Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
File: DS7-O2P6myp5MsW17IVLcMPxiDk.mft (raw, json)
Hash identifier: HwGeEo4iRD8lauoU004TLhgA042yELX5ghIb/G/yMGs=
Subject key identifier: 07:C6:99:15:DA:7F:32:C0:BF:7B:51:F4:0B:CC:79:E5:E2:FE:A9:F9
Authority key identifier: 0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
Certificate issuer: /CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Certificate serial: 01967A8D710751832C2EF38953762BA2B00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
Manifest number: 03FF
Signing time: Mon 28 Apr 2025 04:00:11 +0000
Manifest this update: Mon 28 Apr 2025 04:00:11 +0000
Manifest next update: Tue 29 Apr 2025 04:00:11 +0000
Files and hashes: 1: DS7-O2P6myp5MsW17IVLcMPxiDk.crl (hash: dOVMAypLTbc8HFMaOlV2245kHBINqH9wysHKWgZ25B8=)
2: Q_EK-erWHPnTXBrHVmcWbytpcis.roa (hash: mtRhYkTuoZWGkXxI5IGoHrOZ3J63Idzep2wBOshAzrk=)
3: rjoKSFT64wx9I01-lQ0W0ynohgU.roa (hash: kjj+Ef2J/by9CyPkpbVAwiAkNqP+TYAiZ/aCdSXrkAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:71:07:51:83:2c:2e:f3:89:53:76:2b:a2:b0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Validity
Not Before: Apr 28 04:00:11 2025 GMT
Not After : Apr 29 04:00:11 2025 GMT
Subject: CN=07c69915da7f32c0bf7b51f40bcc79e5e2fea9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:94:31:9e:2e:dd:10:a6:98:a7:77:8f:18:
cb:75:b4:53:57:10:8f:1a:e3:0a:cf:c2:ff:68:dc:
65:57:2e:8c:bd:80:48:61:ce:9c:77:92:ee:18:20:
64:22:7b:4d:18:c0:b0:92:7b:1b:42:00:e8:75:dd:
22:f4:d4:36:f4:fc:94:af:e7:3a:89:11:e8:85:23:
ee:fe:2e:c2:4d:f2:7d:62:cc:a5:3b:b8:8e:5e:93:
26:16:9a:1f:3a:28:b8:ad:6e:9e:e8:43:13:87:5e:
86:30:e7:47:e3:c4:49:0c:a3:8e:18:b0:20:21:6b:
81:24:df:7c:14:b4:92:de:75:26:eb:8d:ba:19:76:
eb:a0:d7:af:48:2d:44:78:36:35:d9:4a:e6:f7:3e:
65:b6:e1:66:2d:c9:d2:5d:63:a9:71:b1:ae:ac:93:
fb:8c:58:d8:10:7f:70:64:bb:23:3b:57:30:d2:21:
c5:ff:b2:be:7b:3f:ac:b1:98:63:ae:da:12:c7:00:
8e:75:3e:07:cf:e7:77:7b:8c:a3:79:78:a7:6f:63:
36:90:7f:6d:ec:a8:c5:3f:50:d6:f3:9e:2f:22:89:
15:8b:c0:b3:15:e8:69:0c:e2:3f:b5:48:d8:f1:16:
1b:f9:1c:7a:fd:47:ed:30:9a:d3:eb:35:db:57:55:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C6:99:15:DA:7F:32:C0:BF:7B:51:F4:0B:CC:79:E5:E2:FE:A9:F9
X509v3 Authority Key Identifier:
keyid:0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:75:82:19:14:3f:36:b6:33:42:67:cf:13:70:9e:d1:f0:b7:
da:f2:a8:9d:3e:31:6f:26:1e:e4:2b:08:54:49:5c:ed:96:97:
48:5e:d0:73:eb:e0:dc:ee:1c:e4:28:4f:20:1a:51:9f:ce:74:
43:50:46:c3:cc:6e:66:8a:d1:08:37:65:e1:7d:05:fb:0f:c8:
3f:d8:3b:5e:78:58:9c:9b:eb:91:5d:17:61:91:cf:ef:a4:02:
20:95:fc:2a:ec:3a:eb:d9:e5:b6:e0:a2:38:51:20:69:a1:54:
97:3a:24:cb:ac:32:c7:38:90:3c:c4:43:71:f7:59:7d:6f:02:
28:51:c9:c7:85:3b:a9:b5:1f:a2:b5:48:6a:42:39:9d:63:48:
48:c6:53:ad:96:51:38:15:ec:b9:4c:68:65:56:fa:b9:97:b7:
c2:31:42:68:93:c7:2e:3b:97:11:f6:b3:f9:ae:52:cc:e6:68:
df:b5:bf:ec:8d:48:6f:4d:25:07:9e:b5:66:cb:cd:0a:15:6d:
5e:6d:f0:44:c1:4c:26:55:a1:0d:7b:88:9f:30:9f:c9:fe:1b:
49:ac:28:13:f1:c8:8c:bd:c3:5a:78:20:98:10:5d:82:e1:53:
41:d4:9b:6f:e0:4d:c8:8d:4a:8b:91:b9:f8:a2:38:c0:f3:f8:
65:15:44:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:24:49 2025 by rpki-client