Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
File: L7GbEAHBEHH7osw0FMxHW2wpCcc.mft (raw, json)
Hash identifier: aQYaCx0vyLtPGJP+oeIOMlShnzANh0HlfKCdPbdNt2U=
Subject key identifier: 4A:72:7C:69:6F:5A:FC:9B:D3:C6:1B:8C:8E:29:69:22:AD:54:24:E5
Authority key identifier: 2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
Certificate issuer: /CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Certificate serial: 01967868B407CD755509B83FB47A842D8E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 18:00:49 +0000
Manifest this update: Sun 27 Apr 2025 18:00:49 +0000
Manifest next update: Mon 28 Apr 2025 18:00:49 +0000
Files and hashes: 1: L7GbEAHBEHH7osw0FMxHW2wpCcc.crl (hash: YCOGkUuStT9Prgh5YCOC59WKJj7sP+9EubpNGIJiAac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:b4:07:cd:75:55:09:b8:3f:b4:7a:84:2d:8e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Validity
Not Before: Apr 27 18:00:49 2025 GMT
Not After : Apr 28 18:00:49 2025 GMT
Subject: CN=4a727c696f5afc9bd3c61b8c8e296922ad5424e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:af:01:06:f9:a0:2b:ae:05:d1:39:bb:fb:04:
b3:ea:4a:bb:c5:71:61:f3:40:5c:8c:54:6b:e9:c9:
01:88:c5:61:a3:c8:3b:2a:02:d7:ba:ec:ed:b4:a9:
66:9d:c4:10:14:46:d6:77:08:3e:21:2a:fb:a3:5d:
77:e5:ac:3a:06:a7:39:63:7d:35:34:ba:6c:8b:3b:
0b:41:80:5c:5c:6f:04:5b:58:12:ea:25:9c:54:ea:
93:60:a2:68:1c:08:95:38:54:2c:a6:b4:50:6f:35:
4d:f5:8e:d4:9d:c3:43:d6:0c:91:7f:cc:cb:11:e8:
21:5f:cf:5b:1c:fa:c3:b1:2f:07:6f:c3:c7:c0:2c:
86:9d:71:92:df:21:96:27:ce:15:68:c3:29:09:b0:
37:ae:ef:3c:77:81:8e:6b:3a:ea:72:ae:8d:eb:f3:
15:1f:eb:1f:79:6a:08:53:cf:17:4d:75:dd:ce:71:
17:1a:4a:f3:ab:3f:37:e8:8f:2a:65:2b:a9:68:63:
e0:de:ff:2d:33:e5:0d:38:83:0c:66:b8:9e:8e:e7:
39:9c:85:ed:6a:f8:92:d9:0b:7a:8c:c8:96:97:6c:
30:c4:5d:b6:f2:4a:0e:b4:4a:2e:9f:37:b9:17:3f:
ed:94:5d:04:68:09:64:b0:20:fb:d7:87:60:23:58:
58:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:72:7C:69:6F:5A:FC:9B:D3:C6:1B:8C:8E:29:69:22:AD:54:24:E5
X509v3 Authority Key Identifier:
keyid:2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f3:fd:3d:33:80:2e:9c:c8:f4:5d:9c:b2:17:e7:24:f4:6f:
c8:f5:51:60:2a:be:f5:fb:b5:f1:5d:fd:f1:79:67:3f:44:89:
80:bc:c3:c0:e9:95:a0:b5:40:06:79:f3:89:e5:4b:69:f2:8c:
60:c5:f1:82:58:db:9c:43:68:42:30:90:4b:d5:10:7b:dd:b1:
5e:dc:ad:c8:dc:89:e3:09:38:3f:7c:3a:8f:e4:57:7c:0f:aa:
33:49:65:9b:5e:13:b8:9e:42:00:be:64:3c:3c:43:31:95:ed:
ff:9c:a2:02:f2:a9:1f:0a:09:62:7a:48:17:d8:85:20:e0:b6:
c1:1e:50:d0:04:1b:aa:c6:3f:ac:77:53:3a:85:06:27:25:5b:
92:e5:89:ff:87:4c:ab:57:ec:6e:b4:75:cf:53:46:4e:76:78:
ac:a0:9f:c6:37:15:9d:8f:b7:2e:72:e9:a5:db:f8:19:d9:9e:
0f:36:72:5c:36:a8:ed:87:f2:9b:aa:df:fd:ea:0d:d0:89:36:
d6:5c:6e:32:5e:94:fe:35:aa:68:7a:9e:86:de:2a:08:4e:69:
45:91:da:1a:e0:73:1b:f7:17:fe:95:32:9a:10:ad:45:67:c4:
a9:22:38:a1:23:92:2d:1c:06:f6:7c:17:97:25:85:fe:72:b2:
d4:6c:05:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:56:18 2025 by rpki-client