Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
File: L7h6LDCddVU6RuECV3XpqkH2szc.mft (raw, json)
Hash identifier: 7G/q2kcboYomMoaTOFj2FY6T27ZKbfHVvES8HlXQkmk=
Subject key identifier: 5E:D3:FA:5B:82:06:7B:B9:D9:37:73:3E:87:15:EC:95:C3:10:A8:8B
Authority key identifier: 2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
Certificate issuer: /CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Certificate serial: 019658A6652BEBFC0C95E4194F9B1C4992EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
Manifest number: 1229
Signing time: Mon 21 Apr 2025 14:00:21 +0000
Manifest this update: Mon 21 Apr 2025 14:00:21 +0000
Manifest next update: Tue 22 Apr 2025 14:00:21 +0000
Files and hashes: 1: B67VWzdl3AAKjk23JpPqT48jA8c.roa (hash: bzW8M0K39ivXss5N9+C/b0aX7RrIq8uKGLc//kpqL54=)
2: L7h6LDCddVU6RuECV3XpqkH2szc.crl (hash: uopPdE4gNypt2RTZkn36DAW9wAutpr42V+1ZxUMH1ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:65:2b:eb:fc:0c:95:e4:19:4f:9b:1c:49:92:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Validity
Not Before: Apr 21 14:00:21 2025 GMT
Not After : Apr 22 14:00:21 2025 GMT
Subject: CN=5ed3fa5b82067bb9d937733e8715ec95c310a88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:91:7b:97:5a:ae:c5:5b:9a:73:dd:dc:bd:
be:01:3f:36:8f:22:08:de:0f:5e:50:a8:86:8d:0a:
cd:88:52:15:50:a3:cf:92:60:d5:be:6f:67:78:c0:
0f:36:69:00:e0:34:bf:49:6f:99:5d:16:c7:22:86:
77:ea:72:36:46:df:c8:e4:03:92:ea:30:b6:c0:bb:
20:d4:5b:1a:e5:b5:5c:11:a7:24:e5:30:39:81:ae:
67:02:50:10:d3:19:35:59:27:9d:d1:5c:7a:dd:aa:
35:7b:2f:50:7b:ef:e5:d3:9f:17:0c:cb:6b:79:91:
46:1d:b7:44:02:4e:08:cb:f2:e9:9f:93:2f:bc:78:
68:82:b4:00:54:e5:3f:9e:ec:2a:0e:08:98:6e:19:
19:11:ee:67:cd:99:68:20:25:b8:91:18:cb:80:b3:
af:1c:70:7b:88:c7:cd:11:b0:d9:af:2f:c3:ba:eb:
19:36:fb:2d:78:49:f8:14:8d:fd:d0:91:76:31:b6:
c5:03:4e:13:cd:0e:34:a0:26:93:66:62:09:6b:33:
2e:62:a8:0f:54:43:eb:a4:3f:cd:3b:bd:28:84:c2:
d2:b5:27:f4:58:34:50:7a:98:fe:01:8e:1d:72:58:
24:a9:f7:51:1e:d4:fb:41:c0:8b:1d:bd:b9:b5:0d:
b9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D3:FA:5B:82:06:7B:B9:D9:37:73:3E:87:15:EC:95:C3:10:A8:8B
X509v3 Authority Key Identifier:
keyid:2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a4:a4:48:ba:e7:0b:20:99:6f:db:7c:ef:48:6b:fb:5a:ab:
79:81:1c:c5:ec:cb:d2:79:8f:ec:98:bf:fe:ff:32:8b:6c:35:
4d:d1:0c:55:0d:a5:63:d1:92:ea:4e:c9:7c:ba:59:17:5c:6d:
6c:a6:81:4a:d5:5b:66:20:17:90:e7:d0:e1:5d:40:c7:7e:ed:
11:ab:53:8c:a4:58:e3:f5:07:e6:7a:c4:ac:ad:c7:f8:df:29:
d4:fe:1a:17:3e:99:38:39:f3:48:56:8e:e1:42:44:38:6b:d7:
cd:0b:b3:8d:e7:e5:2f:a0:5e:98:d4:28:a9:12:eb:1b:d3:f0:
2a:41:b3:52:a0:57:fa:b1:c6:42:40:c3:12:2d:19:c8:91:43:
a8:af:78:e0:27:af:52:ab:3d:2b:f4:a9:7a:a9:19:34:87:6b:
68:9b:fa:2b:fd:4a:b4:34:71:36:4a:19:0a:08:17:a1:87:64:
3c:70:fe:c9:32:22:fc:f5:8d:25:3a:4c:7c:0a:23:b1:3f:db:
81:f7:b6:97:97:5e:a1:f1:e8:62:1d:90:d5:14:41:1e:6c:fc:
39:13:19:98:26:fe:1f:63:fb:b2:2e:71:08:4c:5c:6f:27:0b:
f0:d9:50:84:28:34:29:1e:91:6c:12:b6:f3:29:4e:a2:e9:48:
57:20:1d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:23:15 2025 by rpki-client