
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
File: 7FNfTIaAzg26SgPZXmZck8yZzrk.mft (raw, json)
Hash identifier: v4heHqZA5T2J9OdiMBNgSayIeFiJRM8pCx2NPL7+pKA=
Subject key identifier: CF:01:C0:A9:93:39:A5:7C:4B:6E:45:A1:F3:A2:49:CC:A7:B2:DA:DC
Authority key identifier: EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
Certificate issuer: /CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Certificate serial: 0196477BDC2012E300D311DCF9D125354CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
Manifest number: 6A
Signing time: Fri 18 Apr 2025 06:00:21 +0000
Manifest this update: Fri 18 Apr 2025 06:00:21 +0000
Manifest next update: Sat 19 Apr 2025 06:00:21 +0000
Files and hashes: 1: 7FNfTIaAzg26SgPZXmZck8yZzrk.crl (hash: 46j8bcnxYJ0+U+DFTzexjaal57qOHqjMxu7qekj9IFc=)
2: xmQ5skD8YtPqUxW5yzoA6bHhREg.roa (hash: JOTsRiuQWzCXcl+Wr2hE6xVJO7LXDTormwzqqmVX6eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:7b:dc:20:12:e3:00:d3:11:dc:f9:d1:25:35:4c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Validity
Not Before: Apr 18 06:00:21 2025 GMT
Not After : Apr 19 06:00:21 2025 GMT
Subject: CN=cf01c0a99339a57c4b6e45a1f3a249cca7b2dadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:8f:1b:dd:e1:de:0c:27:99:dc:7a:fa:9f:
c6:a9:db:8c:28:8d:c3:78:75:f3:38:64:c8:bc:8f:
5e:a4:c0:6e:65:65:30:8a:8f:83:7a:74:d8:4e:c7:
cb:f7:8f:30:dc:5d:45:9b:bc:71:08:a8:53:b5:97:
ac:79:99:95:f5:1a:5c:1c:6b:81:9e:d8:60:da:9b:
06:e3:6e:77:7e:2d:57:be:fd:43:2c:84:e7:3a:37:
2f:b9:10:e7:03:01:1b:cc:64:b4:9f:a0:bc:d5:7e:
3a:cf:15:07:50:6f:8e:e1:80:c4:f2:84:a9:21:f7:
fb:33:0f:23:06:65:eb:24:5e:37:9a:c0:5a:7c:21:
9e:c0:de:dc:4b:9a:eb:ef:a5:a9:4d:e1:03:7c:59:
f5:ca:89:63:88:b8:38:96:36:88:95:b2:48:16:83:
e2:13:a1:6b:44:a3:8b:a0:ca:9f:39:8e:e5:93:d3:
cb:04:d8:22:bc:ce:30:9e:b5:45:ac:63:44:ff:98:
95:45:4e:ad:a4:38:2b:2e:77:45:86:e8:e3:6d:af:
93:5e:05:00:55:5e:8c:cb:e0:3e:85:1d:d0:cc:02:
cf:40:e0:14:57:96:ed:02:6d:6a:0a:09:f3:89:cb:
34:74:22:21:bd:67:f7:50:db:7e:65:92:03:98:71:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:01:C0:A9:93:39:A5:7C:4B:6E:45:A1:F3:A2:49:CC:A7:B2:DA:DC
X509v3 Authority Key Identifier:
keyid:EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b7:cc:35:5f:bc:1f:fd:90:89:02:15:59:3d:f7:f7:cc:f0:
8b:d2:47:41:0e:f2:06:f1:6f:55:a5:3c:f5:86:9c:83:04:62:
59:42:a4:8a:c1:d8:19:46:56:8f:dc:f7:f3:b3:e4:b0:fc:21:
28:f8:6e:b5:38:f9:d7:ee:aa:87:64:22:69:40:bd:eb:5f:4e:
12:84:a2:ab:ec:ef:b8:98:fb:81:27:29:04:1c:ee:fd:bb:ec:
96:66:c9:d1:f6:28:dc:4d:0d:b1:2c:bf:74:41:25:17:34:3c:
81:48:9a:00:25:1f:35:6c:04:e5:92:3d:3e:73:15:dd:a6:12:
2b:ac:93:bf:3f:2f:9c:6c:f7:b0:03:e7:36:d7:5e:b0:a5:bb:
3d:b4:74:c3:f1:44:2a:8f:cd:8c:7e:dc:94:10:1b:43:33:63:
b0:b0:b7:42:21:ac:49:60:60:38:8d:7e:d1:f5:0e:49:21:4a:
4f:b6:36:7b:a2:f1:bd:71:ee:4e:fd:c0:a9:ea:58:f6:71:b2:
4f:83:49:ef:6a:20:1d:b5:c4:c0:ef:ba:43:91:77:a8:7b:7a:
de:0c:45:90:16:74:fd:7c:aa:2b:eb:e0:1c:45:f5:7b:7c:97:
5b:78:30:ef:c2:73:aa:c6:a5:9e:22:b7:a5:f7:72:b4:01:05:
f7:83:66:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:40:36 2025 by rpki-client