Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
File: 7pzNOKXWSWiAvAlHBuaPoE-izZY.mft (raw, json)
Hash identifier: nvH3FH/jKLotbrexHkrD+yfdFjrEIFtDWl/FY6iSeFk=
Subject key identifier: F4:94:6F:78:23:67:AF:C5:01:35:92:08:57:10:56:1E:FD:6D:00:E0
Authority key identifier: EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
Certificate issuer: /CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Certificate serial: 0196B9A3BCBFAAFD408BA092A28D53960F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
Manifest number: ED
Signing time: Sat 10 May 2025 10:00:37 +0000
Manifest this update: Sat 10 May 2025 10:00:37 +0000
Manifest next update: Sun 11 May 2025 10:00:37 +0000
Files and hashes: 1: 7pzNOKXWSWiAvAlHBuaPoE-izZY.crl (hash: K7gut2kiETNFGEiye67u43ySns1yrG+//2sTgj1uk6A=)
2: QSjkZq8_AJ0B8g7dlzd0nA4JsWQ.roa (hash: YMcvfk9S0D5BI+lBDXlsaUm2v/yIEV2HtkKOAQ1Y0Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:bc:bf:aa:fd:40:8b:a0:92:a2:8d:53:96:0f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Validity
Not Before: May 10 10:00:37 2025 GMT
Not After : May 11 10:00:37 2025 GMT
Subject: CN=f4946f782367afc5013592085710561efd6d00e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:29:0f:d5:b7:8c:cc:d7:4c:17:8d:fd:36:
51:76:ca:c6:a9:04:d4:f5:2a:d7:cb:74:12:ce:d9:
e8:ac:6e:cf:ac:b3:9e:52:fd:74:58:c0:0b:1d:9a:
25:2a:ed:05:0a:11:b5:57:44:97:73:d8:c8:61:41:
74:02:2a:e7:f0:b8:0e:57:9f:ce:54:60:1f:3a:a8:
1b:5d:8c:ca:1f:af:12:b1:2e:3e:57:42:5b:9c:97:
18:e4:b8:63:a2:74:70:b6:26:c9:01:78:db:1e:a2:
3d:01:ec:0c:a1:1d:cb:76:33:6d:6d:5c:70:63:fd:
76:83:4c:bc:7a:70:8c:e5:d5:d5:86:89:79:3b:cf:
1b:99:60:26:58:fc:a3:ac:06:14:4f:3f:c9:37:fb:
cc:63:f1:05:30:8e:1c:b8:9f:82:ce:76:02:a0:ab:
12:21:a3:55:9c:52:26:3d:78:27:0a:e5:38:9c:d1:
ca:ce:84:cb:16:7a:94:77:c4:c9:bd:5f:33:81:ee:
3b:14:a7:06:51:ff:86:cf:f8:33:44:63:23:1d:51:
97:5f:8f:3f:44:1d:c8:3f:9a:ff:a4:08:23:a9:f5:
ab:3e:b2:93:cb:d8:27:f0:f5:e6:f0:04:36:71:f5:
71:9a:d0:4c:57:26:c2:26:fb:7d:e1:9d:dc:b9:ab:
9d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:94:6F:78:23:67:AF:C5:01:35:92:08:57:10:56:1E:FD:6D:00:E0
X509v3 Authority Key Identifier:
keyid:EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e3:89:e1:ed:8c:6b:65:30:7a:5d:58:f8:61:c2:7d:05:f6:
9e:b3:63:75:c1:cd:ec:2c:96:ad:32:9c:6e:5b:ea:e2:47:70:
98:aa:07:2c:46:b0:95:2d:0b:32:da:1a:f6:f6:f4:62:7b:c2:
eb:02:e5:88:bb:bc:8c:49:6f:7a:ef:fe:b0:92:f6:4c:de:f0:
56:24:35:36:31:75:ff:91:0a:03:88:cb:1c:3c:b4:54:d7:7e:
02:e8:2c:12:85:9f:24:d7:64:4d:d7:a7:50:9f:54:08:9b:d4:
dd:d3:74:69:68:d5:94:ff:c4:8b:de:1d:d5:94:af:90:4b:42:
11:c6:b4:9b:b2:9d:6d:90:2b:78:df:87:5f:4d:59:ec:c9:03:
99:72:6f:94:7a:fe:e1:5b:b7:24:68:af:0f:23:47:87:80:6c:
04:3b:ec:0f:ac:79:bd:f4:93:68:06:d6:85:b9:0c:a1:74:a4:
05:92:79:43:7b:73:49:22:5b:79:fb:74:0f:84:d3:73:44:2f:
50:16:91:15:3d:a2:33:c8:2e:05:bd:4c:25:b9:c7:72:7f:d4:
6a:08:9f:b1:2c:0e:b2:24:3d:2c:27:4f:5e:7c:57:de:ac:a7:
b1:45:d2:b2:6b:bc:87:f8:01:04:4d:5e:92:67:fa:28:1d:0c:
d8:7e:33:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:11:47 2025 by rpki-client