Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
File: m7OdtQEo2zUK68hDgISZGLsF5wU.mft (raw, json)
Hash identifier: W4W+vGdZlqS7zkEPPHWjRAgLIi2orQqP8h2L9TbfwOU=
Subject key identifier: 2B:E7:66:19:23:B1:0B:A3:C6:E9:52:A3:79:7D:75:7A:C6:71:01:05
Authority key identifier: 9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
Certificate issuer: /CN=9bb39db50128db350aebc84380849918bb05e705
Certificate serial: 019674FA1CDCA7456A6470C27B82434F0519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
Manifest number: 0F7F
Signing time: Sun 27 Apr 2025 02:01:10 +0000
Manifest this update: Sun 27 Apr 2025 02:01:10 +0000
Manifest next update: Mon 28 Apr 2025 02:01:10 +0000
Files and hashes: 1: m7OdtQEo2zUK68hDgISZGLsF5wU.crl (hash: qei+ieDAcRAMDss4+6zb2FIcfjBE20hHoTKsoRxOwfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:1c:dc:a7:45:6a:64:70:c2:7b:82:43:4f:05:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb39db50128db350aebc84380849918bb05e705
Validity
Not Before: Apr 27 02:01:10 2025 GMT
Not After : Apr 28 02:01:10 2025 GMT
Subject: CN=2be7661923b10ba3c6e952a3797d757ac6710105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:d2:5e:70:3e:c6:02:87:d7:82:43:6e:b3:
84:ed:83:2b:93:9a:c9:47:d2:3a:a0:74:1c:18:a3:
fb:4f:f5:07:b7:e9:cc:f6:fc:df:45:37:e5:4f:69:
d8:0b:36:8a:e1:a8:b8:44:62:b8:19:f8:9a:ba:49:
18:a3:13:d4:d5:ef:01:99:01:9b:b5:be:30:19:80:
f6:04:6c:3c:88:7b:3f:9e:18:54:bc:d9:ad:b4:49:
e1:81:8a:70:66:07:2b:ce:a4:ac:c5:ae:7d:4c:fe:
bd:06:f1:d7:12:0a:b9:60:f2:59:d3:b9:ed:e7:d3:
84:01:6e:8f:ee:2c:6d:ec:98:83:5e:09:8f:89:70:
c9:e7:dd:15:16:cb:dd:61:d4:13:e0:6e:84:95:f7:
31:2b:d8:9f:e3:47:51:0f:dc:dd:d0:fe:69:68:d1:
40:3f:70:ea:ba:1f:b7:94:43:15:4f:2f:93:3f:e2:
ab:16:48:ad:b5:2b:4e:8f:9b:d4:8e:da:84:15:df:
9b:ba:5a:19:6c:fc:68:d7:73:48:2c:62:aa:f3:e7:
d1:d1:ce:b8:13:c4:e7:9d:9e:22:df:06:a2:f1:73:
7d:c4:1c:0c:2d:53:8c:5f:70:69:e4:16:90:23:36:
c4:bb:1f:a4:b8:d5:eb:8b:18:42:61:89:7c:ba:22:
b2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E7:66:19:23:B1:0B:A3:C6:E9:52:A3:79:7D:75:7A:C6:71:01:05
X509v3 Authority Key Identifier:
keyid:9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3f:e1:e0:48:2f:c1:37:d0:b9:08:8a:9f:7a:63:f5:6f:1d:
7e:91:eb:9a:73:ea:dd:7c:de:5f:6d:fa:e2:9a:05:33:bc:a0:
ae:28:b6:a1:fe:d5:9e:e1:69:30:a2:e9:b8:5e:32:21:00:8e:
9e:e0:ac:67:48:bd:c8:0b:a3:85:1a:8d:9d:94:8d:70:18:22:
4a:2e:c9:8b:c4:31:3d:11:3d:8a:4f:e4:ee:4e:0b:d0:e8:7e:
27:4d:f5:10:c6:36:75:22:6b:d6:81:b5:27:6e:38:6c:97:77:
2b:85:58:7a:0f:78:63:33:b5:8a:58:1b:e3:4d:be:a9:8e:50:
10:bf:3e:43:c3:dc:73:ae:69:c8:24:b3:88:a3:52:d4:2f:3f:
b8:02:77:aa:56:be:34:1e:e2:4b:fd:a3:3e:73:1c:24:11:99:
9b:62:68:4b:be:bf:88:9c:68:3a:67:cb:29:6a:29:17:55:a1:
a5:66:a8:a4:3e:e1:1c:b0:c6:9b:7c:e6:10:bd:67:78:d8:64:
62:25:4d:9d:b0:c8:12:fb:a5:dd:5c:a1:2f:7b:a7:19:d9:93:
fe:a9:a7:11:aa:6f:42:8a:10:23:04:23:4b:d3:c5:af:b1:9c:
dc:bd:a1:56:74:0e:f4:bc:de:75:bc:ff:40:fd:6d:56:ec:16:
8f:ef:1f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:17:30 2025 by rpki-client