Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier: MBNzmlqmUe9EIimKnDmLz4W4MPlo4jBsuoJeoEFHQEw=
Subject key identifier: E6:EB:27:0C:2D:6E:E2:17:89:88:D4:E2:24:63:CC:6E:EC:02:4F:41
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer: /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial: 0196C0B87F1F7EF905E838AF81EC80F75484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number: 0112
Signing time: Sun 11 May 2025 19:00:38 +0000
Manifest this update: Sun 11 May 2025 19:00:38 +0000
Manifest next update: Mon 12 May 2025 19:00:38 +0000
Files and hashes: 1: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: XploeUHHy3RYIIdq2iG0f5471LzbTYP5gcrorUk8RAk=)
2: qBI-2zh83yrxwps5B2wpeqKjzBE.roa (hash: +a40JJUntJvdA4SOSdLnTGJXNEt6hOF4b5LOIU68Stg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:7f:1f:7e:f9:05:e8:38:af:81:ec:80:f7:54:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Validity
Not Before: May 11 19:00:38 2025 GMT
Not After : May 12 19:00:38 2025 GMT
Subject: CN=e6eb270c2d6ee2178988d4e22463cc6eec024f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d3:c2:90:6c:03:03:4d:ae:16:b3:05:ec:dc:
ab:de:35:68:c8:b5:f1:29:f8:d0:82:ae:78:99:c8:
00:08:54:27:13:cd:94:9f:0a:3f:63:86:fc:44:6d:
31:59:d2:14:0a:32:d2:e6:a8:c1:11:2a:67:22:c7:
cc:39:ec:34:cf:34:50:d7:0c:91:f3:70:8d:33:58:
e8:37:ea:17:f4:73:52:db:a2:58:49:b4:8a:6b:da:
1b:aa:a8:37:86:8e:61:92:be:b6:00:0b:36:37:f4:
8f:93:3e:75:4c:9e:8c:c9:f3:44:f5:41:57:fd:73:
7f:9d:e6:c7:f0:4a:d5:68:08:12:db:75:66:1e:88:
b3:95:9f:e1:21:e9:47:c5:74:85:fc:e3:e1:6e:84:
e7:6c:ae:2c:f6:49:4f:e0:4c:da:b7:c2:be:c1:f6:
b0:30:76:52:85:ad:ba:a0:25:f5:c4:d2:6b:5f:f6:
1a:7d:3e:ff:c1:e9:3a:68:ac:a0:68:ef:94:91:6e:
45:a9:10:ef:27:e7:63:95:c5:c2:a9:a0:e5:d6:7c:
94:3b:2e:5a:d6:e7:7b:93:3f:78:c9:be:e2:52:73:
e7:7d:94:65:da:d8:4f:4d:31:0a:ba:72:a7:c6:5c:
4c:91:89:35:b4:ec:63:5d:82:ad:58:08:fc:f7:74:
fa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EB:27:0C:2D:6E:E2:17:89:88:D4:E2:24:63:CC:6E:EC:02:4F:41
X509v3 Authority Key Identifier:
keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:38:81:24:37:a2:6e:8a:d0:80:bb:77:73:10:f8:10:62:ce:
28:85:af:0e:ed:a4:7c:d0:2d:f3:32:f0:bc:4e:a2:ed:06:af:
1b:e4:e8:db:0e:17:31:e6:67:87:5d:a2:04:df:fa:d2:84:19:
04:9b:fd:ac:dc:27:b4:0e:b1:ba:36:67:3c:4e:88:46:08:d6:
4c:db:38:9f:d4:de:01:7d:d3:7b:67:18:af:72:1a:2c:75:62:
ca:da:a3:53:5a:28:b0:a5:be:eb:8f:88:0e:47:e7:11:14:d4:
1a:3d:aa:86:06:2e:74:cc:4a:4b:05:fc:d2:d1:2d:47:a7:ae:
87:21:02:8f:f3:42:bf:99:ca:19:53:14:2c:f2:73:a7:0f:82:
df:e5:e1:69:e2:72:bc:f9:ab:c6:15:31:e4:8c:16:2c:97:4e:
6e:74:61:86:b0:4d:b4:4a:d9:70:8c:ef:c2:40:82:30:04:5f:
e8:3f:59:53:67:72:6e:e7:aa:6f:99:c1:1c:97:1c:67:f2:1c:
7c:74:51:9f:e1:c8:25:9e:24:2c:e3:7f:3c:b9:ed:26:91:16:
92:e7:34:da:2b:75:c5:ec:e6:1b:c4:b0:eb:8f:79:d7:ea:d3:
56:b6:cf:ea:09:3c:3a:10:e3:1c:81:b0:45:a9:94:22:77:8c:
ec:3f:c6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:10:17 2025 by rpki-client