Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier: B4qU0NBKKniZDD7sgKqJxTkzoaNUnl/kQUfW2nMrmFI=
Subject key identifier: 97:07:2D:74:FE:F1:78:50:A5:B5:FF:F7:06:5C:8A:5C:A8:16:07:64
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer: /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial: 01965D960ADCB99C5ECD8942512E845304EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number: 0286
Signing time: Tue 22 Apr 2025 13:00:36 +0000
Manifest this update: Tue 22 Apr 2025 13:00:36 +0000
Manifest next update: Wed 23 Apr 2025 13:00:36 +0000
Files and hashes: 1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: 8Dj1j9FhVL0+zcnjuy4ENxlJFbzsoi4U8QWBmYf9SII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:96:0a:dc:b9:9c:5e:cd:89:42:51:2e:84:53:04:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Validity
Not Before: Apr 22 13:00:36 2025 GMT
Not After : Apr 23 13:00:36 2025 GMT
Subject: CN=97072d74fef17850a5b5fff7065c8a5ca8160764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:e2:a1:10:55:23:a6:12:ad:21:47:39:59:
16:c9:17:ea:88:69:07:ba:5a:4f:f0:fc:3f:20:76:
8e:7b:99:c9:cd:88:0a:c5:36:99:6d:32:87:e6:e4:
29:e1:20:eb:d3:81:71:2e:49:04:99:91:b3:bc:92:
5e:1f:d7:b0:88:a2:c0:ac:04:75:e8:c7:c9:82:88:
9a:fd:26:fe:fb:00:77:3f:58:ee:88:84:6c:55:bb:
46:de:d0:44:34:af:0f:bd:12:f7:74:1a:31:09:92:
e6:7d:2d:49:d9:0d:1c:e8:cd:47:69:da:2c:eb:32:
88:0a:ad:02:34:1b:e0:15:5c:7f:00:8b:24:6b:a0:
34:05:51:44:35:87:88:46:7f:14:03:3b:b0:6c:b4:
b5:93:e5:6c:b0:ad:0b:c9:bc:f5:1c:c2:ef:07:8c:
da:e3:44:1c:68:1c:bd:72:95:8f:61:39:5b:1c:b5:
a6:13:6b:af:ea:e4:b6:1c:72:2f:1e:ea:2e:c6:9c:
06:4e:ad:7d:c1:ae:c1:4a:63:06:52:f5:05:38:d9:
b9:1e:11:b9:25:db:21:f2:9f:86:7c:aa:8c:92:4f:
da:fc:46:06:33:f9:a4:19:2d:ea:71:10:ae:5d:90:
d1:53:56:4b:30:f6:a5:f1:ce:34:96:89:2b:6b:e2:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:07:2D:74:FE:F1:78:50:A5:B5:FF:F7:06:5C:8A:5C:A8:16:07:64
X509v3 Authority Key Identifier:
keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:58:f1:6e:7d:fc:d7:62:24:44:af:9e:9c:73:52:93:e7:5c:
95:59:a9:e6:55:37:18:50:c3:c2:b2:13:e6:8e:92:4b:20:84:
47:f8:3e:a7:6e:de:2d:80:82:ae:86:d1:5d:83:e8:80:51:32:
9b:d1:cf:af:4a:f9:e5:1d:a1:ac:97:0d:47:90:e4:aa:b2:1f:
bd:32:16:b0:6b:84:5e:0e:f2:2e:ea:fb:f9:c0:5c:ae:50:cc:
2d:06:13:76:2b:73:38:18:a5:f7:df:b9:ff:ea:24:d3:89:4c:
3f:58:05:0c:fc:51:46:dc:aa:e8:ce:97:4f:e7:4a:c2:31:06:
3b:54:a6:5a:0f:ce:70:8c:42:79:d7:af:6d:6f:40:d4:4c:dd:
c1:f9:a3:fa:ae:38:ad:5f:b3:c0:68:27:06:71:1e:f9:b4:10:
83:d3:95:88:a5:04:a3:6a:f5:16:38:96:fb:31:53:f6:47:d1:
aa:50:d8:00:bd:ce:87:d8:26:f1:e5:75:bf:d5:0a:49:8c:d0:
af:05:25:5d:e2:1e:93:08:eb:81:2c:17:7f:37:72:f6:94:c5:
fe:78:04:64:fb:a2:99:b1:e9:ca:2d:32:5d:ec:b9:2e:a0:75:
51:c9:2b:dd:59:bf:96:27:71:45:f7:d0:71:d2:6b:0c:cb:05:
28:ca:42:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:55:42 2025 by rpki-client