
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
File: 7vvoNpp7vAOob75jm376oCtxcoc.mft (raw, json)
Hash identifier: OOre/07ZHaAj6jxCC4D7yQS7Q4xlrJdUsmicch2OhY4=
Subject key identifier: 5E:CD:CE:A2:1D:0D:74:4F:A9:E3:83:FE:70:E6:1F:7F:48:FD:E0:F3
Authority key identifier: EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
Certificate issuer: /CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Certificate serial: 01966105244CEB1B9D0881B899CC30AD9019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
Manifest number: 0BEB
Signing time: Wed 23 Apr 2025 05:00:49 +0000
Manifest this update: Wed 23 Apr 2025 05:00:49 +0000
Manifest next update: Thu 24 Apr 2025 05:00:49 +0000
Files and hashes: 1: 7vvoNpp7vAOob75jm376oCtxcoc.crl (hash: IpTxVUNKnSaviP3EfNIYMnvqKe2FfFX2HPbdkO5OlTY=)
2: _VrWIzeeb6E8sDSdAStFjFktgds.roa (hash: XW7KS/0ycwvajLuTV4nzdbjjjJAo77rPpbsld42wLs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:05:24:4c:eb:1b:9d:08:81:b8:99:cc:30:ad:90:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Validity
Not Before: Apr 23 05:00:49 2025 GMT
Not After : Apr 24 05:00:49 2025 GMT
Subject: CN=5ecdcea21d0d744fa9e383fe70e61f7f48fde0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f2:04:a2:b7:e9:ed:2b:83:12:67:16:31:cc:
2d:7a:7e:91:46:04:5d:d8:f1:2d:b6:bc:fd:aa:7c:
33:de:d0:ad:6e:ad:6c:c3:cf:b6:e7:86:b4:90:c8:
b3:48:35:dd:e1:42:f9:04:9e:f0:12:2a:1c:1d:19:
6c:03:c0:e9:e2:3b:9e:e4:3b:dc:4a:87:c0:07:3e:
de:65:0f:38:16:b1:62:63:9f:9c:c8:a9:81:c1:67:
95:75:d7:dd:78:fe:95:84:2e:64:d1:06:f4:23:64:
e8:a5:91:65:7b:5f:53:df:37:6d:e1:2d:49:a5:75:
de:f2:54:a0:db:2a:ae:ef:88:ad:8e:0e:82:22:65:
cf:ea:f4:8b:77:23:5d:23:b6:70:3e:3d:27:61:b7:
96:b1:c0:7f:9d:e8:e0:60:09:58:81:88:cb:b6:b5:
f9:43:af:36:41:e4:7c:f1:0a:8c:79:bb:99:90:1a:
57:86:3e:fc:3b:3c:e5:25:42:74:8e:e1:d6:64:c1:
2a:9e:bd:73:83:81:76:03:ee:a0:7c:91:a8:2d:48:
cf:78:63:19:c1:04:ae:0d:f2:03:c4:5a:90:e2:29:
23:1f:08:06:1f:1e:17:32:ce:21:4a:9b:6f:2b:d2:
7c:0f:f2:61:84:0a:c6:1b:00:c6:06:10:26:95:e4:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CD:CE:A2:1D:0D:74:4F:A9:E3:83:FE:70:E6:1F:7F:48:FD:E0:F3
X509v3 Authority Key Identifier:
keyid:EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e4:6e:07:0f:55:1e:c1:07:45:16:f9:e4:dc:98:a2:11:c8:
50:ea:0d:3a:55:20:ac:90:f9:9e:46:c6:2e:b0:ad:b6:74:cf:
66:81:1b:9d:83:6d:9d:3f:ae:69:02:39:22:f4:a9:ae:e8:5a:
04:ef:8a:81:ab:ac:be:b8:17:a7:61:5c:32:1d:2a:8f:4a:91:
83:1a:94:ba:8b:0e:5b:27:8f:f8:64:90:ea:15:b2:f2:f5:e6:
4a:94:95:49:d5:8b:55:3a:70:01:90:3f:e9:65:f5:37:57:b2:
35:28:99:d7:85:21:44:e8:f8:06:2e:3b:52:30:14:71:0f:bb:
a6:b0:0f:ca:7b:44:2b:80:63:ab:72:98:03:f9:49:a1:c6:f4:
2f:64:1d:50:0e:90:fe:6a:2c:7f:b5:2a:64:16:98:9f:48:cc:
bf:11:b7:b0:76:a1:78:8f:c1:f8:07:25:08:df:f4:f0:2b:1b:
ad:36:ff:d0:04:f0:3e:7d:69:bc:bb:8b:8b:28:a3:08:15:93:
82:87:83:b1:78:f9:6c:ef:94:f7:eb:2d:23:a3:02:0a:cf:7f:
1a:fc:39:e6:81:a0:5d:c2:45:68:fb:4b:9a:dc:ff:a2:3c:87:
33:71:f6:4d:c3:d1:7d:c2:fb:97:ae:67:3f:35:1a:91:45:ef:
bb:f8:14:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:04:25 2025 by rpki-client