Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
File: 7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft (raw, json)
Hash identifier: zne8k24sc0d0oDMWXBEHlURO1oM6SN6+cV/0fj/PpxU=
Subject key identifier: 0F:F3:46:FC:E3:80:6B:A2:91:9B:F5:48:FE:82:31:79:D6:FE:DD:8C
Authority key identifier: EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE
Certificate issuer: /CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
Certificate serial: 01965537911ED79FDBAA262EFD804449BAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 22:00:27 +0000
Manifest this update: Sun 20 Apr 2025 22:00:27 +0000
Manifest next update: Mon 21 Apr 2025 22:00:27 +0000
Files and hashes: 1: 7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl (hash: J56vtfYTDhcHyqE8zKoXgRp+j4SybQjTJVk9h3CqmOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:91:1e:d7:9f:db:aa:26:2e:fd:80:44:49:ba:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
Validity
Not Before: Apr 20 22:00:27 2025 GMT
Not After : Apr 21 22:00:27 2025 GMT
Subject: CN=0ff346fce3806ba2919bf548fe823179d6fedd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b0:e0:2f:aa:79:37:3c:5e:87:30:c7:09:53:
93:1e:5b:82:1d:58:d3:78:94:33:18:5b:57:27:b7:
b7:d8:18:b5:e6:19:ba:8b:9a:57:db:fb:99:09:d4:
65:d9:f3:2e:d6:b7:14:07:46:79:d8:49:4a:b5:58:
60:1a:b0:c8:88:0b:cb:f6:c2:02:f8:3b:cb:b2:ce:
8e:11:e1:21:6e:3c:bb:34:4d:75:2e:a4:49:25:21:
23:ce:a4:82:15:dd:75:f2:78:c3:0f:e1:14:c1:31:
26:c9:d7:ef:3c:fb:5b:1a:63:31:e3:6f:72:0f:7e:
6d:37:92:15:44:7c:69:92:87:60:e4:3c:36:69:58:
6b:a3:46:a0:0d:28:ba:cb:f9:38:6e:f2:15:d9:23:
3d:a8:05:ee:91:59:75:95:99:05:0a:3a:64:e3:b3:
09:46:1a:fb:98:f8:93:ee:c4:15:23:2a:f0:13:59:
a1:6a:c1:5a:f3:b0:d7:8b:47:d8:55:1c:30:78:ba:
8e:38:fd:7c:5d:7a:0d:25:c0:f0:5c:73:0b:21:51:
b2:13:c5:b9:d6:bb:00:1c:74:c1:e6:25:03:08:c2:
fb:97:d5:f6:94:39:b2:30:a2:c0:fc:61:70:14:6e:
49:88:69:3b:cc:b7:0d:b0:fb:d4:90:df:4a:ae:4d:
f5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F3:46:FC:E3:80:6B:A2:91:9B:F5:48:FE:82:31:79:D6:FE:DD:8C
X509v3 Authority Key Identifier:
keyid:EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:31:48:98:e8:3d:1c:2b:6b:26:1f:d6:9a:2b:ed:e3:81:7b:
d7:43:0e:6e:c0:69:65:9d:b8:dc:4e:58:82:0e:e5:59:94:58:
82:f4:28:e9:34:61:fc:41:43:e6:2b:f1:9c:63:b5:49:5a:1d:
07:ae:ae:c5:dd:9e:17:f1:30:c6:2f:29:b6:c1:de:ff:d3:7a:
06:d9:45:28:53:ea:fc:ae:ad:1c:1c:c1:98:7b:0e:e0:ee:1d:
5e:80:57:31:73:4f:ad:1c:0c:16:47:99:62:29:52:06:46:b8:
a6:ef:2d:39:6e:b0:5a:5c:fc:39:26:eb:23:34:bf:37:0e:ef:
56:bb:af:80:b7:3c:aa:52:ae:99:b6:9d:fb:40:38:41:d4:ef:
62:b1:d0:8e:99:2e:1f:8c:ea:86:00:8a:20:b4:3a:91:0f:da:
b3:c2:eb:b5:84:6b:bd:a6:f5:c0:16:24:56:4e:16:0b:fd:09:
63:99:63:14:38:1f:9a:df:11:bd:a7:4d:c2:13:42:d6:e6:0d:
13:4e:ca:f8:53:aa:d3:9e:f2:50:8a:1b:00:20:73:5c:0c:0a:
55:f1:5f:f7:9e:b0:d5:5a:e5:19:a8:3f:8c:7d:a5:14:f2:96:
54:01:6b:3c:97:23:05:13:c5:1b:d2:66:73:87:fc:a2:ab:13:
29:06:3d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:30:43 2025 by rpki-client