7:
3a:0f:25:5b:1f:2f:87:cb:95:45:1d:a7:f4:4e:f0:43:12:91:
c3:31:35:25:ab:ac:d2:cd:b8:01:ae:89:1f:b3:f1:9b:36:ae:
b9:31:87:89:c2:3f:0f:ae:29:73:73:79:b4:99:f1:c3:90:9a:
b7:c9:75:a3:03:8c:3b:bb:87:fc:b5:4e:15:38:24:df:a1:c6:
5c:26:31:19:86:96:11:40:54:04:82:30:05:6a:c9:c8:6f:6d:
3a:0c:ba:5c:8d:27:82:01:36:b2:59:ea:1e:98:4a:f5:50:3f:
14:d6:25:56:73:fd:99:d4:68:1a:a4:22:45:36:e2:52:75:15:
c0:64:74:e7:e7:c8:81:fc:9b:a8:8f:8e:98:6c:22:e6:9c:12:
6e:19:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:23:09 2025 by rpki-client