Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File: 7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier: 06Dgn428xik6oJILqSyL8iIGjV9bJdmdsekVAyw/QAw=
Subject key identifier: F5:A7:9C:BC:B6:7C:19:80:63:41:E1:77:C6:CE:93:DA:C3:94:1D:2D
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer: /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial: 019679E8FC4D6A0E201267AA6787636A2EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number: 0784
Signing time: Mon 28 Apr 2025 01:00:34 +0000
Manifest this update: Mon 28 Apr 2025 01:00:34 +0000
Manifest next update: Tue 29 Apr 2025 01:00:34 +0000
Files and hashes: 1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: eHRg49YFQ1xXUJ1sx+szcxBlbnlVBAWj91rBctaBbBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e8:fc:4d:6a:0e:20:12:67:aa:67:87:63:6a:2e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Validity
Not Before: Apr 28 01:00:34 2025 GMT
Not After : Apr 29 01:00:34 2025 GMT
Subject: CN=f5a79cbcb67c19806341e177c6ce93dac3941d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:f9:7d:d2:cc:63:58:13:4b:fe:16:b1:93:
25:bb:32:2a:5b:37:93:6d:88:e6:d3:47:8a:5e:f3:
47:29:46:69:a9:b2:93:82:da:5b:9d:ad:70:5d:01:
82:6d:7d:64:5a:e9:b4:75:71:91:f2:7f:71:4f:df:
08:26:59:f2:16:36:da:77:8a:1b:e6:eb:3e:0b:01:
c9:81:95:45:88:9c:ad:61:33:42:33:7c:00:95:fb:
e6:67:31:dd:76:9a:1c:9d:3d:43:03:59:6b:67:62:
25:5f:73:cf:19:96:25:ec:6f:12:86:58:47:fe:38:
8a:ea:ad:25:c8:44:93:4d:35:d8:f5:ed:ac:1a:b6:
04:52:db:77:87:7c:07:29:af:4b:2a:df:35:4c:a8:
eb:92:6b:88:69:a5:d7:b9:30:14:b2:03:4a:4e:f6:
bc:ca:65:8f:05:9b:15:ce:a7:7b:48:57:7b:3a:77:
5c:9b:8e:7d:5b:1d:0d:ab:ce:fc:3d:70:10:7e:29:
f8:59:a1:4f:75:62:da:be:c0:f5:5b:9e:97:30:74:
6e:f6:92:f5:8e:07:db:3b:c6:5b:b2:66:b5:9d:02:
af:0f:36:c5:fe:d8:18:3d:5f:00:17:f3:b7:31:12:
17:de:67:10:f7:39:38:a6:a0:92:6c:35:d8:87:3e:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A7:9C:BC:B6:7C:19:80:63:41:E1:77:C6:CE:93:DA:C3:94:1D:2D
X509v3 Authority Key Identifier:
keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:1b:ce:c6:fe:74:15:38:f8:68:bc:35:7c:32:e4:a1:7a:14:
a9:b9:03:c6:30:70:f2:e0:67:72:1a:e1:20:37:11:f5:02:da:
77:b3:60:7b:9f:dc:c1:fc:bc:65:a0:be:76:07:6b:bd:07:8d:
22:3e:0b:8c:e4:38:7d:43:6d:d3:58:94:47:ae:80:63:12:6d:
34:d5:af:4d:25:97:c9:23:b2:6b:47:81:83:e9:2e:31:19:da:
e1:9d:05:4e:dc:1f:e6:c1:90:77:f0:78:0e:ce:c7:86:c7:d2:
ae:db:9d:c0:f2:96:9e:a9:f1:53:98:3a:5a:6c:62:da:86:5f:
09:74:c7:77:03:b2:5a:c1:e3:b8:5b:d5:55:8c:a9:54:8d:0f:
1e:3a:81:81:88:e4:3a:3a:be:f4:76:34:b5:1a:35:85:87:c9:
2f:59:7c:08:6f:5d:81:b2:7d:17:8f:f4:af:4c:67:69:04:c0:
96:8b:1f:b7:0d:de:48:8d:64:56:32:97:69:9d:28:05:53:81:
92:70:2c:09:05:1c:8e:1f:d5:23:73:e1:3e:26:5a:a5:d7:d4:
ee:7c:bf:2c:33:ec:22:40:8c:9b:c1:16:da:39:6b:0f:de:44:
72:b3:ba:c7:d9:e6:69:87:dc:b7:ef:15:0b:b7:30:6c:09:d2:
07:6d:7c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:51:24 2025 by rpki-client