Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
File: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft (raw, json)
Hash identifier: MWm7f8j0IgjeBPIQ2+GGJABdhV/6V7qh4xW24K6gB24=
Subject key identifier: D7:27:DF:07:25:59:CB:32:EE:0E:6F:0D:5E:93:57:35:FD:3B:F1:C1
Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
Certificate issuer: /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Certificate serial: 019675D55A9B81A5CC3DF25B74F575B3F0C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 06:00:38 +0000
Manifest this update: Sun 27 Apr 2025 06:00:38 +0000
Manifest next update: Mon 28 Apr 2025 06:00:38 +0000
Files and hashes: 1: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl (hash: rYKFR7/uU7Rns+9yFsA23WtamDb66VaLr2Q4dVfb5b0=)
2: lsLcveQpDK6_M97PC59O9jY_Mn0.roa (hash: ymXevK/nbRh5h28kJcEd3t9OjF1YdLZjWlDyNpO0ilU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:5a:9b:81:a5:cc:3d:f2:5b:74:f5:75:b3:f0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Validity
Not Before: Apr 27 06:00:38 2025 GMT
Not After : Apr 28 06:00:38 2025 GMT
Subject: CN=d727df072559cb32ee0e6f0d5e935735fd3bf1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:35:89:ff:d9:c1:92:2b:13:f7:d9:d0:13:
85:b5:e3:a7:d9:d5:57:f3:0e:b8:51:c2:6a:8c:db:
d4:0c:05:21:0e:8d:94:17:05:66:d0:3d:d6:f7:74:
28:c4:95:bb:27:af:b4:69:7e:bb:41:1e:ef:0b:fd:
03:c5:66:6e:ae:1c:9a:b0:81:84:75:2f:39:a6:3a:
69:d7:e9:50:66:e7:32:de:2b:2c:6e:c0:c7:a8:ac:
f6:d3:55:fa:de:6c:78:c0:25:2d:d5:4a:dd:61:e2:
72:ff:c4:8a:cb:e7:11:ad:9a:55:0c:08:d1:ce:6a:
86:35:85:a2:28:fe:eb:2d:64:7c:77:93:c3:d5:10:
48:48:a6:ad:46:86:bd:1e:03:13:bb:e7:ef:12:dd:
6f:62:0d:e3:c8:26:22:84:ec:c9:c8:e0:a6:37:e6:
84:b1:25:60:ae:32:ab:83:d3:7e:b8:15:7a:16:fb:
76:ca:74:62:13:be:74:d3:d7:a7:48:56:71:2a:8c:
3a:f6:cf:64:6b:26:97:4e:06:bb:db:4f:6d:85:49:
54:27:9f:78:c3:6b:ab:ee:4d:fa:82:1a:60:3a:14:
d3:6d:fa:04:9a:20:a7:1d:38:27:09:71:ac:1f:30:
86:38:5d:d0:fb:73:95:76:5d:0b:df:a0:9e:7a:3d:
e4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:27:DF:07:25:59:CB:32:EE:0E:6F:0D:5E:93:57:35:FD:3B:F1:C1
X509v3 Authority Key Identifier:
keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:8e:fa:a5:58:ce:f3:7a:0c:3d:c9:21:d5:a1:b5:07:dd:4b:
77:b6:28:89:d4:ae:b1:98:5b:c4:f1:6a:cb:39:92:45:05:18:
f8:07:84:90:60:54:fe:52:2c:63:ba:be:93:88:93:9c:ea:79:
89:8b:6b:b4:36:fe:ad:61:de:a7:f5:58:dc:fc:f7:95:82:f0:
38:58:14:fa:f3:e2:09:22:b2:6d:33:06:28:95:9a:46:49:3a:
66:7e:43:c3:b7:5d:38:ea:f6:da:87:89:3f:90:14:a9:5f:35:
13:ae:37:a4:03:1f:47:92:3e:f6:69:18:b6:1f:43:46:a0:f3:
a7:dd:91:7c:f6:8b:c8:38:e9:e7:56:dd:f5:e3:6e:d3:e1:a6:
fc:e0:2e:f3:c0:de:20:c3:11:8a:49:41:35:15:c5:43:3d:09:
18:21:f7:ae:fc:11:be:67:03:8e:5c:02:22:e3:b7:f4:45:e7:
0a:66:4f:37:78:df:06:6f:31:e4:9a:da:5f:f0:c0:59:7c:eb:
4b:25:2f:12:eb:c9:e3:0a:be:94:d1:3b:30:64:32:62:c5:6a:
d3:ae:33:05:bd:79:c2:f0:e7:6d:b0:87:52:03:3c:e1:3d:50:
cb:8a:aa:9e:14:f0:c1:1a:8b:b2:8a:90:1c:97:e8:a9:9b:a9:
5d:94:bf:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:44:32 2025 by rpki-client