Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
File: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json)
Hash identifier: ZbDkXuHLG8bt+T0GzJEygMsYRV+txJwD+GYA+5FASD8=
Subject key identifier: DA:1A:D6:65:99:89:15:81:42:BC:34:EA:08:81:52:51:44:F1:98:B0
Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Certificate issuer: /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Certificate serial: 01974FA11ECB16D10B3EDE9E854989A5A41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
Manifest number: 12DF
Signing time: Sun 08 Jun 2025 13:00:48 +0000
Manifest this update: Sun 08 Jun 2025 13:00:48 +0000
Manifest next update: Mon 09 Jun 2025 13:00:48 +0000
Files and hashes: 1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: Ia/irBvgWR4xLkEejjdsHucQRTNHcDp+9h8BIEJo3aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:1e:cb:16:d1:0b:3e:de:9e:85:49:89:a5:a4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Validity
Not Before: Jun 8 13:00:48 2025 GMT
Not After : Jun 9 13:00:48 2025 GMT
Subject: CN=da1ad6659989158142bc34ea0881525144f198b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7d:b4:52:10:96:a2:31:f0:ff:52:99:d0:74:
68:6f:8d:05:81:f0:b0:46:59:75:bd:72:5c:49:85:
cb:ea:b1:09:09:03:9f:3d:c6:f7:23:6c:fa:1c:b4:
e2:7f:ef:92:42:16:23:30:94:35:1c:dc:64:f1:09:
53:fa:86:41:51:4c:95:00:3b:0e:56:e3:c5:03:d0:
49:2b:1a:55:11:11:10:e8:2c:d9:50:be:8a:bc:fd:
4f:5a:f5:3c:da:1d:66:c7:64:7d:84:30:73:ba:35:
34:8c:98:40:6a:cc:f1:49:dd:84:41:04:9f:1c:71:
57:2b:ac:8d:d7:dc:8e:4a:75:c2:e3:b4:7b:7d:e5:
36:19:f4:8e:68:1b:e5:64:fe:50:04:61:7c:68:ec:
6c:52:17:49:2b:26:ed:32:0d:bf:04:55:69:ab:c0:
ab:f1:d0:2b:a6:ce:76:33:c0:9e:af:68:d2:e6:00:
ec:81:0c:32:08:7f:3e:61:09:a7:82:cf:c4:17:39:
df:e8:74:10:88:22:cb:14:7c:7c:6b:a9:33:8c:e1:
b6:0a:a1:d9:9b:68:c3:2e:5f:07:62:03:7b:32:61:
ad:76:9b:2f:8f:f5:dc:2e:16:93:f5:0b:97:3c:76:
08:82:f9:63:2a:b4:d9:b4:56:0b:36:56:23:62:46:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1A:D6:65:99:89:15:81:42:BC:34:EA:08:81:52:51:44:F1:98:B0
X509v3 Authority Key Identifier:
keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:43:48:77:ba:5d:00:9f:e2:4c:2d:f0:28:25:08:83:f9:3f:
8e:bd:24:80:ad:42:38:21:69:b4:7b:f5:89:01:8e:75:f8:79:
66:77:c1:ce:b1:cc:f6:a4:5a:90:29:c9:04:b5:64:d2:f8:4f:
73:ef:bb:69:0d:04:03:df:6f:59:58:2e:fc:34:1d:ec:42:36:
d5:a6:7a:82:be:76:37:b8:41:9a:8d:ad:ab:a2:56:59:92:29:
a6:fa:20:12:de:a1:f4:4f:d8:98:cc:a1:f9:2f:fc:c1:f8:8a:
31:55:84:1b:ea:7c:60:2f:cd:39:27:52:c2:9b:eb:59:45:87:
c7:86:5f:15:a1:da:24:02:65:f0:4b:d4:c6:5d:21:70:af:65:
ab:12:bc:b5:6e:cf:6c:7a:e4:52:d4:34:13:96:fb:d2:7a:fd:
cc:8f:8d:3e:63:9d:af:ef:58:ee:75:f7:98:78:fc:be:c9:ab:
ad:60:6f:ec:d5:12:0c:89:0b:28:45:db:fa:d5:be:0e:8e:02:
79:9f:a4:0f:cf:99:57:e1:72:3f:b9:9c:c3:52:dd:69:9c:7e:
7f:97:b9:49:20:9d:1f:c8:0d:43:22:2e:6b:47:61:9b:fe:b0:
27:3e:45:91:57:79:b3:23:85:2a:14:10:ed:6d:0d:23:04:bc:
8f:cc:20:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:11:42 2025 by rpki-client