Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
File: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json)
Hash identifier: 1flq9WQOngtk0EEM4YpFC2gtha0F30R02jJdQv497O8=
Subject key identifier: 21:84:81:9A:28:E9:0D:2C:C0:55:34:6C:3F:37:B4:EB:31:90:E9:07
Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Certificate issuer: /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Certificate serial: 01965E3B019656A8B43F621D8AF1553BE06E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
Manifest number: 1262
Signing time: Tue 22 Apr 2025 16:00:47 +0000
Manifest this update: Tue 22 Apr 2025 16:00:47 +0000
Manifest next update: Wed 23 Apr 2025 16:00:47 +0000
Files and hashes: 1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: S8TMMTjuy1KuxBcf+lef/3cnGwBF+pT9kdCLnipfAGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3b:01:96:56:a8:b4:3f:62:1d:8a:f1:55:3b:e0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Validity
Not Before: Apr 22 16:00:47 2025 GMT
Not After : Apr 23 16:00:47 2025 GMT
Subject: CN=2184819a28e90d2cc055346c3f37b4eb3190e907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:46:dd:28:7a:2a:85:c0:c6:16:02:5b:23:
fb:4d:5f:af:6b:11:84:da:e8:8e:d8:ee:c6:c8:73:
e9:15:7b:be:0b:f6:cd:7f:59:aa:d8:02:29:37:39:
a6:b1:53:6f:45:9d:fa:e3:c6:e2:fe:ad:ed:1b:73:
e6:12:43:f1:b1:0f:56:3b:69:ac:53:f1:f2:6a:2c:
80:31:f1:ce:70:66:d9:79:4e:53:b1:03:7b:17:90:
39:e9:c3:c2:f1:33:59:ba:10:66:e3:c3:05:b8:c0:
29:48:5c:b8:5b:a0:22:08:c3:70:69:22:41:b9:c8:
de:b4:a4:48:34:4d:8c:73:b6:44:f7:9f:d3:d8:25:
3a:b1:28:e1:8b:75:2a:92:69:b4:88:a1:ed:6a:92:
f7:ae:83:2c:02:e4:f4:f0:4c:52:56:82:f8:49:25:
ba:41:73:0c:4c:24:e1:8a:a4:3a:c5:6c:67:78:5a:
7f:d2:dd:c3:2b:a8:26:dc:42:0c:4b:b8:e3:e5:5f:
63:48:8c:18:bf:c3:f5:0b:eb:4a:13:24:07:ac:33:
a4:72:3c:62:a6:1e:83:d4:bd:4f:34:2f:d1:65:09:
20:38:85:46:6e:08:7f:a5:cb:d3:63:5e:7d:5c:50:
41:f8:a5:f8:67:8b:96:56:c7:ce:fe:67:55:39:92:
4f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:84:81:9A:28:E9:0D:2C:C0:55:34:6C:3F:37:B4:EB:31:90:E9:07
X509v3 Authority Key Identifier:
keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0c:7b:6f:e1:36:de:fa:ce:be:b7:f4:2d:fc:d5:ef:14:97:
23:33:3b:f6:bd:65:2c:9c:67:82:db:71:b9:e6:ca:54:08:3b:
76:c2:ba:76:d7:ff:a6:d3:4f:0a:70:13:99:5a:68:0f:a9:a1:
63:8c:9f:33:04:1c:5e:33:c1:a0:16:7b:00:68:19:15:6d:1b:
56:a0:d5:68:61:73:be:e5:a7:bb:f1:1c:63:d0:30:0e:81:88:
b2:31:25:27:f8:10:cb:be:94:f6:e4:c6:9d:81:89:fc:0e:d9:
35:ae:f6:fd:a1:3b:0d:b4:d2:4c:fd:6a:b0:f5:1c:4d:58:be:
63:0a:1a:66:06:cd:5a:f7:9d:63:3a:31:9c:d8:1c:ed:9b:f6:
43:e2:e9:d7:d2:95:42:55:4b:53:18:5c:cb:62:7c:4a:95:11:
97:60:92:16:2a:07:3f:19:22:47:88:6a:00:4e:f4:35:ba:a2:
76:61:3c:20:f2:c1:86:31:7b:83:83:24:75:c9:15:11:ad:cc:
6b:c4:bc:a7:6a:13:68:14:ea:5b:dc:db:d7:0b:8c:63:52:61:
5b:f7:7d:37:77:03:a3:4f:42:da:e0:be:9f:87:f6:1d:0f:e4:
37:0f:76:65:c3:33:f8:e5:af:6b:aa:2f:a2:37:a5:52:c4:6e:
50:88:59:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:03:55 2025 by rpki-client