Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
File: b7yr8HwZyKIKdpqoKQcaszgvWIo.mft (raw, json)
Hash identifier: qzQnc25BmyUFSftCTxtpFqnG7PpSRPBsxF+AGGiE+84=
Subject key identifier: 0B:7D:97:17:D4:1E:DC:AD:D2:01:AC:71:35:A8:2F:E6:55:76:56:EC
Authority key identifier: 6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
Certificate issuer: /CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Certificate serial: 0196AA314D082F547D96DDDA45B6595DE813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
Manifest number: 1527
Signing time: Wed 07 May 2025 10:01:19 +0000
Manifest this update: Wed 07 May 2025 10:01:19 +0000
Manifest next update: Thu 08 May 2025 10:01:19 +0000
Files and hashes: 1: b7yr8HwZyKIKdpqoKQcaszgvWIo.crl (hash: WqyUw8W4xifnQJ7HPaEaI3zkN4F4zpSxFNmtpIr81rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:31:4d:08:2f:54:7d:96:dd:da:45:b6:59:5d:e8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Validity
Not Before: May 7 10:01:19 2025 GMT
Not After : May 8 10:01:19 2025 GMT
Subject: CN=0b7d9717d41edcadd201ac7135a82fe6557656ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:89:7f:d3:a8:9d:1a:48:6c:c7:dd:23:0e:
6a:96:d1:0d:e3:c4:c8:50:3a:e4:65:4b:84:9d:ce:
d1:2e:7c:1d:c6:41:3a:57:45:7b:73:31:1f:50:a1:
a6:37:14:c7:08:9f:39:28:cd:af:e4:83:bf:0a:0f:
16:97:63:fd:99:36:89:3f:9a:37:06:b8:5f:fe:88:
0c:b3:e4:fd:bb:08:80:85:6c:28:4e:a1:36:f2:00:
d9:82:3e:8b:de:94:b2:97:c5:91:a1:80:a7:cb:92:
e9:62:f0:7f:35:75:a1:3a:5e:11:9f:d8:0a:e7:c6:
98:5f:6d:4d:c2:16:16:56:e2:a4:b8:4e:04:e0:7f:
83:9f:2b:dd:62:a5:78:e9:df:ea:8b:2d:4c:15:09:
20:55:10:e5:a3:63:1b:89:7f:f6:41:a9:f2:6a:36:
67:91:12:53:d7:5b:81:c1:f5:9c:60:39:50:58:80:
4d:c5:31:14:7b:10:de:f5:60:60:18:81:54:1d:a9:
f4:67:47:5b:68:d4:ca:52:12:91:11:d8:af:cc:6d:
88:f7:aa:fe:da:0f:8c:ba:fe:03:d4:8b:3f:51:63:
97:b2:54:d9:e2:4b:60:f1:4f:38:b4:98:4e:c6:b7:
bc:45:fe:10:f6:c5:c6:a4:1a:b1:e5:9f:32:fa:2c:
e0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7D:97:17:D4:1E:DC:AD:D2:01:AC:71:35:A8:2F:E6:55:76:56:EC
X509v3 Authority Key Identifier:
keyid:6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:82:4d:7b:a5:d5:90:e0:2a:86:62:3a:cf:eb:f9:44:30:57:
9d:82:0c:89:38:44:76:fd:11:31:1e:67:75:a6:7d:89:76:56:
39:f5:1c:19:82:af:5e:86:a3:1e:9c:5c:09:72:2a:5c:99:29:
01:2a:c4:01:6f:01:e8:80:de:f7:da:d4:9e:58:7a:f0:ef:5e:
4f:97:52:1e:7a:40:80:58:77:6c:37:a7:58:35:ed:62:bd:fa:
30:fa:f7:85:85:d2:a3:33:f7:92:b6:42:4a:52:0d:75:54:c8:
69:9e:ef:ed:d9:ca:bc:87:67:58:b8:eb:56:10:b8:21:7b:52:
42:e7:b0:65:40:33:b9:2b:9c:43:95:36:1e:82:22:2f:56:9e:
bd:59:2f:0f:d1:2a:33:6c:1d:bb:d7:a0:a8:0c:b0:66:79:b4:
ae:23:93:18:e5:2c:e1:47:2a:36:69:1f:7e:ca:9c:0d:f8:53:
29:dc:3c:51:0e:3a:f7:43:6d:f8:a5:68:f4:db:e2:b7:a9:ac:
44:a5:8d:a0:29:c7:ea:56:dd:9f:9d:cd:f3:3d:7e:f8:ac:0a:
18:89:02:dd:bc:f0:8b:d2:39:6f:99:b5:f7:d5:af:39:ed:6d:
5a:2d:a8:54:d6:24:35:b8:a8:49:fe:8f:45:c0:45:d2:c2:9f:
42:2c:f7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:00:48 2025 by rpki-client