Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
File: 7zxxAAZFDN50pBmnFDKY5VBm8mw.mft (raw, json)
Hash identifier: fOcEOF7KdipvV2MHwtR9x87mcJqlh2s2fC9ENNvuYi0=
Subject key identifier: 41:5F:9E:79:FB:35:A3:02:79:C5:26:C9:DC:BB:DD:9F:DE:9F:D5:13
Authority key identifier: EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C
Certificate issuer: /CN=ef3c710006450cde74a419a7143298e55066f26c
Certificate serial: 0196B710753EA6EF4121EE37BA873FCE0BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
Manifest number: 042B
Signing time: Fri 09 May 2025 22:00:31 +0000
Manifest this update: Fri 09 May 2025 22:00:31 +0000
Manifest next update: Sat 10 May 2025 22:00:31 +0000
Files and hashes: 1: 7zxxAAZFDN50pBmnFDKY5VBm8mw.crl (hash: mUq53acORKECsNvORQXuYgP+vHS2SSqZxPqSO24XIQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:75:3e:a6:ef:41:21:ee:37:ba:87:3f:ce:0b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3c710006450cde74a419a7143298e55066f26c
Validity
Not Before: May 9 22:00:31 2025 GMT
Not After : May 10 22:00:31 2025 GMT
Subject: CN=415f9e79fb35a30279c526c9dcbbdd9fde9fd513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:07:02:3f:38:6c:ed:a2:61:6f:6d:52:a4:
29:2e:4e:df:5d:4a:54:93:e5:3e:b4:0a:50:ff:4f:
4f:93:5a:ab:b4:25:23:cf:f0:a6:2a:c7:20:d1:c9:
af:e4:06:cc:92:14:17:04:9e:55:a0:38:97:9a:cc:
87:88:e4:e4:53:96:51:17:83:c3:41:3c:75:2b:3c:
fb:4b:43:f6:8b:00:7e:b0:f5:30:38:4a:37:09:ce:
5f:d2:a5:6c:af:fc:a8:9e:bb:32:6a:43:e7:82:60:
91:30:90:71:ec:f7:eb:c6:e8:78:35:5b:2e:99:64:
46:4b:85:c0:7e:af:d2:a2:31:4c:70:de:d3:61:9b:
77:94:07:4b:3d:76:80:74:24:ce:22:f8:37:5f:04:
8f:b5:fb:5a:4f:a6:45:0f:5c:fa:b7:aa:f9:7c:33:
40:47:62:80:f8:ab:72:62:b9:a9:ca:b3:83:bf:ac:
51:da:68:ed:9a:61:ad:fd:4a:04:cf:46:24:84:27:
ca:6f:99:a0:ee:5b:a1:a6:1b:59:7f:16:23:4e:f4:
1d:5a:f4:cd:c8:6a:d9:cb:8a:55:89:95:6a:08:e6:
9e:a1:90:0a:bf:2e:49:3c:2f:00:d4:19:97:b4:bd:
d5:30:a7:c9:09:7f:e2:70:69:be:e7:f8:5f:32:88:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5F:9E:79:FB:35:A3:02:79:C5:26:C9:DC:BB:DD:9F:DE:9F:D5:13
X509v3 Authority Key Identifier:
keyid:EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ca:d7:26:af:a6:e8:bc:85:7c:a1:a8:7f:4c:fa:01:97:8f:
56:7e:26:39:09:bd:3d:76:3a:2e:84:84:0f:9f:c4:13:75:01:
be:79:e5:37:48:94:01:f8:ca:a2:39:68:9f:3f:1f:ae:13:eb:
16:79:4d:4c:78:5a:c2:f0:9d:b6:04:b2:47:46:24:c5:30:bd:
f7:11:d3:57:02:34:36:ea:49:86:3d:d3:1f:c8:b2:4d:65:66:
ac:0c:e1:a4:70:9e:15:9e:51:c4:e6:b2:ee:57:6e:e6:e7:53:
0b:61:6b:9b:2f:5f:8e:c2:a6:f3:16:eb:30:88:0f:b4:fb:7c:
c8:d0:f2:dd:f7:a5:b1:8f:34:bd:ec:70:66:67:05:7f:44:f3:
71:a9:a8:2e:01:ed:d0:62:8c:7f:d0:a0:31:f8:f1:27:e3:67:
a1:40:98:83:78:7d:31:07:6f:e5:a0:7f:d4:e4:cf:63:bf:44:
c3:21:80:fe:d2:c0:54:97:15:c2:e2:b6:99:23:f1:df:72:6a:
f0:8e:94:de:0a:4a:5a:cc:e2:d8:46:75:1e:b6:b4:53:b4:25:
04:64:48:e3:78:8e:d2:89:d0:c8:62:60:b3:ec:2b:80:b9:06:
41:45:38:86:2a:d2:55:62:1b:fd:28:64:f8:10:25:f4:f4:fb:
07:8b:35:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:51:04 2025 by rpki-client