Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
File: 7MzCuQnHyBXKzLX85THDJSb63Vo.mft (raw, json)
Hash identifier: 4X4umMde6iCbVRTMPWnk7cnGjDtva7gpvxCLfpYvnJg=
Subject key identifier: 41:B6:FC:31:A6:13:1E:B4:A9:5C:C2:0C:75:31:A5:72:A4:17:B0:0A
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Certificate issuer: /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial: 01964BFDD9D57A18DBADEB9F6140B6C07119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
Manifest number: 11F6
Signing time: Sat 19 Apr 2025 03:00:49 +0000
Manifest this update: Sat 19 Apr 2025 03:00:49 +0000
Manifest next update: Sun 20 Apr 2025 03:00:49 +0000
Files and hashes: 1: 7MzCuQnHyBXKzLX85THDJSb63Vo.crl (hash: a8f0iw0XXYowrpNKNC43wLYQ1qvWtH0VxM86Q3c9UT0=)
2: tR3pNPDNeYZnwqD0svzDk3Ft8pc.roa (hash: d4XwjGHz7UNgEluKmVoFqdXRfZ0+gtbIwXNWFgp5zDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:d9:d5:7a:18:db:ad:eb:9f:61:40:b6:c0:71:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Validity
Not Before: Apr 19 03:00:49 2025 GMT
Not After : Apr 20 03:00:49 2025 GMT
Subject: CN=41b6fc31a6131eb4a95cc20c7531a572a417b00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:f6:4b:9e:b5:79:59:6d:ea:73:ae:e7:4f:
d8:13:41:4f:54:8e:0f:e9:7f:9e:83:03:b8:a9:55:
1d:6c:4e:58:0c:ee:ae:52:c4:86:ae:ed:a1:f1:2c:
eb:a9:48:a7:91:0d:b9:5c:e7:a2:aa:a5:b8:46:1c:
76:79:08:41:84:f2:17:44:27:f9:55:ed:21:5f:06:
a8:21:ed:d2:ed:7d:a9:ea:a5:c1:1b:6e:ea:f4:7f:
9b:5f:c0:e0:9a:36:95:39:7a:26:86:d3:f6:03:a1:
73:ea:94:12:23:b7:5f:78:f8:91:b6:f6:79:af:8a:
ba:b7:42:9d:2c:63:21:5a:ee:98:50:3c:bb:24:2b:
69:3c:84:e4:63:07:a2:02:34:57:a2:fa:38:40:05:
25:4f:24:53:c7:0e:ff:86:f1:20:df:1f:67:4b:3d:
49:10:a6:a6:8a:1a:68:8a:aa:a9:da:23:21:58:ea:
e1:df:44:84:c1:9d:1f:bd:2c:41:14:a9:86:44:49:
db:a9:03:1c:0d:ed:de:38:5c:d8:8d:56:c9:d5:e4:
91:ef:bc:2e:ce:ed:17:ad:8f:37:4c:1c:27:2d:90:
28:27:a5:d3:0e:f7:04:82:c5:bb:8a:79:7f:70:06:
b2:01:a4:cf:45:95:37:e6:2b:ab:45:18:06:9d:8c:
32:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B6:FC:31:A6:13:1E:B4:A9:5C:C2:0C:75:31:A5:72:A4:17:B0:0A
X509v3 Authority Key Identifier:
keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:79:9e:27:d1:c2:f2:5f:eb:d0:a5:3f:c7:64:69:ca:45:ce:
e2:34:36:29:89:12:eb:71:7a:c3:15:0e:9f:32:74:31:9b:d0:
cd:b3:b8:2c:9e:a3:b6:e3:33:98:60:07:99:2e:81:c0:81:a9:
35:e2:a9:ac:07:60:93:ee:72:86:42:1b:7e:e6:86:ba:de:98:
76:6d:47:ac:88:4d:07:c4:09:c1:6a:e8:88:d9:c9:a5:ff:9b:
d0:60:fd:26:a1:90:97:70:9f:64:25:6c:11:af:c2:ed:43:7e:
3a:6e:98:b0:35:24:c7:84:77:5f:c0:d3:88:6a:9a:73:96:01:
ad:a0:aa:39:07:f9:87:9f:fa:40:16:b9:f6:c1:6a:3e:b5:e7:
40:5f:b5:b9:b6:c6:61:06:87:f6:27:13:98:1a:52:be:af:3c:
2c:f4:5e:ea:42:91:09:fb:f6:f2:db:62:7d:39:60:2a:74:23:
cb:45:dc:78:90:f4:8d:c8:6f:56:5c:e0:10:ed:26:d2:a1:7e:
65:9d:e2:90:19:e7:64:b7:4b:f4:06:06:5c:03:aa:25:db:87:
ad:c4:62:2b:fe:24:b0:76:d0:7d:d0:a6:e7:10:d8:9e:fc:bb:
8e:04:a2:d7:6c:cd:49:48:a9:3d:38:a4:36:4a:3b:8c:2e:10:
aa:c7:d6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:05:28 2025 by rpki-client