Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
File: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft (raw, json)
Hash identifier: Ch0z2Akf9U/GV9Mg+XK6ppMKAbITyRB0ggzzbfLZ4MY=
Subject key identifier: F7:EF:81:6D:33:79:6E:B0:33:31:86:34:32:2D:9D:57:73:8F:8C:4F
Authority key identifier: EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
Certificate issuer: /CN=ef1e225614c65ce2cf5275eb464334395c06f430
Certificate serial: 0196A7300D7FC24998A3915B2E49AFABACDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
Manifest number: 14B9
Signing time: Tue 06 May 2025 20:01:06 +0000
Manifest this update: Tue 06 May 2025 20:01:06 +0000
Manifest next update: Wed 07 May 2025 20:01:06 +0000
Files and hashes: 1: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl (hash: ywhlth5UymzIN95u8YVLLpLGE5b3yL54wNIiQOf4nkY=)
2: kr-CQEDCmSYwuOSJOe0IGac-Ph4.roa (hash: wykL6q5xBW3wpH/kqH9sAqNTf3knNHNn6bzejjuBpOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:30:0d:7f:c2:49:98:a3:91:5b:2e:49:af:ab:ac:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1e225614c65ce2cf5275eb464334395c06f430
Validity
Not Before: May 6 20:01:06 2025 GMT
Not After : May 7 20:01:06 2025 GMT
Subject: CN=f7ef816d33796eb033318634322d9d57738f8c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:16:c4:13:52:d5:7e:3d:ac:eb:03:b6:86:
61:e6:75:70:3d:44:fb:7e:fd:0c:61:db:f7:9f:97:
37:b5:d5:4c:e6:10:34:7c:ad:6d:25:4f:b6:a7:c4:
2b:a3:a5:24:6e:4f:b2:35:5e:35:e2:b6:c0:ca:a8:
49:64:b2:53:50:ba:81:90:30:e8:42:51:8e:02:82:
32:a1:6a:18:59:0a:e5:ee:34:0e:18:57:9d:35:cc:
45:1f:a8:47:0f:f0:1b:a6:52:59:2a:ef:71:6a:65:
14:fd:18:f4:bc:af:97:49:4f:6e:35:df:6c:ab:e5:
32:b9:8c:c2:64:4d:4e:67:44:9a:13:a7:74:a9:6e:
a3:4f:7f:18:08:c7:38:a5:f5:3d:4a:10:86:78:ab:
aa:12:16:10:05:bf:4d:93:11:a6:58:87:31:ae:b3:
a7:e5:f2:10:7a:ad:19:62:07:99:86:43:b2:3d:7d:
13:1d:02:1e:3c:83:e0:4b:f4:a4:63:0a:37:dc:1c:
46:3e:7b:53:6e:7e:21:88:65:21:0b:eb:1c:27:ac:
67:79:b7:18:15:bb:66:c5:68:39:62:f2:8d:bc:bc:
a5:da:4d:86:78:0f:d9:ec:c6:33:49:73:d5:1c:f3:
60:19:a4:9a:67:20:4f:7e:c2:97:5b:3e:20:3d:3f:
13:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EF:81:6D:33:79:6E:B0:33:31:86:34:32:2D:9D:57:73:8F:8C:4F
X509v3 Authority Key Identifier:
keyid:EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2b:6f:21:cc:4d:8b:f4:8b:f2:98:c1:6f:59:18:b6:cd:20:
89:bb:3e:03:9c:c0:ae:aa:28:7a:8a:02:d0:3d:d8:4c:61:f1:
93:c5:35:27:41:e6:23:2a:2d:4b:ec:ff:ce:ab:b7:1a:d6:99:
d7:a6:cd:75:cc:de:42:7b:76:14:ea:18:f0:36:63:4d:7f:95:
cd:a3:e4:07:fb:30:69:44:0e:92:29:74:e7:34:8a:53:b5:1b:
a5:3b:60:42:a4:8a:4c:f5:22:e7:9e:4a:1e:73:4a:86:37:a9:
e0:c9:d6:ad:d1:c3:eb:50:af:4d:ac:c9:f1:4b:40:5a:58:c4:
44:2f:12:df:d8:74:0c:5c:79:0e:07:b4:8e:65:df:80:0b:ad:
81:12:55:cc:7b:95:77:fa:be:01:1d:17:c1:8f:63:fe:98:cb:
ff:9a:19:f7:a2:75:47:54:3f:84:5b:41:74:c6:a9:2a:05:9f:
d3:b7:c3:ba:a9:2d:4a:01:1a:2e:1b:50:33:98:b0:96:da:53:
1e:e0:21:54:4b:17:ab:e2:2c:c6:d4:80:c9:41:76:97:0c:7f:
a4:5b:39:70:5a:09:10:d3:58:de:3d:d3:db:29:c7:58:3c:87:
39:61:a2:28:96:1f:3b:28:18:fe:75:58:a8:68:6a:f7:1e:36:
be:eb:12:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:56:27 2025 by rpki-client