Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
File: 7zxxAAZFDN50pBmnFDKY5VBm8mw.mft (raw, json)
Hash identifier: tZrRuxpHSY1zzWSGBVVmG7dGEUk7GmwHE8AJeoHy/8o=
Subject key identifier: E0:BA:F7:11:28:59:1F:77:27:1F:5B:A4:0E:AD:ED:71:81:C2:98:E9
Authority key identifier: EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C
Certificate issuer: /CN=ef3c710006450cde74a419a7143298e55066f26c
Certificate serial: 01976E87611D4FCAE9A0046C781C591ECCB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
Manifest number: 048A
Signing time: Sat 14 Jun 2025 13:00:55 +0000
Manifest this update: Sat 14 Jun 2025 13:00:55 +0000
Manifest next update: Sun 15 Jun 2025 13:00:55 +0000
Files and hashes: 1: 7zxxAAZFDN50pBmnFDKY5VBm8mw.crl (hash: 2VbjqllcfSxpYvnWk3MMcr/jvFN3aF1d2P7HSdEUlto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:61:1d:4f:ca:e9:a0:04:6c:78:1c:59:1e:cc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3c710006450cde74a419a7143298e55066f26c
Validity
Not Before: Jun 14 13:00:55 2025 GMT
Not After : Jun 15 13:00:55 2025 GMT
Subject: CN=e0baf71128591f77271f5ba40eaded7181c298e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:f7:b6:44:4c:e7:6e:86:47:91:d5:f7:c0:
63:3c:66:57:4d:ea:11:cb:fb:6a:86:e1:6a:ff:82:
0c:33:bf:3b:83:87:40:ab:6a:ac:b6:3d:d8:dd:ff:
22:6c:a9:c9:cf:e3:d2:9f:3b:f3:0d:a8:2b:57:0a:
ab:5d:5a:29:0e:04:2e:1c:62:ab:ca:60:13:d0:7e:
af:7a:b8:15:5f:8c:d5:c0:06:7d:40:36:bd:53:82:
0b:d1:4c:b2:f7:6d:87:16:82:58:7f:fd:54:0e:d4:
85:37:6c:07:60:d1:6c:c5:a4:3f:aa:60:6c:48:e2:
1b:da:5a:dc:93:6b:ed:84:6c:ca:d9:9e:92:69:0d:
4c:c5:4d:90:79:7f:a5:55:54:30:d6:d3:4d:a4:05:
01:64:9d:60:11:08:d1:f9:e8:82:29:c6:f1:21:fa:
8a:0d:4a:4b:bb:a1:c5:0d:22:9b:ab:4b:bb:4e:0b:
43:44:8c:c0:d5:23:c6:7c:06:bd:b2:bc:2c:e3:8b:
4e:90:73:c3:cc:3d:c5:a5:ae:ae:b9:de:c1:3c:65:
39:65:ab:f7:8d:22:77:a4:b8:49:0e:99:75:9d:da:
f5:15:99:0f:d3:77:63:b3:10:d0:6e:6c:85:8e:f9:
83:22:93:c8:2f:c5:3b:00:5b:ce:df:dd:c6:21:11:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BA:F7:11:28:59:1F:77:27:1F:5B:A4:0E:AD:ED:71:81:C2:98:E9
X509v3 Authority Key Identifier:
keyid:EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:52:ee:2b:9a:ef:16:8a:74:45:bd:1a:85:da:45:fb:c9:e4:
83:01:e2:a6:3f:de:a5:b0:88:72:11:f8:7f:16:cc:c4:1e:82:
75:39:4a:6e:e7:3f:4f:88:fa:2e:8a:4e:37:5e:3b:f6:28:4b:
14:ab:bf:f2:d5:2e:b1:af:41:f2:e0:8f:99:9c:ac:1d:bf:06:
ce:a6:91:69:0d:0a:a3:3e:ef:d8:d4:9e:6e:f0:18:4c:78:a9:
ed:08:e8:d3:e4:8a:2c:07:03:b5:56:1a:1a:36:b8:c2:cd:11:
dd:37:10:07:c2:ab:9f:bd:0f:bc:f6:1c:54:62:eb:77:81:9a:
f5:da:b3:b3:07:36:cd:fe:4c:1d:28:b9:8c:d5:02:f8:66:5f:
a1:44:1a:8d:1e:43:aa:29:45:55:56:c8:09:27:e7:ad:0d:e6:
4d:1a:23:c0:60:d0:66:b4:14:ae:74:53:9f:b4:5b:66:df:cd:
95:3a:7a:5b:0d:14:6b:1c:c1:f8:aa:35:25:8b:57:50:e8:32:
42:b0:0d:42:04:cc:b6:20:fb:08:15:2d:50:1b:41:dd:eb:0a:
75:6c:17:72:85:bf:12:9b:b0:fe:bb:2d:ad:78:a1:04:de:a8:
a5:42:be:cd:8e:42:d9:2a:50:c2:3c:08:c8:7b:5c:1a:9d:9f:
a7:36:b5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:04:18 2025 by rpki-client