Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
File: 7O2DGd7RXV8LarRBAJ3hmxnRUps.mft (raw, json)
Hash identifier: 10EJGoDtKprKLk31wlqC4ioD1HJ4Y/ZynSvLimguoO4=
Subject key identifier: 10:C5:7C:5C:71:B3:B5:01:5A:48:BE:01:7D:96:84:BD:9B:15:A2:81
Authority key identifier: EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
Certificate issuer: /CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Certificate serial: 01967E6AB25FDCC3A95A913F66F44B855C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
Manifest number: 0518
Signing time: Mon 28 Apr 2025 22:00:43 +0000
Manifest this update: Mon 28 Apr 2025 22:00:43 +0000
Manifest next update: Tue 29 Apr 2025 22:00:43 +0000
Files and hashes: 1: 7O2DGd7RXV8LarRBAJ3hmxnRUps.crl (hash: WAIagVOprwxhs5MHCf3pAS3Nbzrkt0ij0qx8RTTF4o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:b2:5f:dc:c3:a9:5a:91:3f:66:f4:4b:85:5c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Validity
Not Before: Apr 28 22:00:43 2025 GMT
Not After : Apr 29 22:00:43 2025 GMT
Subject: CN=10c57c5c71b3b5015a48be017d9684bd9b15a281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:ad:52:e2:e7:d2:67:3b:ba:ae:7a:86:96:
0a:5d:9a:65:21:24:59:80:81:09:e6:05:a7:ae:55:
8a:a1:54:c8:b9:73:6c:94:31:41:e0:8d:78:55:94:
15:77:15:d5:0b:20:3d:c4:4a:b0:fa:ec:3b:a4:71:
dd:13:fb:fc:81:cf:b1:c7:c2:88:7f:3d:dd:1f:9b:
8d:00:d8:16:11:22:a1:b0:f6:74:49:7d:29:77:ce:
b1:70:3a:0d:43:fd:75:8f:24:5b:37:eb:46:b8:c5:
5c:c0:dc:89:cc:dd:86:7d:60:29:a0:86:5e:f3:ef:
f9:0b:ea:84:8f:41:64:ff:12:b6:a0:9a:9e:df:24:
36:73:05:80:7e:d1:bd:3a:cf:af:bf:b8:1e:71:e9:
0e:7e:17:22:d9:bc:14:0b:69:e4:ba:15:cc:6d:5f:
57:6f:f9:ef:b7:71:49:b2:d1:f3:2c:d1:68:dc:93:
2e:36:ce:47:b6:c5:82:7e:1a:f5:33:97:89:b7:4d:
2f:4f:9f:85:b9:d4:c7:44:c5:61:08:f0:87:a6:34:
95:30:61:94:13:83:22:5e:6a:86:a9:36:8a:ce:b6:
fa:0b:a8:b9:5b:b4:b7:7d:87:87:9d:57:ba:37:fd:
6a:cb:f7:51:9e:f9:a3:b1:8b:e1:7c:54:64:a7:c5:
86:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C5:7C:5C:71:B3:B5:01:5A:48:BE:01:7D:96:84:BD:9B:15:A2:81
X509v3 Authority Key Identifier:
keyid:EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:48:1c:31:ae:32:e2:37:83:f5:96:95:49:42:f0:2f:6c:e1:
35:66:b2:6d:7e:97:73:cf:63:1c:02:14:92:6a:3d:de:73:94:
6e:ae:21:8e:52:8a:13:18:e8:93:47:4a:bf:85:2c:91:62:67:
00:f2:e6:ea:05:64:14:fe:7f:2f:1a:a9:b5:60:44:db:ae:25:
6f:0c:ee:6b:c4:cb:37:b6:79:9c:35:a7:cb:37:bd:99:1a:15:
db:b3:1b:a7:78:f5:b7:1d:74:51:e7:e7:a7:b2:05:b0:c6:99:
f2:09:90:cb:dc:41:b5:ec:7b:d3:70:07:53:7c:89:da:3a:52:
a6:b6:b7:cd:96:5a:fb:5b:55:02:f2:d9:b9:27:39:6c:4c:07:
77:e0:b4:5d:84:17:85:47:a8:6e:42:d0:a3:a0:f5:6c:b8:bc:
24:06:52:d6:9b:cb:94:5a:43:0a:fe:52:38:b6:42:b4:91:ea:
2c:a4:75:0e:2d:7b:0a:63:1a:48:85:01:dd:fb:47:d6:d5:b3:
c7:67:14:41:2c:1c:a4:58:9a:ef:2c:11:c1:83:8d:60:a5:c6:
f7:44:43:46:36:13:fe:4f:61:5f:93:ce:4f:b7:f5:1a:81:89:
da:41:c0:c8:83:6d:44:02:ad:5a:38:4f:14:32:03:48:e7:26:
07:68:78:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:30:28 2025 by rpki-client