Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
File: m7OdtQEo2zUK68hDgISZGLsF5wU.mft (raw, json)
Hash identifier: iFRDPIxQntVU5fJEclcPypL239gnG2fGdA5quGeIM/I=
Subject key identifier: 71:3C:9E:9C:2F:9D:81:F8:22:B4:18:7F:88:3B:50:CF:0C:B2:71:75
Authority key identifier: 9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
Certificate issuer: /CN=9bb39db50128db350aebc84380849918bb05e705
Certificate serial: 019749682754173602F89F3F06091F094642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
Manifest number: 0FED
Signing time: Sat 07 Jun 2025 08:00:51 +0000
Manifest this update: Sat 07 Jun 2025 08:00:51 +0000
Manifest next update: Sun 08 Jun 2025 08:00:51 +0000
Files and hashes: 1: m7OdtQEo2zUK68hDgISZGLsF5wU.crl (hash: kwAoo0v5bprhKewzYCOA+JhlwQgm6Nu+n4Dudure3eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:27:54:17:36:02:f8:9f:3f:06:09:1f:09:46:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb39db50128db350aebc84380849918bb05e705
Validity
Not Before: Jun 7 08:00:51 2025 GMT
Not After : Jun 8 08:00:51 2025 GMT
Subject: CN=713c9e9c2f9d81f822b4187f883b50cf0cb27175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:eb:c0:f8:b5:32:66:11:50:fe:82:b1:1e:
6d:9c:0c:be:5d:fc:0e:1a:78:f7:83:f4:f1:dd:98:
31:ed:74:98:5a:79:69:ae:21:2e:3f:6c:0e:6b:f2:
91:08:af:e1:a6:eb:8c:f5:66:fb:e1:74:48:4a:7b:
d3:e3:ab:b8:89:26:91:c5:be:57:40:1d:de:77:32:
eb:b7:a7:f0:73:4a:20:88:5a:9b:bf:d0:3c:ca:f9:
d9:de:5e:01:be:0a:08:66:49:70:bf:62:2c:c7:81:
16:34:a0:6f:60:43:50:b6:20:8b:e9:88:72:c8:28:
b4:14:c5:6f:6d:f7:85:54:a3:25:77:0f:70:4a:5a:
5c:09:5e:4b:90:3c:76:91:4d:12:94:5a:fc:d9:2b:
c2:45:d1:a8:91:ef:f3:88:05:68:64:fd:82:ec:98:
8d:5e:69:b5:e3:52:62:26:b7:a3:db:93:cb:24:bf:
8f:19:03:a3:5f:a8:b5:d5:b5:90:8a:0c:da:21:6e:
0a:e5:40:05:2c:ac:ab:c5:1b:38:bf:66:18:25:9f:
39:a5:a3:ba:de:7f:6c:3f:e2:dc:fc:6d:ec:2e:f4:
f9:38:7b:4d:48:07:bb:39:ab:c1:ba:7c:3b:54:37:
90:35:c3:9b:90:49:4d:91:c7:c9:e1:a4:0b:fd:4c:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3C:9E:9C:2F:9D:81:F8:22:B4:18:7F:88:3B:50:CF:0C:B2:71:75
X509v3 Authority Key Identifier:
keyid:9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:82:96:2d:ae:27:53:90:d8:42:a5:41:71:06:63:86:c0:19:
32:6a:a7:64:36:02:9e:2f:ec:46:b8:22:d7:3d:64:92:d6:0d:
12:9e:c9:7f:a0:e8:04:9f:98:e9:59:15:0c:a6:3f:d5:a9:e7:
76:5a:c8:17:26:b8:ae:7f:96:ea:16:5b:52:d7:80:81:c4:76:
52:6d:c9:85:a0:7d:8a:36:a7:c7:73:ac:c9:40:ef:50:b7:e6:
64:a7:b0:1c:67:bf:e0:72:8a:e1:57:7a:9f:e3:78:f8:b7:c7:
94:57:b3:e5:70:d2:d6:5a:cd:ab:df:a5:80:ec:69:97:5d:35:
ef:e2:a8:8a:59:32:d0:70:f7:92:1f:b4:c2:fc:8f:76:38:13:
aa:55:76:cb:7c:29:f0:a2:81:22:19:94:f5:fa:9b:12:0c:84:
89:9a:9c:1a:99:65:8d:43:32:e3:13:02:fc:c1:80:5a:40:8b:
af:03:44:06:2b:90:50:cf:fe:e6:8a:dd:c5:c7:62:9e:d5:63:
5e:ee:69:55:7e:30:10:96:94:08:4e:35:cf:d4:20:9b:bf:5b:
21:16:16:05:23:84:a3:e6:71:2a:28:95:ff:30:90:2f:63:b7:
7a:93:bb:1d:16:2d:5e:8a:d0:e0:15:70:d1:5f:79:50:c3:05:
fa:af:7d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:14 2025 by rpki-client