
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
File: 7OZJjRdK31yJo2XC0eR33PJPmC4.mft (raw, json)
Hash identifier: Gr/+u/Udzr9lUKKGOAIfMoE+fm3dC+DAKgiXlMDeJ+Q=
Subject key identifier: D2:86:07:FE:C1:21:5A:99:52:76:53:B9:ED:AC:E4:90:C7:62:00:81
Authority key identifier: EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
Certificate issuer: /CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Certificate serial: 01967B69E9831C316C76303500AC935431BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
Manifest number: 01C6
Signing time: Mon 28 Apr 2025 08:01:00 +0000
Manifest this update: Mon 28 Apr 2025 08:01:00 +0000
Manifest next update: Tue 29 Apr 2025 08:01:00 +0000
Files and hashes: 1: 7OZJjRdK31yJo2XC0eR33PJPmC4.crl (hash: cAW5oeFmvXBBvUEaxb6PtP7Gx8uKjUfR9qp61JxK8yw=)
2: _M5AIVuzgXvHBKWny-Hh6G3pi1U.roa (hash: kH4DLz70GCvpi7gNL0YvgZWTRLs57t6MIq2nfE5Mbu8=)
3: tv7BOR__D8ThJMIcJAUdIAlKkwg.roa (hash: jM8tfHRUbeU3G9E4ngQ7Zof6H/32R+jTu43wcHiKIrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:e9:83:1c:31:6c:76:30:35:00:ac:93:54:31:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Validity
Not Before: Apr 28 08:01:00 2025 GMT
Not After : Apr 29 08:01:00 2025 GMT
Subject: CN=d28607fec1215a99527653b9edace490c7620081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:b3:60:2f:25:57:44:70:d2:82:1f:88:13:
0b:b9:b5:54:2a:6a:0d:cd:62:e4:8b:89:a6:da:b5:
e1:c1:04:cf:2a:34:6e:43:ba:d5:dc:16:92:cc:23:
97:60:de:85:f2:3e:f4:14:68:54:32:7b:dc:58:0a:
09:82:85:0d:9d:11:c5:0f:05:32:b7:9d:73:b5:07:
b7:93:d7:e9:6c:1b:82:26:c1:60:82:c0:94:db:dc:
96:6c:76:9f:5e:6a:8a:d9:24:12:70:e3:6f:8a:ca:
10:85:55:c7:ea:d3:4d:10:cb:ce:12:a5:c2:a4:a3:
f6:fe:4f:5b:d7:ed:1b:66:2c:ad:dd:ae:15:a9:9d:
7a:6a:c1:9a:b3:e8:b8:be:1a:65:7b:63:76:b3:9b:
82:94:3d:98:ff:3a:54:c9:d9:b0:8a:c3:86:7f:dc:
d7:7a:c7:fd:19:5e:56:60:e3:73:50:63:0f:a5:aa:
5a:2e:fd:d3:5d:77:98:bc:da:5c:d4:57:0f:e7:c7:
1d:36:d9:27:8f:44:d5:fc:a7:48:02:f2:b1:4b:00:
f2:69:22:09:27:a7:93:57:c0:a6:1a:8f:d5:79:ed:
ee:15:c1:46:ac:01:91:ce:52:b9:4e:ed:5a:8a:f9:
dd:1d:5e:d8:c8:e3:ed:eb:d1:69:32:e8:c6:ae:33:
92:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:86:07:FE:C1:21:5A:99:52:76:53:B9:ED:AC:E4:90:C7:62:00:81
X509v3 Authority Key Identifier:
keyid:EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:51:20:0d:53:61:92:38:cf:fb:98:db:7d:12:a0:4e:f8:88:
78:c1:dd:43:18:83:c0:e1:b9:b7:df:06:b8:d0:56:95:6f:54:
6c:37:19:f1:35:90:f1:af:34:6a:53:8c:26:0a:ab:02:b1:a4:
7b:26:ab:38:37:31:ef:63:ee:a8:c5:10:9b:67:3b:6e:72:56:
77:61:64:71:22:14:22:8b:19:58:f1:f5:f7:84:86:52:8f:97:
6d:1b:32:f6:f8:58:77:42:ff:70:78:3e:a2:08:80:54:62:7a:
76:b3:4f:f4:b5:54:06:75:30:e6:ec:3c:2e:49:37:31:38:9c:
21:02:e0:84:42:cf:ce:5f:16:3a:25:f0:53:21:08:0f:47:84:
b4:d1:49:55:4a:c1:6d:0b:1b:4b:90:2d:3b:cd:0f:84:16:06:
81:c3:b4:00:08:57:c6:93:2d:95:3e:90:37:ef:42:23:19:1d:
cf:d6:3c:5c:0a:c4:4b:1c:14:86:07:a7:f6:65:ca:6c:b7:cf:
81:29:f4:26:1f:4d:94:34:8a:7c:95:a3:ca:35:21:c0:d2:2c:
a6:49:a7:1e:35:17:a2:7d:82:fb:af:53:a5:27:05:88:31:d4:
42:ca:40:28:4a:d4:69:6e:27:83:9f:c2:9f:c1:a5:13:b5:ff:
d5:51:23:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:42:57 2025 by rpki-client