Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
File: 7-oXe8wrDvZMq2BObmQnsa3gv2k.mft (raw, json)
Hash identifier: 6670gglWqRk6SoBqB8McGwi9x6QhuCmSoquueXGir2Y=
Subject key identifier: 39:81:62:DB:C2:03:2C:66:63:2F:BC:CC:61:49:53:43:F7:AE:10:BF
Authority key identifier: EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
Certificate issuer: /CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Certificate serial: 0196561360F65A2F57B601AEE92FBBE8CAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
Manifest number: 0D64
Signing time: Mon 21 Apr 2025 02:00:32 +0000
Manifest this update: Mon 21 Apr 2025 02:00:32 +0000
Manifest next update: Tue 22 Apr 2025 02:00:32 +0000
Files and hashes: 1: 7-oXe8wrDvZMq2BObmQnsa3gv2k.crl (hash: QiEAJ/2rluKDjs9y96+kGcnXHT4fMHVZG5FyLGIVqRY=)
2: BfBzjofHcSu4a3jygqfPxr7xm38.roa (hash: WZsJkNeqT7b0+zK6F4CNPynL3I93rxtNrXgK5qWCEEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:60:f6:5a:2f:57:b6:01:ae:e9:2f:bb:e8:ca:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Validity
Not Before: Apr 21 02:00:32 2025 GMT
Not After : Apr 22 02:00:32 2025 GMT
Subject: CN=398162dbc2032c66632fbccc61495343f7ae10bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5d:cd:41:d0:5e:69:c3:b2:e3:b0:5c:73:e7:
3c:00:82:58:bb:32:60:54:ca:ca:e5:c2:5b:ab:0a:
e9:ac:bf:54:3b:4c:2e:fc:d6:75:c1:de:45:c8:4c:
7b:18:f8:cf:2c:b8:81:6e:a9:d1:4a:d0:4a:a0:ae:
83:3a:3a:e6:2e:ff:19:73:51:89:7b:ba:61:34:11:
3e:1d:43:ac:71:76:7d:ce:7e:8f:65:c1:36:4d:cf:
ad:36:d8:6d:c6:a1:ec:10:c3:af:8e:3e:d5:64:2e:
bd:e8:f1:f7:4f:a1:33:94:c8:e8:b4:67:96:2c:91:
9c:78:f8:82:60:c8:82:35:58:79:d8:fd:56:95:17:
07:16:94:fd:0a:2e:c3:b7:29:ba:42:43:a7:6b:e7:
23:56:6a:c2:df:c7:c0:22:c9:c9:19:ab:3c:8a:31:
41:be:41:24:d0:d5:c4:18:bb:5f:e8:86:cb:74:e5:
bd:41:82:f3:7d:74:67:fc:51:26:fe:8e:3b:14:18:
aa:9c:e5:d9:72:2d:d1:d2:ce:32:72:c6:00:6c:fd:
5a:fb:76:00:96:fe:01:7d:32:85:9b:1a:2a:83:38:
ac:29:fa:65:61:cb:16:fd:6a:7b:41:de:3e:c9:7d:
cd:cc:e2:f7:1b:ac:ac:50:49:43:85:b7:77:d9:5b:
70:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:81:62:DB:C2:03:2C:66:63:2F:BC:CC:61:49:53:43:F7:AE:10:BF
X509v3 Authority Key Identifier:
keyid:EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:00:9d:36:41:6b:28:31:af:72:96:a0:e7:62:fa:9b:36:e5:
79:c3:e7:25:58:fb:f5:e1:de:2f:9c:fb:58:db:da:f3:f3:20:
4b:cc:c6:4c:d2:05:4c:84:83:09:ad:f0:bd:7d:5d:f6:55:d1:
46:90:df:9d:ee:4d:cf:85:8b:46:d5:fa:95:29:c3:61:b2:cc:
bd:49:5d:d5:20:72:be:51:78:31:81:f7:14:40:39:8a:02:04:
a7:0b:54:77:fc:b1:40:54:40:82:e9:75:64:97:2a:8a:b1:46:
fd:ea:e0:22:98:61:0f:e8:b6:00:18:47:37:84:ee:ce:37:18:
ec:24:7c:80:5a:e8:59:ef:44:62:87:1e:4a:be:4d:e4:e4:d2:
73:d7:2a:ed:73:0b:cc:2a:5b:2a:63:e6:82:d4:3b:24:fd:00:
bd:fc:f2:8e:12:d8:fe:e1:91:54:9b:72:ef:2e:a3:ce:65:3f:
bf:c2:69:5c:c9:3f:70:b2:ca:78:23:36:67:2e:74:6f:37:2c:
cb:94:af:66:bc:bb:c7:dd:cb:c3:a2:95:9f:3e:eb:76:f9:1b:
fd:00:82:e9:59:95:b3:b2:50:0d:5a:52:7e:b9:d2:64:8c:b2:
0f:80:27:4c:93:2a:00:16:b3:64:bf:27:01:ff:e3:80:ad:08:
aa:b1:8f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:31 2025 by rpki-client