Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
File: L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft (raw, json)
Hash identifier: FGHI7yOrnd+lUBSJuHVcIkQFpuluhOaNVZ5C+FYq/ag=
Subject key identifier: 2C:C6:99:84:64:57:00:E5:12:0C:B9:9F:07:DC:98:A8:BD:A6:65:43
Authority key identifier: 2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4
Certificate issuer: /CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
Certificate serial: 01965CF12212E51EB5E5FBD8E94A5D3B9985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 10:00:28 +0000
Manifest this update: Tue 22 Apr 2025 10:00:28 +0000
Manifest next update: Wed 23 Apr 2025 10:00:28 +0000
Files and hashes: 1: L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl (hash: 8k/LtPutvzPmLfV4waBRVeohUnlYDzneJ4DPSwlw3E8=)
2: X4PWvygxBdxI2bPS7qTomVF09pI.roa (hash: 2E6tFW6VfoZTEjVF3J8CP/Q2ZVMLRzmKJIsn7Czdp0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:22:12:e5:1e:b5:e5:fb:d8:e9:4a:5d:3b:99:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
Validity
Not Before: Apr 22 10:00:28 2025 GMT
Not After : Apr 23 10:00:28 2025 GMT
Subject: CN=2cc69984645700e5120cb99f07dc98a8bda66543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:5b:1c:01:93:65:b1:ba:a9:14:2d:45:fe:
a4:75:04:b3:ea:77:91:60:fc:47:9c:db:e2:2c:33:
1d:fa:eb:21:cc:17:60:62:12:49:88:ae:4c:67:c7:
7f:df:f1:86:e5:8f:49:40:21:f6:8f:45:94:2e:e4:
61:d3:7d:7e:1e:3e:ee:de:d1:a4:20:a4:8a:ff:52:
b4:b4:93:de:d9:0b:3c:4e:1d:7d:df:7d:6e:0c:96:
c4:53:f0:c9:a0:e0:41:93:e3:79:b6:04:99:4a:54:
49:76:02:06:de:0f:76:d1:80:ca:dc:aa:77:ba:3e:
cf:e1:21:39:e4:00:49:14:d5:da:24:a1:41:c7:97:
94:15:7c:68:b6:5a:4d:77:9d:34:78:0c:13:ba:06:
5f:91:84:65:62:a2:24:27:d6:36:72:d8:90:e8:d3:
69:f9:30:65:fb:ac:dc:d9:43:53:40:2e:ad:8a:41:
ff:00:9e:ac:7c:0b:4f:96:ec:f6:4e:ed:14:c1:d3:
d3:9a:46:c2:69:86:3a:45:70:e1:a3:6e:10:5a:35:
67:96:75:08:d6:43:82:f5:6f:0c:95:cc:35:4b:a7:
4d:de:dc:1e:f6:04:09:1c:fa:fa:6b:22:9d:0c:9d:
6b:dd:ad:4c:94:c5:e3:52:35:8c:97:60:6d:82:f5:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C6:99:84:64:57:00:E5:12:0C:B9:9F:07:DC:98:A8:BD:A6:65:43
X509v3 Authority Key Identifier:
keyid:2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:af:21:01:54:20:94:86:44:21:0e:9c:ef:c9:7b:ac:8a:44:
1a:17:fa:66:2b:e0:35:da:54:d6:e8:51:fc:9a:54:17:bb:39:
5a:f5:19:ff:0e:ed:6d:28:c0:47:72:c1:3c:1b:0f:51:e0:1e:
0b:cc:64:96:93:ae:f5:f4:20:d7:d2:f4:7d:a8:f5:86:4d:2b:
b6:14:76:ba:f7:9a:68:0f:ac:c7:e9:c8:02:09:4d:3d:21:09:
d8:89:3e:65:4a:53:9f:20:8e:b2:ba:5b:ba:6d:b3:e1:6d:da:
a1:8a:b7:19:d1:1d:fa:3e:25:07:d6:d6:1c:2e:69:ec:23:7a:
e2:47:32:43:c3:12:30:1c:70:3d:49:31:c8:3a:93:23:ec:69:
c3:15:dd:41:37:df:00:72:bf:8a:a6:38:31:b8:8a:f3:d3:2b:
6f:db:e2:23:0f:4f:d9:98:39:78:5e:6d:76:1e:9b:8d:9b:2e:
23:50:5d:bb:23:c1:24:b8:ad:35:7d:0f:0a:8c:75:b0:aa:b6:
f6:7b:82:2c:4a:8c:13:ed:89:22:6e:0e:91:21:86:23:5c:0a:
74:d8:25:a9:57:db:d1:0d:23:47:fc:54:d3:a9:24:5b:28:2a:
71:00:2d:dd:fe:c6:73:f5:7d:d1:e0:8a:70:1c:59:fe:40:3b:
ac:b6:a7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:23:41 2025 by rpki-client