Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier: ExkR63tcpTSS4lFRSbH18HxyOlZuwilDbYsc5T4Abo0=
Subject key identifier: B0:AD:6F:79:8F:03:57:85:E1:25:65:9D:26:30:9A:C8:FA:45:8E:BE
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 0196BA11E54565B685C79264D303DC3E0A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number: 1537
Signing time: Sat 10 May 2025 12:00:56 +0000
Manifest this update: Sat 10 May 2025 12:00:56 +0000
Manifest next update: Sun 11 May 2025 12:00:56 +0000
Files and hashes: 1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: /5jVhEiqDZlibJizvTZ/yCy5iE6XcIpxAEWJEUklQjk=)
2: EytKkp-cHU6YafCnB0z54OPcAnc.roa (hash: qXa8VJW5qO7AGM9oVgWuxQ8fPmA9SdZQmj6ClsTDzLA=)
3: SSk5EJ2eeCxHqtRI36s4YAa6XHE.roa (hash: Qy4Hae6uxNoX2t2wWLKuUW7INir6rrE0SB0/N7PGSAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:e5:45:65:b6:85:c7:92:64:d3:03:dc:3e:0a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: May 10 12:00:56 2025 GMT
Not After : May 11 12:00:56 2025 GMT
Subject: CN=b0ad6f798f035785e125659d26309ac8fa458ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:25:8f:7a:d0:8f:d7:c3:59:30:57:25:50:
11:6c:a7:e9:3c:66:1c:cd:a4:90:e9:a2:ab:0e:69:
2e:b8:8b:ca:67:a2:d1:d6:3e:3a:53:58:d0:a7:fe:
87:bd:6b:1d:6d:31:bb:d3:47:e4:44:08:ce:00:15:
14:af:ab:00:b7:ca:e0:57:8e:cd:c7:93:35:5c:0d:
de:6c:c2:e9:df:ce:83:65:79:5f:63:4e:a5:86:a5:
d4:e1:35:27:51:b9:6a:f9:92:07:b1:a2:56:ff:66:
28:28:85:c0:3b:f1:d0:93:e4:33:5e:03:04:43:eb:
49:1f:f7:19:5b:f4:a0:d4:9d:d7:f0:b5:66:ff:4d:
b3:57:83:f9:fa:36:ff:46:79:8c:0d:f4:80:ba:b4:
f4:96:5d:eb:b1:4c:0c:8a:d5:84:6e:df:1b:ad:db:
b1:50:8e:62:ee:60:b6:6c:3d:2e:e7:ab:6e:eb:67:
c9:a3:2b:ff:2d:03:73:37:3d:e8:49:15:ee:aa:37:
8d:7b:4a:2c:70:39:06:6a:fb:af:c7:ac:77:ed:e9:
72:d3:ce:b5:6b:39:11:be:d5:18:2c:ff:bf:e3:c1:
e3:57:92:7e:ad:bb:2d:0f:70:88:ab:35:30:fc:e3:
e1:66:73:ee:b0:89:1f:6b:a2:a7:a0:44:c9:00:36:
10:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AD:6F:79:8F:03:57:85:E1:25:65:9D:26:30:9A:C8:FA:45:8E:BE
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4e:ba:1a:e1:60:7a:a5:28:93:5d:4a:46:87:e1:56:8a:e2:
38:e4:97:ac:89:fa:fb:1a:4a:39:74:df:95:99:97:50:ac:69:
a8:da:95:5f:5f:e7:9c:09:0c:98:e5:6f:d5:83:56:3e:11:19:
e6:32:e2:cd:01:83:cf:55:04:3f:bd:6a:60:67:57:bd:ff:67:
27:c2:e5:42:ee:82:53:01:c3:60:ca:20:c1:ed:2a:e8:4f:47:
1e:d6:29:8a:42:e8:5c:17:0e:7b:f4:6a:32:2b:97:ce:cf:2f:
3c:62:3e:98:4f:2c:fe:06:d4:4a:33:53:97:68:4e:d2:5f:f0:
eb:c7:36:28:14:5f:e7:04:77:41:c1:19:26:eb:f2:b1:e8:31:
2c:98:5e:09:28:da:7f:78:da:15:8d:4a:11:bb:0a:b2:c5:01:
00:70:18:73:a0:42:34:68:23:a5:20:3d:d8:9b:75:93:96:c6:
83:da:13:d4:ee:3c:b6:e0:cd:10:59:23:f1:fa:01:2d:f7:dd:
08:54:f2:8a:69:92:bf:ec:a2:a6:33:05:45:a0:07:c7:fa:b2:
7d:ff:c6:07:32:fe:17:d0:67:c0:0e:07:a6:81:ae:a3:ac:7b:
34:f4:31:46:1b:ca:55:a7:0e:4c:fb:3e:04:7f:83:03:45:93:
17:3e:d5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:09:06 2025 by rpki-client