Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: luw89J7RoKHjwbtHNG6eiNIgpksMjRlTkQWDaJIaWy4=
Subject key identifier: A2:F5:C1:F9:62:6D:FA:A4:9E:FF:D7:29:AC:7D:07:AC:38:52:A8:5B
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 019648FCE22332E658D5E15158EEDE642014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 14FC
Signing time: Fri 18 Apr 2025 13:00:54 +0000
Manifest this update: Fri 18 Apr 2025 13:00:54 +0000
Manifest next update: Sat 19 Apr 2025 13:00:54 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: TUVwQXfLhcyExMpoVQG31mmqyqYWQFPScga7x01BDZI=)
2: MOwk6-gNTotPX4medNv9DwpG-nY.roa (hash: 6Jb3ucO6IvrIBpfG+RtQ1ACJyD7qIWwk6gOaPXaKjcU=)
3: YTaACXpx54gDy9xvy1Yl2SVGqRU.roa (hash: LQglYAbCThbY5IKAki5TmwIb5w2DJ6WRR1u7/db90zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:fc:e2:23:32:e6:58:d5:e1:51:58:ee:de:64:20:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Apr 18 13:00:54 2025 GMT
Not After : Apr 19 13:00:54 2025 GMT
Subject: CN=a2f5c1f9626dfaa49effd729ac7d07ac3852a85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:13:79:86:9d:a6:63:86:29:36:b0:f5:d5:
c3:b3:51:73:a7:62:d8:9b:71:19:a7:a2:e1:41:c4:
12:61:10:1c:3b:d0:cf:f8:a7:1c:ed:73:12:5f:14:
92:8e:ad:f4:8a:0a:e7:94:bf:17:8d:57:e6:ed:14:
41:0a:0b:78:1d:ae:61:27:99:6a:1f:96:34:f4:fc:
8b:b8:57:de:93:45:f1:9c:db:2c:34:5b:9c:8e:ae:
7f:95:2d:2b:7f:8f:b7:18:08:29:5a:55:a8:60:eb:
d7:e1:69:99:67:2e:4f:e4:25:e6:40:d8:a2:f7:ce:
c9:17:ac:96:1e:c5:cb:f0:9e:75:19:10:5a:4b:0f:
e7:f0:f1:a7:8a:de:05:02:b8:6b:27:9e:df:57:05:
15:78:f6:3c:8f:80:c0:8b:aa:da:c7:77:ef:6a:08:
a3:09:90:4b:4b:8e:0b:90:6d:30:cf:e3:61:bc:75:
45:df:8b:92:17:22:e0:49:35:b0:0a:fe:2e:49:86:
7d:80:87:98:a8:d0:cb:20:bd:de:28:e5:73:00:5a:
1c:d8:87:6f:99:d9:d8:ae:a7:64:d3:dc:22:a5:31:
3e:ea:27:26:01:86:de:96:be:9e:91:22:37:5c:c7:
8c:1c:30:9c:c7:a9:b2:da:78:b8:b5:a4:35:b6:9e:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F5:C1:F9:62:6D:FA:A4:9E:FF:D7:29:AC:7D:07:AC:38:52:A8:5B
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:29:1d:eb:a4:e8:87:33:67:1f:75:e1:d1:70:f8:88:18:c9:
e5:01:63:49:2a:04:8b:7b:47:86:8a:91:cc:8c:72:a7:5b:98:
03:75:3f:63:7e:f7:e7:74:65:e2:c6:9a:e5:d0:26:2f:37:1b:
37:99:22:5f:ca:28:95:5a:fc:c7:1f:f8:08:4b:f8:2e:56:7b:
b3:2f:89:e8:d2:1d:bb:82:ae:eb:2b:12:9a:9c:9b:8c:40:22:
26:d3:58:78:f4:9a:f4:5c:80:f3:09:b5:b6:72:be:89:9d:16:
a0:ba:34:61:0a:e4:84:83:1f:6e:21:8d:8c:d1:af:be:5a:ad:
7c:34:8c:a1:08:13:19:0e:93:80:aa:cb:7a:d0:6a:13:a8:b5:
28:cd:08:9c:15:84:1d:bf:b4:1c:02:c0:61:02:bc:b1:cd:a6:
ef:6b:dc:a7:38:e2:e2:0c:bb:a1:56:38:dc:89:5e:0f:c8:10:
33:72:1b:1d:dc:0f:56:8d:e4:f4:e8:b4:93:72:be:35:05:4f:
e1:a7:c9:6d:a3:13:21:b1:49:85:3a:ed:87:01:7b:3b:6f:45:
00:0d:49:59:ed:45:17:b8:1c:31:4b:8c:c4:d0:1d:b5:8f:47:
1a:37:f5:5a:68:0b:2f:ae:0f:a3:f1:34:a6:8a:4e:08:e1:ed:
f9:21:57:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:17:10 2025 by rpki-client