Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
File: 7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft (raw, json)
Hash identifier: 5XiT4c5EGwt2u/YTfcvANC4uzX7PkTjwq6Vuo8ZdiHM=
Subject key identifier: A9:46:87:60:34:57:D6:6C:18:1F:AD:C7:A8:29:12:39:93:AF:E9:A7
Authority key identifier: EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23
Certificate issuer: /CN=ee68b664ccd50ca767d46ffb34f53a06d120b523
Certificate serial: 01965BDEC44BA50E0F4976A0BC7E1A1039E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
Manifest number: 0928
Signing time: Tue 22 Apr 2025 05:00:47 +0000
Manifest this update: Tue 22 Apr 2025 05:00:47 +0000
Manifest next update: Wed 23 Apr 2025 05:00:47 +0000
Files and hashes: 1: 7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl (hash: BSBwhMYcUL3UxNBIBr/MuADKyHvgn/qEbp7UDrgzqOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:c4:4b:a5:0e:0f:49:76:a0:bc:7e:1a:10:39:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee68b664ccd50ca767d46ffb34f53a06d120b523
Validity
Not Before: Apr 22 05:00:47 2025 GMT
Not After : Apr 23 05:00:47 2025 GMT
Subject: CN=a94687603457d66c181fadc7a829123993afe9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:dd:a9:b9:ff:a3:ac:16:18:8f:87:fc:3e:
99:a9:75:c3:9c:0b:f9:ab:d7:05:74:a5:41:52:a0:
ba:e9:7c:b6:34:29:44:40:b9:e9:a4:41:4e:31:9d:
66:b8:2b:fb:aa:78:65:80:29:9b:a0:04:7a:e2:0a:
04:86:c8:72:e1:b0:6a:ee:02:9f:9d:dc:d5:82:bc:
1b:3d:70:57:06:e4:82:f7:45:2e:00:60:18:59:8d:
f8:08:08:f3:a4:89:ac:21:78:71:d5:89:ae:3d:33:
ab:7e:e8:8e:0f:97:18:2f:dd:d7:07:7b:22:14:28:
ea:07:e6:4f:9a:56:b0:b6:91:bb:27:0c:1c:96:1a:
1a:fe:74:fc:89:d3:59:6f:e7:87:ed:04:d1:0d:19:
dc:1c:e0:47:f6:98:0d:db:73:c8:4a:91:96:70:73:
80:ee:f7:c3:59:a8:26:3c:53:4d:85:3a:8d:74:c6:
18:fc:53:e1:f7:51:15:b4:27:f1:bf:bb:e1:c6:ee:
10:ab:db:07:a3:30:fa:5f:48:0c:7a:fc:d6:55:10:
5e:1b:87:bf:fb:9a:40:78:cf:c8:35:26:a2:c5:24:
f8:6e:3b:dd:17:06:81:08:16:50:41:79:a1:23:6c:
93:ea:76:1b:9f:fd:42:81:1e:f2:a9:f4:c2:d5:72:
7e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:46:87:60:34:57:D6:6C:18:1F:AD:C7:A8:29:12:39:93:AF:E9:A7
X509v3 Authority Key Identifier:
keyid:EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:0a:11:0e:1e:15:8b:37:63:80:0b:b8:a2:0e:62:ed:ed:fd:
99:b5:5e:27:38:9c:38:3e:5b:87:54:22:d2:e6:31:e2:38:98:
5e:06:9a:34:07:6e:cd:fb:5f:1b:ac:d7:b6:0d:84:f0:c6:c0:
27:32:78:1c:b0:e3:48:0f:a7:01:8f:a4:1e:df:17:50:49:48:
3d:20:3a:35:9a:1f:c5:82:aa:58:f6:3c:ec:a3:a2:80:b9:10:
b4:d8:af:f8:45:49:2f:7b:ef:cd:19:fd:b6:ff:9b:b8:88:a5:
39:e2:3f:1f:5c:34:8d:bf:1a:a7:cb:91:f7:a6:9f:82:dc:00:
dd:0f:7e:e6:0f:89:11:1c:51:78:d2:07:c9:08:39:ce:51:6f:
b5:35:61:66:00:b0:c4:34:17:90:72:56:46:35:cf:10:4d:a0:
2a:74:39:f6:6b:71:a1:84:f9:ca:29:d5:60:89:fc:d6:b7:a1:
38:5a:cd:44:92:f1:2c:3b:b2:39:5c:d9:6f:f2:c1:27:f8:ed:
75:f8:b9:5a:56:2f:10:bb:b9:69:b0:98:11:d9:c8:4d:43:73:
c3:1b:3b:e8:d7:b0:54:52:8a:1b:01:0f:4f:bd:28:94:25:2f:
6e:c4:93:e0:95:58:ed:b0:b1:cf:4a:3c:62:b0:ce:31:ff:91:
4a:58:aa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:34:10 2025 by rpki-client