Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
File: 7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json)
Hash identifier: xUSlJdZJQQC2c0ur2IgkmHl7y+1k+FXBE3QZek3ETTU=
Subject key identifier: 40:7C:75:E3:C2:36:DC:8C:FE:C1:55:5F:0D:FF:AB:98:7F:7B:BB:35
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial: 01967B327AE3B39A69486D99EA1F69C907C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
Manifest number: 0C81
Signing time: Mon 28 Apr 2025 07:00:27 +0000
Manifest this update: Mon 28 Apr 2025 07:00:27 +0000
Manifest next update: Tue 29 Apr 2025 07:00:27 +0000
Files and hashes: 1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: YPNGWG5j9mRTsz90jjcuriSw2BHt1QX0+xqlzDae6Y4=)
2: _JGWiygFUesXv5bnUwI668QYMo0.roa (hash: tSMCpwe6YrahqMRkzD/bacyXkbLZAIyumbRrGFQA0qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:7a:e3:b3:9a:69:48:6d:99:ea:1f:69:c9:07:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Validity
Not Before: Apr 28 07:00:27 2025 GMT
Not After : Apr 29 07:00:27 2025 GMT
Subject: CN=407c75e3c236dc8cfec1555f0dffab987f7bbb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:a7:59:26:35:a7:5d:e6:a9:b4:d1:a2:53:
14:d8:1a:2a:d0:3f:5b:ca:f1:8e:1f:52:64:e7:b4:
e1:0c:7e:6a:ea:e2:52:db:b0:47:81:3d:fc:75:73:
a2:98:33:cd:fd:11:86:e7:ca:11:1c:56:3c:93:47:
d7:43:60:e7:09:1c:32:fe:7f:32:f0:96:78:f7:2e:
8b:6d:2e:2d:c0:33:f4:72:02:d4:c3:df:b7:64:d0:
a5:42:f0:1c:aa:72:70:50:76:5f:a3:5a:69:a4:5e:
b4:d7:41:9d:3a:f3:b1:fa:90:e1:09:56:92:76:52:
4c:74:db:3b:68:a7:cb:ab:ca:1c:ea:63:23:7e:b3:
04:17:4b:29:58:59:7f:1d:ea:d1:64:7f:81:3c:4b:
ad:4f:b8:bd:40:f4:77:9e:49:c1:fa:a9:d2:97:af:
1b:fe:9f:c9:6c:92:3d:2e:65:d5:62:38:92:55:cb:
48:99:19:ed:ea:5a:e6:1f:29:40:cd:0e:82:ec:eb:
b6:bd:aa:57:a1:5e:57:33:77:a2:44:60:94:e7:ff:
bc:13:84:89:e6:26:c9:25:b9:c9:20:05:56:fd:37:
e0:fa:90:03:5e:50:e6:91:32:2c:8e:c2:7b:ad:bd:
d7:a2:d1:81:b8:08:b1:75:59:a4:fd:81:3f:8d:3c:
ba:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7C:75:E3:C2:36:DC:8C:FE:C1:55:5F:0D:FF:AB:98:7F:7B:BB:35
X509v3 Authority Key Identifier:
keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4b:a3:13:ed:84:f5:24:2e:60:57:4f:f8:fc:92:ba:9d:f1:
25:8f:0a:18:06:51:05:00:b4:2a:be:a6:69:68:bd:25:63:f8:
bd:04:9f:dc:fd:0d:20:52:8e:00:63:5e:4f:f8:fd:73:79:bc:
f2:04:58:0c:27:3f:b1:57:75:ec:7d:a7:53:26:17:0b:a8:ba:
16:bc:e7:50:0c:9f:ff:c2:46:3c:d1:d4:18:9e:93:ac:06:a4:
b9:c3:97:8b:f3:a5:ff:ee:4c:af:52:15:83:a0:e7:87:41:71:
5e:38:a4:26:b4:7c:87:e3:0f:d4:89:97:bc:c2:14:96:b3:25:
ea:a9:47:f0:a8:2f:61:7e:a4:8f:f2:3c:65:29:24:60:7c:55:
5e:c2:77:65:2f:75:49:4d:16:16:58:3e:c1:09:2b:ff:d2:e5:
cd:7b:02:0f:4a:34:0f:a1:40:f2:5e:ab:9f:06:3d:40:a2:f5:
fd:cf:62:cc:6d:56:82:a7:30:61:1c:bd:e6:f8:23:e7:7f:88:
ec:4d:44:d6:bc:27:8c:ea:d1:6d:c4:62:b5:ec:f0:bc:3d:49:
cb:fe:12:84:f4:0d:ae:c4:50:ec:e6:df:80:94:1a:f0:86:45:
2a:97:97:d6:aa:99:e5:7f:e2:53:8e:cd:71:b1:c9:59:0f:a3:
0d:5a:b7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:32:42 2025 by rpki-client