Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
File: 7JjcJavXq2PjW2KOqsKlTZSan0Y.mft (raw, json)
Hash identifier: tRCa2YtmOvswtkyh5MmIfT6aTBseoS5VGd8C19tkoCE=
Subject key identifier: A0:8D:7C:3E:A6:DD:3F:69:1B:AB:34:2E:E8:39:4A:09:35:8E:BF:59
Authority key identifier: EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
Certificate issuer: /CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Certificate serial: 019645C55682A26452FC19EE4ACAA23C4653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
Manifest number: 087A
Signing time: Thu 17 Apr 2025 22:01:22 +0000
Manifest this update: Thu 17 Apr 2025 22:01:22 +0000
Manifest next update: Fri 18 Apr 2025 22:01:22 +0000
Files and hashes: 1: 7JjcJavXq2PjW2KOqsKlTZSan0Y.crl (hash: Y/BYpZsL3ZQdkvrNuxusTOTRoH2KmNH5MxwEP36spnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:56:82:a2:64:52:fc:19:ee:4a:ca:a2:3c:46:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Validity
Not Before: Apr 17 22:01:22 2025 GMT
Not After : Apr 18 22:01:22 2025 GMT
Subject: CN=a08d7c3ea6dd3f691bab342ee8394a09358ebf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:36:98:58:73:e0:7c:48:47:81:ed:e6:7b:
44:58:9c:f2:d1:fa:b1:fc:86:6c:4d:b6:42:0e:16:
e5:fe:10:95:95:e8:03:c5:42:45:33:8a:f8:b4:0d:
65:1f:40:81:ae:4e:20:b8:86:5c:75:43:99:fc:90:
51:27:56:dd:d2:71:82:e5:f5:1d:b1:87:23:d7:e6:
55:69:59:10:27:7a:c5:83:11:71:89:b2:07:e8:8e:
3e:65:db:16:21:67:f6:e9:20:ca:4d:05:dd:0c:77:
36:c8:98:f7:e4:76:93:79:08:85:58:f8:dd:63:09:
11:24:3e:ae:c9:38:a0:d6:44:f0:ec:7d:37:05:7c:
02:f8:a7:7c:63:aa:91:94:b0:d2:c7:30:2a:47:8d:
af:d1:0b:e8:de:f5:c6:09:4f:a1:48:9d:c9:49:5f:
91:e9:d6:b7:f7:8e:8f:6a:47:7b:81:f6:18:7a:b9:
b2:83:d1:ea:6c:6a:45:4a:2c:4f:2a:d5:e0:09:61:
6f:47:ba:a1:3f:d6:49:88:1a:1f:c4:94:31:34:d9:
a7:ef:6e:74:6c:58:64:c5:5d:2a:de:17:b1:cd:f1:
7a:25:84:54:fa:ab:7b:40:b3:a1:2d:4a:d6:6f:6d:
a3:0e:d5:7d:68:98:84:d4:95:84:a7:56:37:c1:ed:
bb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8D:7C:3E:A6:DD:3F:69:1B:AB:34:2E:E8:39:4A:09:35:8E:BF:59
X509v3 Authority Key Identifier:
keyid:EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:75:6a:de:da:14:62:e8:89:b9:02:2e:cc:d5:ad:29:5a:8b:
74:8c:ba:11:89:06:aa:94:6b:93:b3:df:43:12:fc:be:03:2a:
38:b2:c1:a5:3b:c9:66:43:66:f3:44:03:1d:51:d2:bc:1b:41:
8e:6e:c5:77:a9:19:85:d0:2a:3a:16:27:09:9d:60:b9:1c:cb:
39:85:a9:fe:a6:88:bb:55:b6:01:14:02:87:5c:fe:9c:e5:e5:
71:e1:ad:ed:7a:66:b9:a8:ea:fe:a9:a6:cf:eb:d5:ef:86:b2:
1b:01:dc:e5:3b:2b:92:19:ba:08:8c:d0:16:f0:df:96:fe:b1:
fb:8e:1a:dc:72:74:90:88:29:9c:7c:9b:33:e9:c6:35:1e:20:
72:cf:cb:b3:bd:84:89:d2:45:b0:7d:f8:a2:e5:a7:61:96:dd:
51:f7:52:8a:10:37:af:73:7f:7a:ec:98:59:18:fd:7f:0f:00:
78:6b:31:64:16:2a:b7:1c:39:87:3e:7d:0a:ad:41:18:a0:25:
9f:ff:64:39:8a:e2:f1:4c:bc:af:fb:89:3e:47:68:ad:86:97:
a1:e8:ed:ea:10:0e:b0:71:f2:26:d3:95:da:2e:39:68:e0:6d:
13:7c:39:11:17:22:61:a8:a3:eb:50:1f:51:c9:fb:b1:fb:57:
85:21:8a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:38:52 2025 by rpki-client