Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
File: 7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json)
Hash identifier: f+fBj3lZ4TPWAe/F64grIQfIunNxJCvzTJSxTHudUrg=
Subject key identifier: 0C:1D:99:42:DD:D8:32:98:04:4B:9A:32:95:5F:68:EE:3B:48:F5:D1
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial: 01964CD99A94CBED6C1D19928AC6BB47CDBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
Manifest number: 0C69
Signing time: Sat 19 Apr 2025 07:00:51 +0000
Manifest this update: Sat 19 Apr 2025 07:00:51 +0000
Manifest next update: Sun 20 Apr 2025 07:00:51 +0000
Files and hashes: 1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: mEgUOLdq6dq5RIoFmdsB8iods6cAIdBbYJw20/pY4hs=)
2: _JGWiygFUesXv5bnUwI668QYMo0.roa (hash: tSMCpwe6YrahqMRkzD/bacyXkbLZAIyumbRrGFQA0qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:9a:94:cb:ed:6c:1d:19:92:8a:c6:bb:47:cd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Validity
Not Before: Apr 19 07:00:51 2025 GMT
Not After : Apr 20 07:00:51 2025 GMT
Subject: CN=0c1d9942ddd83298044b9a32955f68ee3b48f5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:23:57:66:88:6d:c4:b8:56:6a:55:51:8a:86:
78:ae:60:96:97:48:a5:08:17:10:22:ac:da:c1:e0:
c4:51:8f:d4:e9:da:bd:78:9f:0f:25:7a:66:c4:b3:
73:c3:0c:3b:45:85:95:3e:6b:2d:3a:e0:ce:ac:ba:
08:05:b8:e0:79:a1:b7:24:f3:25:26:61:5e:ae:75:
8e:83:7b:b0:e7:5e:bb:e9:f4:17:c0:2c:90:9f:25:
ed:8b:4d:4c:8a:c8:ee:76:e7:73:d0:7c:30:7c:52:
0e:2d:7c:cf:92:4a:b2:83:80:dc:48:80:29:aa:6e:
ed:cd:c3:7b:f6:ea:d8:97:a1:21:bb:49:2f:32:49:
c4:8a:76:3d:de:43:95:f4:60:46:72:47:49:d8:a9:
36:1c:64:3b:39:35:3d:05:92:08:43:aa:78:93:c8:
d4:01:f2:61:a3:0e:fb:6f:9e:12:15:b3:72:02:74:
be:f0:63:05:1c:29:df:32:2c:c0:b7:89:1e:2a:6a:
65:60:48:c1:86:e2:5a:e7:a2:29:3a:25:51:b6:e9:
1e:74:c4:a0:df:c0:50:09:29:48:e7:eb:ce:af:a1:
38:16:89:1e:eb:23:13:82:90:ee:c0:1a:aa:e5:c4:
d5:22:64:89:50:d8:fa:79:d4:87:64:ba:49:e1:5d:
d9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1D:99:42:DD:D8:32:98:04:4B:9A:32:95:5F:68:EE:3B:48:F5:D1
X509v3 Authority Key Identifier:
keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f1:e5:02:1d:fe:e0:b4:47:81:5b:98:38:84:0c:9d:3b:af:
26:75:27:2a:b6:52:ac:19:61:a3:af:d6:c0:01:d1:55:cd:16:
ce:23:e1:68:f6:4c:aa:78:9e:9a:db:78:53:04:f6:4b:3e:9d:
aa:92:61:1b:9c:85:57:a8:19:67:a2:6a:f8:c1:1a:20:a1:6f:
e5:90:fb:77:e8:64:7c:a2:1a:14:ac:9a:c3:45:cb:ad:5e:6f:
4a:4d:1b:0f:af:82:76:53:f6:58:54:f8:03:64:d2:e0:d8:cf:
26:2e:b4:05:d2:4b:cf:3d:1d:b9:99:5f:8b:cb:5d:3a:c6:0c:
85:7e:bd:07:e7:cf:7d:f2:e9:10:df:5b:02:f1:ab:5d:01:d8:
eb:00:56:41:75:75:7b:03:3e:47:04:1e:84:05:94:99:e1:cd:
f3:21:ab:86:06:dc:c0:4e:e0:f6:1c:6e:f3:f1:06:b8:16:e6:
0a:15:a7:63:72:df:11:97:50:2b:d7:e9:68:46:90:c7:f7:91:
11:77:7d:35:e9:5d:9e:44:f6:27:fa:55:aa:09:88:c9:2d:a9:
5c:91:37:68:98:36:99:ed:27:e1:75:06:03:5c:25:b0:62:39:
bf:f5:b1:7b:71:7d:f5:c3:65:08:2e:3c:ec:d1:74:f0:e8:0f:
e4:6a:f5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:13 2025 by rpki-client