Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
File: 7_vi0INCz7z3p9dOiOvQMeEgItk.mft (raw, json)
Hash identifier: 88ujWnyaosryAwO8oFQiIqoUvQeg8iUFxoR4ponsJug=
Subject key identifier: 51:DC:EC:32:BF:89:4C:57:31:D4:13:C0:D6:B3:42:3C:82:BE:96:2A
Authority key identifier: EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
Certificate issuer: /CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Certificate serial: 019676B0B7835D47A300B8709F37989B9591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
Manifest number: 0304
Signing time: Sun 27 Apr 2025 10:00:14 +0000
Manifest this update: Sun 27 Apr 2025 10:00:14 +0000
Manifest next update: Mon 28 Apr 2025 10:00:14 +0000
Files and hashes: 1: 7_vi0INCz7z3p9dOiOvQMeEgItk.crl (hash: F9Q0Z5RDXAmtKRm5Eoc5MovTTQXzYPqkd/aLpPOozmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:b7:83:5d:47:a3:00:b8:70:9f:37:98:9b:95:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Validity
Not Before: Apr 27 10:00:14 2025 GMT
Not After : Apr 28 10:00:14 2025 GMT
Subject: CN=51dcec32bf894c5731d413c0d6b3423c82be962a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:d4:15:b0:78:ec:6c:13:4d:e9:b2:11:c3:
da:2c:3e:41:13:c0:8c:d3:5a:8e:e9:fd:ec:d3:93:
5a:44:c3:17:0c:72:2a:32:ae:f1:7b:12:d1:7e:c3:
e5:24:41:0d:b0:16:5c:bf:0a:72:dd:45:ef:c9:70:
3f:b8:40:37:2c:29:8c:e4:5d:23:14:76:3d:da:c1:
d7:9a:4b:22:8d:e4:91:87:f0:31:1e:09:dd:32:ce:
a7:a2:0b:a9:39:68:9a:7c:3b:63:d0:9b:73:4b:fb:
b3:79:b5:19:f9:7c:5a:c3:da:c7:ae:cc:eb:ef:52:
5e:7d:54:98:75:d9:c9:b1:8e:0a:12:ba:ed:c6:02:
91:b4:ce:59:1b:f7:47:7a:35:6b:46:45:e5:9e:e0:
e0:1b:25:f2:ae:7c:38:52:1a:17:82:aa:64:70:f2:
43:bc:54:6f:ef:05:92:5d:2f:90:78:24:86:a2:6c:
b9:e4:88:82:18:9e:53:0f:51:0d:1a:dd:6c:75:84:
ac:c8:6a:29:53:e0:73:91:71:a8:48:dd:66:ef:d6:
d8:c2:c2:a3:93:0b:89:7c:8c:39:88:15:c1:98:9e:
be:cf:a0:14:34:45:9a:eb:15:e8:00:6f:95:7c:8d:
11:4a:8a:36:d3:2f:df:c6:77:dc:f4:14:fb:7f:e1:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DC:EC:32:BF:89:4C:57:31:D4:13:C0:D6:B3:42:3C:82:BE:96:2A
X509v3 Authority Key Identifier:
keyid:EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9b:c7:11:e4:29:b5:17:02:fd:0d:92:b3:da:c1:73:10:b6:
31:0e:4a:0d:87:6c:2b:a6:67:0f:e8:f4:e6:de:f9:c5:d3:f4:
28:f8:20:b3:86:f9:2d:a0:5a:9e:b0:3a:96:67:0b:93:67:a5:
35:58:4a:72:c5:09:ee:60:8d:79:76:c4:04:04:65:9a:28:67:
a2:35:61:33:c0:ad:2d:0c:4e:31:b5:5a:74:b2:87:8a:63:74:
86:34:a7:65:d7:e4:3c:e2:af:1e:b1:54:66:21:1f:70:93:cd:
d4:d3:57:6f:2a:7d:fe:0d:f3:e5:5d:92:f0:89:b4:39:c8:d1:
42:67:5e:dc:22:65:d5:a7:d5:41:27:de:45:c3:3d:21:64:c2:
75:bd:e5:53:2a:79:3b:0b:9c:84:99:6f:1c:61:44:66:37:c2:
df:70:71:ee:97:e4:f8:54:b1:bb:f2:9d:14:ad:e9:aa:c8:37:
79:fa:74:67:a8:cf:cd:ef:f7:45:3d:18:70:15:9f:ef:e8:53:
19:bd:b7:df:8c:4e:d3:78:c1:1e:a9:ff:46:bc:ed:12:38:65:
12:f9:43:3c:be:26:b1:ac:86:c8:db:e2:32:55:c4:27:63:02:
17:32:31:97:3c:d0:1b:3d:4d:96:8d:d3:ee:ef:61:ad:69:df:
7c:6f:6a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:43:05 2025 by rpki-client