Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier: n6U3M3i525rL47EN0/9M0uRwdVG7t9So0UKOp2CHX80=
Subject key identifier: 84:1A:C2:47:7F:60:10:FA:A3:85:3B:00:DE:1B:E3:B3:43:E8:28:FC
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial: 01969E63259E91ACFD4EA96AC259775BBB37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number: 126E
Signing time: Mon 05 May 2025 03:00:19 +0000
Manifest this update: Mon 05 May 2025 03:00:19 +0000
Manifest next update: Tue 06 May 2025 03:00:19 +0000
Files and hashes: 1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: jtMqgyQ0Dsu4ccnpYgE9UgmOY9oUeMroZqakOU5+eD8=)
2: RFaAPpt9TXRuZiSBVJ4x95FnZpg.roa (hash: r/BjBoSYQEd6zQy913IAV7pMwCR1j9bdd+qgN4vkxf4=)
3: mw-NfFERPD2qaYVgEjUcNQ0zcPs.roa (hash: AZitnGA9oKjnHTuxpFFMdyJwJocQCVTArIP5ASVi2R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:25:9e:91:ac:fd:4e:a9:6a:c2:59:77:5b:bb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Validity
Not Before: May 5 03:00:19 2025 GMT
Not After : May 6 03:00:19 2025 GMT
Subject: CN=841ac2477f6010faa3853b00de1be3b343e828fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:95:e0:4b:99:98:db:e2:10:04:b2:7f:45:0d:
db:12:a5:fe:2e:43:12:14:9f:9d:1e:f7:4f:f9:a8:
93:c5:3d:05:42:8f:42:99:fd:5f:46:27:c1:36:30:
4f:80:8e:41:ca:a9:05:3b:97:34:0c:12:e4:6f:4a:
47:f1:82:bb:f0:26:3e:74:ab:3f:1a:c6:73:4c:8a:
22:ae:55:cd:4e:46:56:97:66:31:56:3b:2e:78:fa:
4b:ec:a8:b7:0b:0a:4d:f6:7d:c2:c1:40:fb:b2:0f:
b4:a8:62:b1:7b:34:b9:18:0f:ca:f0:18:28:12:75:
28:6c:c1:45:1e:47:17:e3:77:64:0f:b1:ec:ba:ad:
08:9f:19:e8:89:59:86:a7:8b:ab:21:3c:ed:38:89:
06:d9:2e:6c:4e:9e:db:bd:f2:86:ba:45:d3:2c:31:
9f:0e:04:d5:b3:25:44:08:6d:70:d5:e6:bb:3f:2f:
c8:39:ae:ea:04:ed:de:86:fc:09:32:ff:0a:8e:45:
ae:ca:b9:b3:e7:d6:a3:37:0f:f4:5b:64:d0:60:b1:
4e:55:4a:41:bf:c2:88:9f:80:43:75:72:f2:7e:4b:
13:31:47:78:bf:7b:8f:e1:ef:54:5d:0b:0e:02:ba:
0e:c7:1c:93:ce:2a:0f:7b:00:64:33:7a:3e:5f:a6:
c8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1A:C2:47:7F:60:10:FA:A3:85:3B:00:DE:1B:E3:B3:43:E8:28:FC
X509v3 Authority Key Identifier:
keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f8:af:9d:56:3a:e8:2f:a3:54:79:a2:78:2e:64:c6:35:a1:
2e:81:5e:81:2d:c2:2b:ac:20:01:27:3a:c6:d2:c1:45:5a:fb:
b8:af:b0:91:d1:3e:8e:cb:4e:19:4d:2f:b2:7b:09:98:9c:d8:
be:85:05:3d:06:12:3a:92:92:84:2a:05:88:20:f5:2d:79:3d:
fe:c4:5b:65:34:6f:ba:2d:60:fb:f8:66:64:b7:09:91:f4:bd:
0c:38:85:36:b5:29:77:01:fa:06:9e:10:ed:8c:fc:45:60:e0:
2c:06:44:c8:22:3c:97:37:06:50:43:aa:63:68:15:31:9a:fd:
83:36:22:1f:ff:f2:db:2b:03:cf:bb:b6:4b:7f:03:31:68:14:
61:9f:ce:30:32:28:92:c7:36:7b:b9:67:c3:0a:ba:9e:cb:00:
63:8b:f7:8a:03:68:48:6d:43:cf:d4:29:e3:1c:38:32:21:1f:
52:5d:f0:d0:12:0d:0c:96:11:a1:1a:65:24:23:c8:85:ef:51:
1c:0d:0d:bf:d5:0d:76:83:9d:dd:9f:bb:85:cc:16:b5:a3:5e:
a9:2f:46:9b:9d:27:1b:95:3e:e9:a9:c6:78:d1:8c:1a:52:b9:
43:c3:78:53:33:32:ed:20:fe:c5:ee:7d:77:fe:15:d6:78:8f:
9c:bf:51:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:27:15 2025 by rpki-client