Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
File: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft (raw, json)
Hash identifier: VPJe+f4wLtNBBYHHzjbBlN23IFe22bbIQ81SNi7jSrA=
Subject key identifier: 75:EB:B7:BA:91:44:C9:DD:12:E5:B7:97:EC:9D:7F:27:7D:28:0B:5B
Authority key identifier: EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
Certificate issuer: /CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Certificate serial: 01965915546DA84A137C4E421283FB5653C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
Manifest number: 055D
Signing time: Mon 21 Apr 2025 16:01:32 +0000
Manifest this update: Mon 21 Apr 2025 16:01:32 +0000
Manifest next update: Tue 22 Apr 2025 16:01:32 +0000
Files and hashes: 1: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl (hash: w/gi4P2z7VEi6cX4Wy+8+R5qVNrsMtBkL19gLrHPY3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:54:6d:a8:4a:13:7c:4e:42:12:83:fb:56:53:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Validity
Not Before: Apr 21 16:01:32 2025 GMT
Not After : Apr 22 16:01:32 2025 GMT
Subject: CN=75ebb7ba9144c9dd12e5b797ec9d7f277d280b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:90:01:00:f5:a9:43:f5:e5:9f:d6:c4:76:
94:c6:25:c7:e3:a1:9c:2a:1d:80:cb:71:be:7f:fc:
d1:cc:84:02:fb:b0:62:ca:4b:91:3d:ae:6c:2b:18:
19:c0:53:25:81:b8:12:f3:66:f6:11:01:27:b3:61:
f6:2e:2d:1c:3b:c8:cc:5b:8e:6b:e2:df:bc:56:68:
f7:a2:71:e0:b4:05:18:2d:0f:d9:bf:84:05:fb:f9:
8d:10:67:df:02:f6:66:ea:b6:ec:d5:ab:f3:7f:c6:
8f:8f:fc:e9:4b:b0:cf:4b:c4:72:f1:dc:32:a9:1c:
39:0c:7c:1b:3a:a1:60:1e:14:c5:51:f6:6e:f4:7a:
49:80:47:01:d6:61:85:09:a6:27:c6:e0:a5:0c:fa:
6e:a4:dc:d0:47:4c:9c:7a:04:96:98:5f:43:b6:57:
ae:be:8f:4d:5b:a0:47:43:f9:9f:49:f8:ba:c6:ca:
eb:c0:9b:f3:bb:7b:c9:58:10:f5:54:c1:6e:ff:df:
a0:59:3d:08:bd:fb:fe:85:4f:31:11:e9:58:b0:5d:
34:55:6d:fb:05:00:48:56:52:1f:1e:f3:d5:4e:eb:
de:26:f9:c8:23:4c:4a:ec:ff:a0:0d:e4:a7:a7:81:
c9:df:3d:57:ab:ff:b5:8e:f3:b1:9e:df:ba:a8:83:
6c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EB:B7:BA:91:44:C9:DD:12:E5:B7:97:EC:9D:7F:27:7D:28:0B:5B
X509v3 Authority Key Identifier:
keyid:EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:08:09:44:db:c9:75:bd:fc:5e:23:04:e5:fc:37:49:97:33:
37:76:f2:dc:75:33:b3:3f:f4:77:46:a7:a7:ba:3d:b6:05:62:
b3:05:ba:c5:8a:dd:8b:c7:96:39:79:39:64:5e:41:aa:79:89:
1f:9a:56:f6:f2:b9:68:03:79:d6:00:60:d6:fb:b6:36:4b:70:
0d:03:d8:33:41:0b:38:33:a5:56:39:f8:1b:76:aa:e0:72:e3:
5c:b6:32:0e:50:33:39:4a:a9:ae:e3:b2:ca:9a:f1:1a:57:34:
8d:84:b2:d6:d5:ff:34:c6:a0:9b:57:58:04:99:a9:64:42:81:
0a:4e:5e:c3:52:2b:02:95:26:b5:0f:09:75:2e:b1:eb:28:3f:
b3:e5:eb:0b:a8:14:c4:6e:81:89:6d:c0:08:f4:fc:0b:2e:63:
a5:ec:58:8e:a6:b3:55:6a:a3:11:c6:89:c8:0b:95:8c:20:8b:
9d:89:64:6a:92:ef:e4:10:ed:da:45:39:97:75:11:51:0e:d4:
67:d9:36:d0:7f:09:c4:33:95:90:f5:41:52:68:b8:23:ea:be:
ad:6e:fd:21:10:32:87:51:3a:95:ba:d3:26:fc:d7:9a:5d:ba:
1a:e2:a8:8a:54:4a:15:09:62:80:3f:90:d0:d4:52:46:de:14:
bd:38:1c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:44 2025 by rpki-client