Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
File: 7MzCuQnHyBXKzLX85THDJSb63Vo.mft (raw, json)
Hash identifier: yt82UGFeyLLhKqhZjLEtAjewsSufRlviVzGaLsxqb6k=
Subject key identifier: DE:0C:E7:CF:94:3E:8E:3B:4B:60:FC:3B:CA:3E:95:5A:56:21:1F:F0
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Certificate issuer: /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial: 0196748C36A66CD41904DBBF0364066CED55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
Manifest number: 120B
Signing time: Sun 27 Apr 2025 00:01:08 +0000
Manifest this update: Sun 27 Apr 2025 00:01:08 +0000
Manifest next update: Mon 28 Apr 2025 00:01:08 +0000
Files and hashes: 1: 7MzCuQnHyBXKzLX85THDJSb63Vo.crl (hash: oY0rH8lyZpWvLEOM4R5Nx9ypgeY6p+II8pmFcYdxh6c=)
2: tR3pNPDNeYZnwqD0svzDk3Ft8pc.roa (hash: d4XwjGHz7UNgEluKmVoFqdXRfZ0+gtbIwXNWFgp5zDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:36:a6:6c:d4:19:04:db:bf:03:64:06:6c:ed:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Validity
Not Before: Apr 27 00:01:08 2025 GMT
Not After : Apr 28 00:01:08 2025 GMT
Subject: CN=de0ce7cf943e8e3b4b60fc3bca3e955a56211ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a7:cf:7f:eb:43:a7:9d:0b:d4:86:e7:3c:d6:
15:7e:45:79:d0:13:7a:2b:81:f3:d4:d1:f8:9f:bc:
09:73:0e:7b:ac:84:f8:f1:66:5a:cd:26:a0:65:f6:
59:85:8f:18:cf:28:b4:c2:a8:60:c1:75:cc:49:62:
03:13:7f:0b:b9:c5:78:c1:1e:92:9d:ca:80:1b:a6:
94:9b:02:25:17:90:ab:2c:46:4f:67:90:68:d6:8e:
4f:a8:0d:04:cf:3e:91:0c:96:38:7b:04:f2:93:05:
57:73:73:18:a6:d5:62:0a:42:ac:81:2b:25:3a:b5:
c1:3f:b9:f4:c2:be:bb:6f:50:68:98:17:67:00:4d:
78:03:1d:db:f8:e7:77:d1:d0:4a:df:49:4a:73:5f:
b8:08:f4:f8:6e:b0:10:37:51:68:61:99:a2:3c:5e:
5d:f3:31:11:df:84:6b:5b:33:00:0a:96:9e:5c:72:
fd:d8:39:1f:06:30:03:aa:4f:26:ff:ec:11:3f:92:
ec:36:a5:fe:ac:81:84:e2:00:40:9a:28:9a:49:dd:
b0:8e:a8:00:42:a2:8b:64:ce:da:3d:f0:13:9c:03:
40:2f:6c:88:20:2b:da:ee:e0:b2:c2:5e:8f:d7:49:
29:5a:d9:59:f4:ad:c8:33:85:95:d6:2e:e1:f7:97:
b0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0C:E7:CF:94:3E:8E:3B:4B:60:FC:3B:CA:3E:95:5A:56:21:1F:F0
X509v3 Authority Key Identifier:
keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2a:30:56:8e:6a:27:bc:f5:33:2e:12:f7:b3:85:01:6d:ab:
c6:a6:9c:2c:ca:ac:1d:c1:1c:fe:cf:a8:b7:7e:a3:98:f5:8b:
1e:95:f2:05:a4:a9:a2:5d:e6:83:45:28:1a:5a:72:6c:b6:ca:
95:44:55:6d:dc:b7:bc:f5:0b:05:eb:c9:cc:04:ce:43:a9:fb:
6b:69:09:c6:ca:56:e5:68:ac:9e:94:8b:aa:32:ad:35:8d:32:
91:a4:3e:00:a0:b9:1a:e4:e5:c9:29:11:32:ad:70:49:80:dd:
c9:4f:27:f6:b6:59:97:5b:c9:03:96:bf:77:f7:64:53:09:90:
a1:25:37:f6:5c:85:07:0e:c2:ab:8a:07:ba:e6:a9:2e:23:93:
6f:89:17:ec:f0:4b:e7:fe:dd:17:f2:33:b6:ad:b8:2f:2e:21:
2c:13:d5:13:2c:30:4e:38:71:c3:ab:14:36:a3:7f:15:bb:43:
65:c2:14:0d:dc:cd:aa:a8:55:f6:51:82:fc:1c:b6:0e:d6:ce:
02:0f:21:cb:9c:88:65:08:1a:54:46:dc:13:cf:08:5e:7f:2a:
6a:d1:b5:f6:71:45:3c:9e:56:c0:98:b4:f3:31:ef:26:0f:59:
d0:72:26:9b:3d:70:2d:93:21:54:ae:0e:e7:44:87:2e:17:c5:
ec:c0:b6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:46:30 2025 by rpki-client