Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
File: F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft (raw, json)
Hash identifier: 3htGNaycfRuN6pOQRNCi2nN/KrL7DJctIYyTOZSpQFk=
Subject key identifier: C5:26:22:AD:D7:8C:DC:EC:56:C5:CE:FB:0A:79:5C:D4:74:8E:FE:BA
Authority key identifier: 17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
Certificate issuer: /CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Certificate serial: 01964A7CCE7D51A7D668B62D7CC4BF79291B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
Manifest number: 07C7
Signing time: Fri 18 Apr 2025 20:00:15 +0000
Manifest this update: Fri 18 Apr 2025 20:00:15 +0000
Manifest next update: Sat 19 Apr 2025 20:00:15 +0000
Files and hashes: 1: F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl (hash: TNe2h0H5R+aWSWZUblJPOeWGwvMfnrp0gM3bFbPU5y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7c:ce:7d:51:a7:d6:68:b6:2d:7c:c4:bf:79:29:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17bcef9fa1f3b13842133aad4f7b401edc98e048
Validity
Not Before: Apr 18 20:00:15 2025 GMT
Not After : Apr 19 20:00:15 2025 GMT
Subject: CN=c52622add78cdcec56c5cefb0a795cd4748efeba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9b:5f:ef:e0:2c:52:93:89:02:33:3f:d4:72:
ce:32:22:b4:6f:1a:31:31:c2:9d:c2:d3:9f:85:9f:
84:4b:55:e2:88:b8:46:02:ec:f5:a5:e7:90:6a:c5:
e6:c6:ed:10:a9:30:c1:ef:0e:98:65:49:c5:e3:f9:
f9:25:65:9e:40:fd:98:76:10:d3:98:39:09:89:96:
de:87:87:b5:8b:48:4c:d9:a2:75:82:74:78:f6:df:
bf:18:6e:c1:07:da:0a:bd:14:db:84:40:a4:3e:b4:
69:be:1c:c1:b6:46:b8:89:6a:c0:8a:6e:e9:f4:71:
02:cf:fc:f1:98:0f:cd:4d:2e:55:bb:06:36:15:ff:
6f:28:77:6f:1d:f2:39:fd:9d:97:9f:63:01:cb:27:
97:41:9e:af:a0:43:fe:2f:84:d9:c4:73:0d:ba:4b:
0a:d2:70:fd:87:49:09:7d:39:ff:e3:9a:bb:46:ed:
d6:5d:2a:33:09:db:b6:89:d9:8d:0f:06:e4:95:32:
64:1f:96:54:4a:99:29:e3:7d:df:08:60:fa:18:54:
eb:d2:89:85:23:ba:dd:51:53:6a:8a:fc:a5:55:52:
24:90:ab:40:bb:66:a1:29:54:c6:f6:16:44:1d:8f:
c6:03:16:49:29:da:49:10:fb:c4:3f:4f:7a:e7:fd:
08:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:26:22:AD:D7:8C:DC:EC:56:C5:CE:FB:0A:79:5C:D4:74:8E:FE:BA
X509v3 Authority Key Identifier:
keyid:17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e6:1f:e9:7d:81:a2:a8:70:72:ae:6e:8f:07:50:4e:84:bd:
af:ab:e8:00:e2:75:07:71:dc:74:b9:e4:b2:8d:ae:1d:21:35:
ce:5a:71:3d:09:f7:73:0f:3c:69:e8:48:ab:7a:75:89:2a:34:
81:a5:ef:50:01:6b:58:cd:51:a3:75:e0:53:f7:b8:59:c6:c4:
26:bd:1c:79:9c:b5:91:41:73:56:39:35:5f:92:c3:91:c7:cf:
b2:9e:63:2e:58:58:c3:39:93:79:1d:a5:2b:5a:2c:c2:27:d0:
a6:57:19:8f:cf:5b:92:c0:a1:4b:24:cd:b3:5a:ee:25:b1:fb:
0c:3f:73:69:0e:1a:0e:55:ba:f5:7b:8f:24:b6:6e:17:8e:3b:
0d:f7:a2:30:e5:06:24:cf:a3:60:c6:fe:ef:a8:f5:20:c2:98:
d2:c8:f6:19:e9:bd:0f:d4:89:5c:74:3d:3f:f3:68:4f:75:a5:
85:6f:b3:8a:dc:4b:61:ee:fa:18:19:38:48:46:8a:54:08:b4:
c7:24:ac:31:6e:8a:d9:67:d8:68:dd:31:3b:52:45:3b:c6:ed:
56:69:3b:b8:ae:2e:04:64:f2:92:7b:e5:b8:dc:58:9e:5a:1f:
21:39:19:29:35:05:6d:9c:b5:90:48:74:bc:f0:2f:dc:6e:24:
fb:10:bc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:33:25 2025 by rpki-client