Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
File: m7OdtQEo2zUK68hDgISZGLsF5wU.mft (raw, json)
Hash identifier: l/5Z65z9NfrwbCcU9AdqRpwm9J7xiAPshXb0c4K7LLY=
Subject key identifier: 91:9B:1D:39:E7:B5:26:1B:11:24:2B:09:8A:8D:1E:5E:4C:8E:61:3F
Authority key identifier: 9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
Certificate issuer: /CN=9bb39db50128db350aebc84380849918bb05e705
Certificate serial: 019650489E2E3E7AEE231A72546DC2253868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
Manifest number: 0F6C
Signing time: Sat 19 Apr 2025 23:00:58 +0000
Manifest this update: Sat 19 Apr 2025 23:00:58 +0000
Manifest next update: Sun 20 Apr 2025 23:00:58 +0000
Files and hashes: 1: m7OdtQEo2zUK68hDgISZGLsF5wU.crl (hash: LcD1QnINQ9dHbheoDy9Oy8rI9TGeTYb8HM6HoQmLP9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:9e:2e:3e:7a:ee:23:1a:72:54:6d:c2:25:38:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb39db50128db350aebc84380849918bb05e705
Validity
Not Before: Apr 19 23:00:58 2025 GMT
Not After : Apr 20 23:00:58 2025 GMT
Subject: CN=919b1d39e7b5261b11242b098a8d1e5e4c8e613f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:1c:75:96:89:04:d6:59:b4:eb:cb:2e:fb:
b2:c4:9d:8d:c3:ab:6a:ad:76:89:0b:08:9c:52:cf:
0f:68:7d:f6:ff:fa:78:01:6c:f4:46:fd:5f:21:4d:
d0:76:58:bc:d8:0d:13:71:63:49:7e:7d:6c:21:bb:
4e:f2:52:1c:a8:19:5d:e8:49:16:3a:13:0d:ed:94:
59:c1:0f:cc:60:f4:0b:6d:29:a0:e7:a3:b3:20:c0:
c7:11:10:b2:7c:ba:99:d3:7c:ce:0b:7d:9e:61:9f:
24:02:1f:3f:83:b5:43:ac:a9:44:68:8c:5f:bd:e3:
a9:43:b8:a4:00:9e:2f:65:d2:9b:99:89:3f:95:be:
6a:0b:ea:2d:ed:e3:2f:e4:61:ec:b6:29:c9:f7:6e:
72:5e:a8:1d:8d:eb:8c:58:67:50:09:9f:f5:07:9b:
ef:50:54:a0:01:e8:ba:cc:86:ef:48:28:c7:0e:23:
8c:7e:78:9e:55:1c:d8:1c:42:5a:a5:54:34:37:f1:
6f:69:ad:ce:8f:6d:99:f0:e2:8a:f3:ad:4a:2c:91:
d2:1c:d6:70:7a:a7:6d:6b:d8:15:2d:7d:61:e2:e4:
81:90:7a:19:ea:ae:93:4c:21:26:5f:19:01:fe:97:
2b:95:e3:84:19:15:35:e6:86:28:54:77:f0:52:68:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9B:1D:39:E7:B5:26:1B:11:24:2B:09:8A:8D:1E:5E:4C:8E:61:3F
X509v3 Authority Key Identifier:
keyid:9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b4:7d:c8:22:e3:b1:0f:f7:af:b3:2c:76:a0:80:ea:f8:b9:
7a:4c:db:d2:8b:58:06:27:13:23:27:1f:47:6c:c3:68:34:2d:
02:3e:b6:b5:6a:55:8f:12:dd:80:98:9d:d3:5c:b6:9c:73:c3:
1b:d2:35:22:83:d5:f6:3f:9f:b7:e8:69:2a:f4:38:e7:97:31:
7e:1b:37:2f:03:dd:ef:5a:58:34:e2:14:54:1b:4d:2d:f8:7e:
f2:3d:ed:f5:17:83:69:66:3b:c4:f9:c9:f3:35:73:5b:cc:e7:
67:0a:63:78:da:2c:07:96:26:41:0e:62:b7:12:31:55:60:cb:
bb:35:35:19:69:fd:ef:46:9a:e2:a1:24:2f:b1:75:68:39:d2:
e0:84:5b:12:4b:a5:1d:a4:67:9f:1d:f1:50:fe:5e:4e:42:0f:
07:ea:02:9e:be:1a:7f:14:0d:0e:f5:20:c1:2e:04:df:0c:f8:
b3:2e:41:63:d4:09:42:67:78:38:0f:e3:a9:f5:c8:fa:6f:b3:
36:09:53:6b:86:02:1e:cf:c7:7e:ad:f2:f6:8c:a4:a0:50:33:
c2:70:a2:b2:cf:20:f6:5a:12:a5:a7:56:82:44:a9:a5:36:a1:
64:a2:84:08:22:a8:73:bb:42:b6:d5:04:06:ab:33:d7:c5:e2:
c2:56:3e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:25:00 2025 by rpki-client