Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
File: 7jd-2foR7BmVVVl2LeBHpabrFKg.mft (raw, json)
Hash identifier: +rSV8LjlOCXKwYF/lVPc1rxxdOIwJb2Ul2Iy2FviCkc=
Subject key identifier: 69:30:8E:C6:A6:C8:88:6E:18:81:AE:E7:BA:10:B4:9D:A6:0F:1F:59
Authority key identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
Certificate issuer: /CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Certificate serial: 0196741D8BDD811812279EF540E463C69472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
Manifest number: 0AA7
Signing time: Sat 26 Apr 2025 22:00:15 +0000
Manifest this update: Sat 26 Apr 2025 22:00:15 +0000
Manifest next update: Sun 27 Apr 2025 22:00:15 +0000
Files and hashes: 1: 7jd-2foR7BmVVVl2LeBHpabrFKg.crl (hash: tBfTMye/tQUbSaWbvL7H9W2MQPW4syaGs3z27MAQa5w=)
2: Ypkv0Dz3MT0Yx1rzRPlqN8ybhig.roa (hash: 5FSjbaTtR9k8SDOj/2LjE1uuErnl+zHIrGSKMQg96EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:8b:dd:81:18:12:27:9e:f5:40:e4:63:c6:94:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Validity
Not Before: Apr 26 22:00:15 2025 GMT
Not After : Apr 27 22:00:15 2025 GMT
Subject: CN=69308ec6a6c8886e1881aee7ba10b49da60f1f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:30:9c:94:3b:86:1a:fb:94:8e:38:25:13:
34:af:87:6f:21:38:f4:1e:ff:d1:bc:37:8c:20:de:
8d:96:5b:9e:0c:51:f2:db:42:65:be:10:69:33:01:
fe:a7:dc:80:6f:8f:e3:a2:f3:ac:dd:bd:52:ef:0b:
c2:da:74:9a:25:5c:e7:11:70:dd:71:8c:27:ac:6b:
13:a3:cd:a6:5a:42:a3:77:c1:ad:5c:cb:dd:b4:99:
0c:e7:0a:58:6f:b4:54:4c:35:1d:bc:04:41:ad:c1:
da:53:31:e5:c3:65:9d:13:98:53:97:5b:7a:77:7a:
a3:85:77:db:d1:b9:90:cc:13:ff:ac:ca:d1:5a:81:
98:3d:92:af:f5:11:61:fc:32:c7:fa:71:1d:1a:45:
22:ad:06:55:16:5c:62:0d:46:34:ea:32:66:b7:79:
43:fd:d9:d3:3f:95:23:14:f4:b5:e0:3a:e0:65:5f:
da:fb:7d:b2:00:2b:d1:4e:70:63:94:41:e3:00:2c:
1a:74:95:2b:b1:85:ca:83:ea:5c:15:07:45:e6:59:
35:38:ba:6f:04:c1:50:56:1b:ea:58:54:2f:70:46:
86:f6:56:fb:98:ca:6a:d6:7c:bd:27:67:9c:64:58:
53:0d:42:b8:01:c0:2b:d9:2d:41:28:be:62:b5:50:
f8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:30:8E:C6:A6:C8:88:6E:18:81:AE:E7:BA:10:B4:9D:A6:0F:1F:59
X509v3 Authority Key Identifier:
keyid:EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:28:9f:e1:47:60:f3:18:da:d1:21:68:04:d5:fb:00:b9:a0:
7e:28:26:51:d2:dd:dd:97:73:d0:26:5e:cf:4a:73:2b:df:26:
2c:73:88:1e:e3:2f:fd:8f:19:80:1b:6e:32:1e:70:92:a2:32:
e3:47:8b:ce:12:24:da:be:ff:04:2f:49:9d:71:6f:7f:ff:06:
b4:af:36:44:8f:4a:9e:e3:b8:92:37:bd:52:c6:bb:3e:26:9e:
33:d2:9a:7f:b8:90:c9:70:b5:2a:db:65:13:f1:be:cd:3d:4d:
83:85:d3:61:04:bf:e5:7d:85:3f:36:6b:c3:05:c8:9e:41:48:
b6:17:39:fe:13:d7:5d:7a:23:0b:0f:ef:6c:2b:a6:cb:d6:fa:
f7:0f:74:90:bb:82:c6:a7:da:5e:2f:52:8f:50:a7:6d:a5:36:
07:00:f3:c6:01:09:c5:32:fc:98:59:b9:38:c7:61:c7:87:fc:
48:a3:9a:ef:e6:3d:2e:fc:c1:27:cf:ad:fe:97:94:36:9e:81:
0c:6f:b6:3d:b7:6e:0f:6f:af:ca:90:37:42:50:89:4b:6f:ae:
10:1f:26:bc:e0:dc:1c:05:1e:f5:ce:0f:c9:e8:6f:2b:cf:3b:
e7:e7:89:81:2d:e7:c4:ce:4a:aa:c8:05:ad:37:80:05:84:21:
30:4b:c7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:49 2025 by rpki-client