Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
File: 7XZO39sbgh1dJayLeggKapBvprA.mft (raw, json)
Hash identifier: F46jmqg0v7k1+W7c4+bhKCxdeXk8y1kJC22s0Xu89RA=
Subject key identifier: 6F:7D:91:D8:98:9D:34:4A:FB:57:68:4A:D7:DC:51:8B:8F:3D:9E:64
Authority key identifier: ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
Certificate issuer: /CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Certificate serial: 01965B39E66F1E49776FB9FF3566A2C70089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
Manifest number: 0151
Signing time: Tue 22 Apr 2025 02:00:43 +0000
Manifest this update: Tue 22 Apr 2025 02:00:43 +0000
Manifest next update: Wed 23 Apr 2025 02:00:43 +0000
Files and hashes: 1: 57xao0M2AdqrH2enoUGayVFXdGY.roa (hash: aul3XKpu3FPCVY/zVFWyx2xUMjYZdpyFV6zqK4hIpg4=)
2: 7XZO39sbgh1dJayLeggKapBvprA.crl (hash: QGeEZS8VevpocqSSSysgvSbCX3OdayS1DVk3gc18MTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:39:e6:6f:1e:49:77:6f:b9:ff:35:66:a2:c7:00:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Validity
Not Before: Apr 22 02:00:43 2025 GMT
Not After : Apr 23 02:00:43 2025 GMT
Subject: CN=6f7d91d8989d344afb57684ad7dc518b8f3d9e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:09:c4:76:29:a2:13:52:5f:89:16:47:ad:b4:
21:31:02:ea:fc:f5:c6:59:a3:89:90:f2:03:3e:12:
f6:26:6c:80:6c:e5:82:b7:72:b0:01:68:05:e6:da:
23:8d:b2:5c:65:2f:be:db:dd:0e:ca:95:28:9f:8c:
ea:53:77:6b:ed:de:e7:05:c0:ad:3d:11:dd:b3:64:
96:44:69:3f:08:ce:a1:73:bb:d1:e8:84:42:3d:a6:
a3:db:89:e8:77:50:29:1b:6f:60:63:ce:91:1b:73:
38:9c:93:64:87:b0:e8:38:fd:38:0d:77:0b:10:c0:
2e:27:6e:99:f6:12:e3:7f:69:78:00:23:58:44:a5:
3c:6e:39:3c:9a:9e:27:86:2f:6a:0e:d3:ff:11:7a:
0b:5b:3d:ec:03:54:9b:ba:16:74:c8:04:52:ba:f0:
ba:b4:79:db:ae:38:70:e5:50:14:41:7b:88:5a:41:
9a:f0:37:a7:f3:8c:f8:ce:fa:5d:d7:d3:e8:5b:d0:
0b:9f:27:ed:c3:96:6e:31:1a:42:c8:51:73:3a:f1:
7f:99:a0:78:74:32:60:7d:94:63:78:7b:c8:fc:98:
02:25:fe:9b:59:86:69:3f:3f:9c:2e:b6:59:13:64:
b9:f2:ed:70:8c:73:1a:d4:e8:f3:76:21:e0:85:af:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7D:91:D8:98:9D:34:4A:FB:57:68:4A:D7:DC:51:8B:8F:3D:9E:64
X509v3 Authority Key Identifier:
keyid:ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5c:89:ce:22:e9:fc:54:0b:52:1b:75:6d:3a:1e:35:93:53:
5b:e6:a7:3a:d5:a1:e9:14:9f:7b:1a:9f:1a:0a:93:b6:fb:bc:
ce:d9:42:57:16:93:bb:7d:48:e8:2d:0a:fe:6c:c7:07:5b:0b:
33:e8:6a:7d:ba:b7:b5:11:81:58:c3:20:71:47:ba:e1:35:3c:
30:b5:32:ee:25:c2:db:af:c4:5e:94:49:0d:13:d0:b1:40:67:
45:db:d5:a1:50:77:8c:3e:f2:ba:8f:b4:85:3e:fe:76:1a:9a:
ad:19:bd:d3:84:1b:2c:19:08:d0:92:54:1a:2b:37:d0:63:4f:
2e:aa:33:12:23:7f:9b:4f:b0:34:31:f2:27:f6:4f:15:34:fb:
54:17:68:a4:57:43:25:58:14:23:e3:a6:6f:c4:2f:1b:2f:2d:
69:f4:db:41:4e:a0:19:e0:8e:fa:51:9b:57:1e:89:48:70:8e:
be:4c:1b:8a:da:f9:9a:30:fc:6d:31:20:17:76:ca:8a:73:83:
74:32:18:51:5d:54:42:9e:39:16:83:27:21:03:21:ad:02:3d:
37:ba:0c:06:bc:3e:dd:35:31:97:2a:5d:25:4b:db:71:f1:e3:
3e:e2:75:fe:9e:0a:18:a3:10:b3:48:a1:36:0f:4f:30:e1:a6:
96:c4:c9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:34:48 2025 by rpki-client