Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File: 7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier: ZVwplRljdoiE3U170En/z08MwwmqyB1SrorUPEvnX/M=
Subject key identifier: F5:7F:27:E3:D9:77:35:52:09:2B:F7:83:65:8B:78:B1:3D:F6:FA:70
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial: 01969F088516ECC44FD8B6292A1051C21BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 06:00:57 +0000
Manifest this update: Mon 05 May 2025 06:00:57 +0000
Manifest next update: Tue 06 May 2025 06:00:57 +0000
Files and hashes: 1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: Qzx6vaTqdK+dxXTGNiPZZMRittx/22g1mCXjNTcEClM=)
2: PGTEyuyHfVxWRtCLWSM0Bggjqk8.roa (hash: LpN4nDf3nPAGvaIylopZoGcsyeFo20wtey+AbU/Sxvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:85:16:ec:c4:4f:d8:b6:29:2a:10:51:c2:1b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
Validity
Not Before: May 5 06:00:57 2025 GMT
Not After : May 6 06:00:57 2025 GMT
Subject: CN=f57f27e3d9773552092bf783658b78b13df6fa70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:f6:44:f7:07:34:88:e1:0a:9e:7d:29:4a:
8a:36:e9:c6:80:e3:87:fa:f4:da:44:d7:aa:72:44:
ff:55:1c:fd:0f:82:65:64:1d:65:08:a5:3a:97:28:
d1:de:07:9d:0c:f4:f7:fb:5c:95:ef:90:33:76:40:
ba:8f:10:b1:41:46:31:9b:32:4b:d3:af:c0:3a:a1:
43:3e:63:65:f4:0d:e9:32:c3:99:54:8b:f6:4d:17:
da:cf:3c:52:82:4d:7a:3d:6b:12:66:c7:db:2b:d9:
8a:f0:42:bb:52:65:c2:f6:23:cb:6b:98:f3:63:a3:
e1:d7:0d:4d:9f:ce:ca:68:19:56:b3:0b:91:e7:ce:
18:38:61:a5:99:7d:a3:2c:c7:90:0f:56:0d:07:d7:
33:8b:d5:4f:37:dd:a2:30:3b:89:a1:2b:30:c3:88:
38:6c:e4:50:c5:5f:e5:7d:a8:07:63:34:21:df:57:
93:6a:9f:69:7f:8d:64:f6:5a:84:a4:ee:d5:1b:97:
15:a9:2c:e7:e8:11:77:54:49:38:4f:64:e2:8e:d4:
22:b7:21:68:ca:83:3b:ed:c0:f8:a2:c4:63:9e:bf:
d9:c9:cb:02:2e:0b:6d:ab:f1:81:7c:da:4c:3e:de:
f5:bd:bc:b8:b2:8a:22:0b:01:9d:a6:c3:7d:63:ad:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7F:27:E3:D9:77:35:52:09:2B:F7:83:65:8B:78:B1:3D:F6:FA:70
X509v3 Authority Key Identifier:
keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cd:44:22:4c:df:b9:22:59:c3:cb:15:d1:0c:19:07:33:97:
06:2d:e2:ab:e8:69:60:67:3b:3a:5c:2c:cb:a8:dc:a0:b8:f4:
40:c3:23:c9:b6:9d:76:c5:69:5b:8a:eb:38:06:9b:b4:9e:41:
a5:e0:68:70:89:88:10:3f:fb:a7:2a:ff:fb:de:22:62:bd:5e:
e4:12:54:7a:20:8e:df:9f:fa:32:1b:72:13:fd:46:7b:46:06:
00:ee:25:b1:16:22:fe:d5:e3:ff:15:ae:e5:d7:77:e0:5b:11:
87:21:8a:45:87:28:aa:8f:e1:45:1c:e7:6b:99:88:39:39:ab:
ac:dc:7c:d4:48:f2:93:63:a4:76:d4:79:92:1a:c0:6d:47:cb:
23:26:7c:fe:01:9b:73:37:69:de:9c:40:03:a8:2a:4a:a5:6f:
7b:a0:03:c6:4d:23:3f:d2:62:dd:e8:aa:af:a3:74:26:98:ec:
b0:59:31:d7:36:b4:ad:48:f0:b5:e6:03:4d:3c:f1:f2:73:9d:
06:c3:4a:9d:4b:f2:d8:14:06:fb:dc:04:b3:dc:0d:98:93:4b:
2c:f2:36:80:d1:6e:f2:49:79:3e:6d:70:c1:01:9f:9a:c5:d8:
c9:8d:9b:d8:21:43:d8:19:e3:37:6c:5e:3e:55:ae:fb:21:ac:
32:f3:d8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:16:52 2025 by rpki-client