Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
File: 7HDF2GfeIA8BSGsaiAqUuEldciA.mft (raw, json)
Hash identifier: iy1pNRnu88lwcxC8hXsHKX4m+n9jfBFz2Yp29r5xGaA=
Subject key identifier: 02:1B:E0:A6:3D:27:02:AF:74:BE:27:D4:94:E4:73:75:9D:92:4D:CD
Authority key identifier: EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
Certificate issuer: /CN=ec70c5d867de200f01486b1a880a94b8495d7220
Certificate serial: 0196B96CF4536232CC1A621D9F872B0115DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
Manifest number: 0DF4
Signing time: Sat 10 May 2025 09:00:47 +0000
Manifest this update: Sat 10 May 2025 09:00:47 +0000
Manifest next update: Sun 11 May 2025 09:00:47 +0000
Files and hashes: 1: 7HDF2GfeIA8BSGsaiAqUuEldciA.crl (hash: XtXENG4j8aEqkMI3ZaMIEQ8Ywi4m03kzegrTjzx2uas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:f4:53:62:32:cc:1a:62:1d:9f:87:2b:01:15:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec70c5d867de200f01486b1a880a94b8495d7220
Validity
Not Before: May 10 09:00:47 2025 GMT
Not After : May 11 09:00:47 2025 GMT
Subject: CN=021be0a63d2702af74be27d494e473759d924dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:aa:60:d5:42:c4:6c:48:2a:75:79:59:af:
b4:e6:f5:7c:c9:26:db:9f:d6:a8:58:21:d9:62:33:
e3:f9:50:2b:c8:60:0b:3b:5d:a0:39:1f:86:aa:39:
85:59:7e:db:4d:b9:12:99:09:23:78:e7:74:13:29:
a8:cd:e7:78:93:c4:f1:8c:52:88:a4:80:58:95:ce:
37:44:36:4b:1e:a6:74:2f:3a:b5:c0:25:00:d7:dc:
b6:4b:14:88:3a:89:8b:35:a5:e3:1c:2a:9f:09:d9:
1d:41:d5:33:01:06:ef:c1:31:eb:a2:e5:1f:1d:83:
a7:be:16:21:7f:ee:0b:5a:13:54:d9:48:53:cf:46:
e7:17:ae:2e:47:a5:1d:07:53:98:1d:5c:2e:e8:7b:
e4:1c:76:8a:61:11:ee:90:f8:c9:f0:51:8b:7c:21:
e0:8c:05:51:3c:d2:e8:20:a2:46:e8:04:38:14:f8:
cb:0a:12:c7:52:d2:c6:05:e3:91:b0:91:af:25:85:
52:2f:5b:51:5f:00:13:03:84:ae:52:94:33:70:c0:
9c:f1:db:7a:5f:5b:0e:a9:17:56:e3:16:27:6b:f4:
ba:fb:26:34:d8:3f:a2:74:20:85:94:25:b3:b2:65:
40:a0:07:3b:33:d0:e6:fa:29:53:a7:be:ab:e6:27:
ce:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1B:E0:A6:3D:27:02:AF:74:BE:27:D4:94:E4:73:75:9D:92:4D:CD
X509v3 Authority Key Identifier:
keyid:EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8d:e5:58:12:ab:08:96:13:31:fe:09:ef:2c:25:08:35:55:
04:ee:61:42:7f:af:9c:98:12:8d:29:02:52:48:44:fd:9b:0b:
75:cd:ca:10:c4:d0:c1:f0:cc:73:3d:a4:94:9f:2d:e8:72:51:
12:37:d4:b3:e5:98:ba:05:ca:0e:6d:58:b3:8c:1a:0b:c0:9c:
fa:e3:0a:82:b9:ed:dc:f4:44:6d:f0:e1:85:91:b8:b6:cd:96:
b8:f6:66:4c:6d:f3:07:70:ae:8c:bb:71:13:32:3d:11:a9:e2:
b2:62:f8:f1:5f:d6:8d:df:fc:b5:7f:87:bb:8e:c8:d8:27:a3:
14:c8:b3:c2:d4:7c:df:c0:4e:bd:83:89:21:b5:b4:21:79:25:
f1:68:f0:01:51:08:db:a8:b3:ab:2b:1b:9d:8a:5e:10:dd:ec:
05:2d:14:dd:4a:17:11:10:82:d2:0b:64:ab:f6:c2:be:63:07:
be:66:bf:a0:aa:42:2d:0b:7c:0b:41:f9:b7:f8:47:8f:20:bb:
37:d4:68:29:64:e9:0d:36:fc:c8:98:1f:00:63:97:bc:b7:4e:
0f:7a:b4:ba:69:f9:f0:ad:13:3d:89:e7:91:aa:d2:9c:63:1c:
29:63:55:85:a3:f6:61:df:09:5a:4b:12:d4:e3:e7:79:5b:94:
25:ce:9b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:31:57 2025 by rpki-client