
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
File: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft (raw, json)
Hash identifier: AysfBw3CPjGDc3Lj6K/skikD6X4JGLKJ5ETZyRt2vDU=
Subject key identifier: 0B:98:ED:99:BF:38:F7:34:4B:8A:2C:9E:7F:E6:5C:DF:AD:47:A8:CF
Authority key identifier: ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95
Certificate issuer: /CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
Certificate serial: 019749D59E8DD8FA4997F84D72CEDF12CC05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
Manifest number: 0453
Signing time: Sat 07 Jun 2025 10:00:25 +0000
Manifest this update: Sat 07 Jun 2025 10:00:25 +0000
Manifest next update: Sun 08 Jun 2025 10:00:25 +0000
Files and hashes: 1: 7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl (hash: 0CsdnRTP9m+5xX32yNk6rfAm4z6FPKfutY9DNvR+Noc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:9e:8d:d8:fa:49:97:f8:4d:72:ce:df:12:cc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9a3ec7cb3b190e7213099de1671bea2d328a95
Validity
Not Before: Jun 7 10:00:25 2025 GMT
Not After : Jun 8 10:00:25 2025 GMT
Subject: CN=0b98ed99bf38f7344b8a2c9e7fe65cdfad47a8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:23:49:fc:a8:94:d4:98:14:91:4b:60:b1:35:
ec:de:fa:bc:16:72:0e:ce:59:f1:fa:cc:74:74:14:
0c:a4:bc:da:e2:5e:04:cf:1c:0d:bf:c3:30:aa:bc:
13:05:2b:98:6a:83:96:8f:a8:f6:f7:0e:3b:95:77:
d6:f4:39:8f:a9:60:ca:30:41:5f:44:94:c1:db:00:
64:4b:b0:c4:0e:90:c8:80:cb:24:55:4b:73:0f:ca:
ed:8f:8a:56:46:14:03:dd:af:d4:b7:bf:b1:35:a7:
08:b8:02:51:95:7b:00:94:6f:2c:de:35:8f:ac:34:
98:ea:88:15:f9:71:90:b8:a9:93:fa:30:96:10:75:
ee:8f:06:31:f2:26:cb:55:18:f5:f6:80:36:82:b1:
4a:5e:8d:5a:08:d4:34:5e:27:32:0e:73:d8:34:a8:
96:b1:3a:18:ea:96:ef:c4:3a:54:2a:ac:01:48:ed:
15:86:aa:ae:5f:8f:da:ed:e3:bd:9d:55:88:7c:0c:
f7:df:30:3b:cc:96:f3:e4:9e:a6:6b:8c:64:ef:2c:
6d:6f:34:3e:ae:bf:34:9a:8a:36:d5:cd:b5:11:5d:
83:5f:7c:0b:01:af:53:2a:d6:fa:8b:a8:40:a9:9f:
f2:de:cf:dd:bc:8f:7a:c5:84:53:b0:06:f8:79:aa:
3f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:98:ED:99:BF:38:F7:34:4B:8A:2C:9E:7F:E6:5C:DF:AD:47:A8:CF
X509v3 Authority Key Identifier:
keyid:ED:9A:3E:C7:CB:3B:19:0E:72:13:09:9D:E1:67:1B:EA:2D:32:8A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/96973e-2bdb-4397-ae1a-a442f47764d3/1/7Zo-x8s7GQ5yEwmd4Wcb6i0yipU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:58:07:72:21:b0:fd:e7:67:74:4d:85:6b:f3:9b:67:d8:44:
61:ad:f8:52:7e:c6:e1:47:56:43:66:c4:95:a1:74:5a:9f:98:
60:9b:37:1e:b6:bd:8e:34:51:e3:5c:43:41:d7:8a:29:23:84:
f7:59:c2:c5:f9:84:3a:3e:b9:bf:90:ba:3f:0d:c7:7f:ec:ab:
78:15:6a:5e:d6:ed:15:4f:a8:fd:02:83:bb:c4:16:0a:c4:c4:
58:29:2e:2d:20:15:ce:62:a9:bc:e1:c7:7e:6b:81:c4:84:69:
93:81:b7:25:e4:ee:b1:2e:a0:ef:3f:4d:42:b7:e5:1c:20:78:
75:8c:79:c5:bb:fc:21:75:e6:c8:6f:ff:86:a1:7f:98:d9:d4:
81:66:eb:8d:f4:a5:70:d8:83:1c:53:d0:d3:13:25:85:dd:c9:
da:27:e9:1b:dc:6a:c7:ad:ed:21:d6:49:e6:7b:08:58:20:e4:
0c:1e:37:42:c4:9f:5c:a2:b0:6c:1d:85:4e:e5:e1:90:59:73:
a1:e5:eb:d4:24:d8:fa:0d:1c:ea:2f:20:93:fc:1d:d5:39:94:
e0:17:35:38:1d:81:44:85:d1:93:46:22:50:3b:fc:4c:9d:e8:
a8:34:02:ad:37:74:32:69:0e:74:d3:6e:87:11:64:e8:59:47:
7e:65:22:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:34:37 2025 by rpki-client