Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
File: 7LYS4fa02D-KXVUs87YO3SO_6fQ.mft (raw, json)
Hash identifier: pip0Fa93ymA+M/sKbQVNTxWPWpxgCQdvVQYQjPzroag=
Subject key identifier: 25:39:9A:3E:17:25:79:3E:8F:BE:6A:34:BA:C8:40:12:08:5E:02:4F
Authority key identifier: EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
Certificate issuer: /CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Certificate serial: 019652A47829EEA66AB196C3D3FDCFE21D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
Manifest number: 145B
Signing time: Sun 20 Apr 2025 10:00:32 +0000
Manifest this update: Sun 20 Apr 2025 10:00:32 +0000
Manifest next update: Mon 21 Apr 2025 10:00:32 +0000
Files and hashes: 1: 7LYS4fa02D-KXVUs87YO3SO_6fQ.crl (hash: +RfmpHCLXQXUvc2L9DtkMm2Jv8Vg0SmVJ0nwag6NGVE=)
2: aG5rAcUPlfAS33bppi3npjnJwhs.roa (hash: zJztqNoDduT6a/19sVXNq9OoLdpe05NzflFeIp+fVjM=)
3: rkeCi7bAOmm8jNM4SPUix4rpKGY.roa (hash: mpdXZon8vvR8j0E2gSl7AGKnGzRDJd6WpjcomYnKKnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:78:29:ee:a6:6a:b1:96:c3:d3:fd:cf:e2:1d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Validity
Not Before: Apr 20 10:00:32 2025 GMT
Not After : Apr 21 10:00:32 2025 GMT
Subject: CN=25399a3e1725793e8fbe6a34bac84012085e024f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ca:8f:4b:99:a1:e9:61:d5:1d:b2:91:7d:88:
75:45:72:2a:b5:3f:9b:ea:cd:fc:15:7c:03:19:1b:
e1:a0:90:1a:4f:af:63:e2:fb:30:31:18:41:1f:d2:
d0:12:7e:a4:6c:a7:2f:16:38:21:15:2a:dc:e1:a1:
59:aa:51:a1:1c:02:23:9f:87:6e:6f:5f:df:fa:a7:
08:64:2c:6a:0a:de:d7:91:63:67:82:06:3e:e8:2a:
82:08:1c:60:e5:1d:51:a4:fb:e0:f9:76:e3:19:9c:
11:31:a1:25:e2:83:8e:8b:f8:e2:d9:90:56:26:fe:
f6:ec:8b:d9:3b:8e:cc:f6:10:d7:f8:7b:36:f0:73:
0c:9f:9a:9d:85:34:fd:68:bc:e8:70:71:ad:86:94:
a2:b2:20:0d:e5:e0:44:9a:dd:3e:82:10:ee:f6:7f:
b9:46:80:b9:85:5c:25:4d:90:94:3b:4c:e1:56:1d:
81:cf:b1:4f:88:a9:58:10:8f:15:4a:02:f7:55:25:
36:1a:81:d6:8b:cc:7c:78:26:50:c7:34:61:5d:af:
3f:6c:c0:cd:96:38:3f:61:40:39:ca:36:49:13:4f:
17:3f:e1:6d:9a:d1:70:16:bd:04:83:84:47:d8:a7:
2e:a1:51:25:a1:57:8d:bb:ac:50:4c:36:8e:a8:f5:
2a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:39:9A:3E:17:25:79:3E:8F:BE:6A:34:BA:C8:40:12:08:5E:02:4F
X509v3 Authority Key Identifier:
keyid:EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c0:68:5d:e0:0a:42:7e:58:30:92:4e:ed:f2:99:0d:29:e7:
42:47:b3:d5:68:fd:b5:2f:8b:a1:da:89:9b:70:6a:3c:ae:a9:
42:7a:05:00:b4:1f:9c:84:2b:35:5a:54:e4:41:18:96:36:d7:
86:11:1b:93:3a:81:cd:a4:b5:f6:9a:c7:17:12:25:61:7c:62:
7d:92:45:ce:78:b0:d8:02:2a:4c:fc:b0:64:f7:57:fe:50:1b:
29:d1:a8:aa:8c:e4:0f:ea:64:57:f8:88:11:8b:c0:7f:57:21:
70:e7:26:81:dc:c8:23:c7:3c:c6:a5:16:92:35:07:3f:0e:ea:
c7:81:be:49:7f:da:72:f0:07:e4:dd:c3:39:c1:e2:b8:e4:01:
a2:39:db:d3:ff:fd:8a:9b:66:8c:20:3e:4c:5c:60:f7:48:91:
7d:03:6c:4a:04:1c:e1:98:e0:1a:65:da:36:51:42:a2:79:3c:
ff:39:f1:0f:6a:3a:1d:e0:f2:b9:88:5f:d0:a8:99:95:1e:b7:
00:91:3a:de:c7:4d:2a:7f:6d:7c:3d:94:46:07:16:78:2c:d8:
76:57:27:2b:47:98:7e:e9:88:20:da:a3:3f:e4:63:45:89:20:
24:78:b2:19:af:4b:0b:5e:0b:c7:6e:8b:eb:28:83:b2:f1:31:
75:43:a6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:06:47 2025 by rpki-client