Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
File: R7lNsbPetIBa0mFVS65rpfp0CMs.mft (raw, json)
Hash identifier: fL2+AAMWqmDobKf6kFWVwRl3J835aNdqJJI+8AgAXFc=
Subject key identifier: 2B:BB:43:28:B3:B5:4C:47:F3:6E:CB:B7:77:B9:11:BE:5F:E4:D1:F1
Authority key identifier: 47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
Certificate issuer: /CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Certificate serial: 01967DC63583E3CD2E89F25E5160A7DF3ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
Manifest number: 150E
Signing time: Mon 28 Apr 2025 19:01:03 +0000
Manifest this update: Mon 28 Apr 2025 19:01:03 +0000
Manifest next update: Tue 29 Apr 2025 19:01:03 +0000
Files and hashes: 1: R7lNsbPetIBa0mFVS65rpfp0CMs.crl (hash: UxD54f0TYrHttMsTmvtRu8JA2nzeY7cpWYplu52ulsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:35:83:e3:cd:2e:89:f2:5e:51:60:a7:df:3e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Validity
Not Before: Apr 28 19:01:03 2025 GMT
Not After : Apr 29 19:01:03 2025 GMT
Subject: CN=2bbb4328b3b54c47f36ecbb777b911be5fe4d1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:aa:04:72:fe:ef:1f:f3:cd:ee:00:85:ad:
f7:96:ef:93:d8:53:33:3f:da:90:ec:f5:86:3c:f7:
1a:f4:63:fb:cc:5a:25:05:71:f0:43:98:35:d6:5f:
4c:42:b9:70:a2:54:b8:96:8b:4a:59:95:03:35:aa:
aa:28:45:7c:f5:41:6d:d4:f5:47:29:db:17:73:27:
a0:36:a4:e3:37:a9:e4:0e:52:4f:bf:11:06:6b:9f:
e8:91:7e:e8:bf:a1:eb:3d:67:f6:c9:03:b6:d3:e5:
57:05:c8:d6:44:c5:cf:0d:72:70:44:48:06:04:70:
98:04:a0:92:f1:bc:a2:80:75:56:e4:13:18:4a:e4:
7f:3f:f1:27:61:ad:fd:ad:17:65:6b:0e:4f:ca:02:
49:86:f4:3f:10:08:06:8f:36:ae:c1:d8:1a:dd:af:
ab:69:96:1f:74:2d:e7:d5:be:00:1e:73:38:f3:98:
47:39:9a:0e:89:e8:94:dc:64:a2:08:b5:ca:bc:2f:
9b:a1:d9:19:6a:ac:6f:8b:87:9b:d1:e8:7d:19:0e:
80:37:db:5f:bd:41:45:76:ea:67:6b:c0:34:68:07:
96:22:0c:1b:e9:99:49:a7:de:bc:80:cc:01:91:d0:
92:25:a2:98:79:75:44:69:4b:af:45:d9:45:a5:c5:
da:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BB:43:28:B3:B5:4C:47:F3:6E:CB:B7:77:B9:11:BE:5F:E4:D1:F1
X509v3 Authority Key Identifier:
keyid:47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2e:92:28:c1:6c:18:d4:2b:f3:26:29:b1:1e:97:b2:e1:70:
9c:67:96:c0:8b:68:7d:f4:fa:66:26:02:7a:c5:dd:32:17:31:
47:32:6e:10:cc:e8:21:50:9d:f4:d8:7c:a3:49:3d:f2:de:31:
6c:c2:f0:13:75:4d:59:53:3b:90:8c:79:ba:12:44:0e:c9:0c:
1c:58:9e:60:81:ab:14:56:40:c0:dc:0a:05:f1:64:5d:41:b1:
6c:9a:1d:15:18:6c:90:98:69:58:4c:45:6a:29:4e:14:3a:47:
3a:45:55:d7:3e:1a:d5:55:07:a6:34:43:eb:ec:d2:5a:e0:74:
f0:93:e6:42:b2:a2:d3:97:f9:86:2d:ce:0a:fc:40:c0:a7:76:
01:c9:a6:45:a6:08:b2:4e:e1:d2:09:22:94:03:62:7c:93:f6:
63:5e:b7:ac:15:d9:79:e0:71:a2:41:dc:37:da:4a:72:d2:e9:
26:ff:9c:89:51:e5:55:7c:c3:61:a6:79:e9:46:1a:13:62:28:
11:6e:cf:5f:b2:c4:fc:ba:54:28:7e:2c:2e:26:a8:d3:1f:fe:
ea:78:ed:32:fc:d3:ae:e2:f9:a1:58:d2:eb:9c:72:98:c6:74:
93:48:a4:f7:ab:d6:40:52:6f:f0:ee:50:0b:c7:d9:77:57:6f:
1c:9f:84:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:53:08 2025 by rpki-client