Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File: 7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier: 9+zTj8aBK0KXhDrw5oZ7FcCyHu3D3zE2fvqf5NTc1o4=
Subject key identifier: 46:79:4D:FD:D7:ED:F9:88:A0:E2:6F:D9:F2:D4:B6:49:CD:E8:F9:CC
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer: /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial: 0196BD81147CE91D4DBD727B668EA225B3EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number: 0940
Signing time: Sun 11 May 2025 04:01:15 +0000
Manifest this update: Sun 11 May 2025 04:01:15 +0000
Manifest next update: Mon 12 May 2025 04:01:15 +0000
Files and hashes: 1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: pgQk7KbEYv8f8CO2TZUPJgvZlJeQ+/lxOD/7xMVtrKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:14:7c:e9:1d:4d:bd:72:7b:66:8e:a2:25:b3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Validity
Not Before: May 11 04:01:15 2025 GMT
Not After : May 12 04:01:15 2025 GMT
Subject: CN=46794dfdd7edf988a0e26fd9f2d4b649cde8f9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:25:22:84:c2:ae:32:0a:c0:fa:02:48:b2:99:
2e:a6:58:3c:b4:c2:bf:81:03:52:33:19:f3:c9:9f:
34:89:dd:98:14:45:d4:dc:2c:26:3c:24:6f:bb:7a:
57:d0:cb:42:23:b5:95:f6:aa:7a:df:3f:78:f2:35:
63:50:74:f9:64:c1:6d:27:27:b6:3c:9f:b0:6b:a7:
dc:4c:34:ed:99:20:b2:d0:53:2d:a8:23:e9:31:b2:
5a:0e:22:b3:41:0e:5e:84:26:5a:2c:9a:a0:4f:10:
c4:fb:f1:c9:08:63:9a:55:7b:b1:61:31:31:6e:a0:
92:5c:49:88:42:42:0b:73:45:cc:9c:f2:09:2f:a5:
cd:0c:9e:fb:9e:db:37:09:7d:be:ec:a2:5b:e9:22:
8c:83:e6:4e:9d:aa:10:35:69:15:4e:d9:49:b7:39:
38:f6:b8:3c:0f:08:1a:25:ef:85:df:65:54:9b:f0:
fe:7f:29:09:7a:03:91:20:e6:23:51:15:92:c6:2f:
9d:f3:30:55:a1:9e:a8:91:3f:55:a4:3b:e5:41:d6:
4e:99:3a:93:80:6d:b8:2e:b0:9d:1c:26:fe:a0:3b:
34:3f:9b:ab:74:2a:8f:be:a6:cf:6b:58:8b:ab:18:
62:1c:82:0b:d8:61:4f:af:32:9e:00:95:39:b5:8f:
9e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:79:4D:FD:D7:ED:F9:88:A0:E2:6F:D9:F2:D4:B6:49:CD:E8:F9:CC
X509v3 Authority Key Identifier:
keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d2:db:ba:40:1c:fd:4b:52:99:17:30:0b:94:b4:86:5f:77:
0d:0a:89:f8:9b:7e:06:01:28:55:8f:dc:c2:3a:08:24:1d:c7:
a3:c6:41:03:83:59:b4:54:57:80:14:2a:da:c8:ab:a6:66:36:
fe:3c:73:bc:4c:02:da:25:a5:3b:9f:33:79:ce:e2:2e:3b:34:
08:39:17:77:43:e5:75:8e:86:99:d4:32:90:6b:13:7d:2d:81:
57:7b:a2:91:46:f8:dd:1f:51:5f:39:4e:ce:5a:4c:51:7e:54:
1e:77:18:72:20:4c:1f:32:c1:1f:cb:a1:7b:ed:41:90:cd:0a:
03:85:fc:f8:38:a8:b5:52:e4:aa:14:dd:65:1a:7d:20:5f:1e:
74:8b:49:30:7f:41:83:16:31:4d:f7:3c:b1:71:bd:0c:de:36:
6f:8e:9a:3c:7f:80:ed:b7:09:3a:0d:17:3f:42:dc:8a:d6:56:
12:85:88:57:1a:ae:6d:06:ec:3a:34:bc:1a:3b:9a:5a:6f:49:
54:4c:65:17:d4:ae:a2:9e:e2:33:91:11:c5:38:3b:5c:52:3d:
b9:40:7f:7d:12:45:a2:84:5f:84:c5:43:55:2f:18:a9:1e:c5:
03:c1:09:55:f2:49:6f:ea:18:fe:79:57:da:11:e4:be:0a:7a:
88:bb:be:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:46:29 2025 by rpki-client