Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File: L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier: l9vEt7axZrukfJmk9wXlb2PtKDQVq5K8kKm47hGsELo=
Subject key identifier: 0B:7A:73:84:A0:27:C2:FC:FC:F8:1F:66:26:8D:75:40:D2:EC:C4:A9
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 01974A0CC6257CED2194968FB7FA46B972A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number: 037D
Signing time: Sat 07 Jun 2025 11:00:40 +0000
Manifest this update: Sat 07 Jun 2025 11:00:40 +0000
Manifest next update: Sun 08 Jun 2025 11:00:40 +0000
Files and hashes: 1: AYSw-t6FZQxOf3uyaYVOxPT7rkw.roa (hash: Xaavj0qNWpbVbYI0PhwiiuL7IGyoywVJOdUO3BJEDgM=)
2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: xLuMr6Duq9M7v20pWd9EeqYMFAjXE9GHoXa0aXdEWEE=)
3: M-EHR3HmGlEqhPSa4hFH9zBtA4U.roa (hash: dHd9hXlo/bLFC9dpW29XAWP5l4uG2XM3fAni1G6KglA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:c6:25:7c:ed:21:94:96:8f:b7:fa:46:b9:72:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Jun 7 11:00:40 2025 GMT
Not After : Jun 8 11:00:40 2025 GMT
Subject: CN=0b7a7384a027c2fcfcf81f66268d7540d2ecc4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:f8:93:86:81:6c:6b:e5:51:d4:25:5e:fc:
0c:53:88:71:b5:16:06:28:5c:48:80:19:ce:8a:ae:
1a:9b:7b:ac:76:03:5e:d5:be:c9:72:7b:69:4d:fb:
cb:96:e6:ec:cb:4a:69:fb:c5:0b:56:97:40:f5:d1:
81:7b:3c:4f:df:a6:e4:33:50:98:b4:5a:ab:5a:1e:
16:9f:bc:98:2a:4e:b2:69:22:45:5e:9c:2f:03:63:
99:b3:01:40:50:d2:29:14:3a:88:5a:2a:9b:4f:e3:
19:5d:0b:9b:9a:16:de:0e:9d:88:07:89:4d:86:9b:
5b:f4:2f:55:4a:00:b2:1f:60:73:05:ea:cb:d6:db:
fd:1b:3a:d0:85:ea:04:34:5c:22:d7:f1:20:50:bf:
aa:15:fd:a9:3f:62:66:a5:e4:dc:67:6b:5c:01:da:
e4:55:06:92:3e:b3:d7:2f:c8:9b:be:b7:dd:af:22:
23:d6:b7:cb:e5:1e:bd:30:fb:c0:ce:15:b2:ba:b2:
52:7a:fb:94:a8:a9:cf:42:f1:5a:e2:24:62:b9:ae:
82:de:07:0a:bf:1d:39:66:c3:90:a6:dd:92:63:ea:
27:d5:ef:2f:09:81:35:4f:ba:2d:3e:47:25:97:09:
8d:97:50:d8:f2:0e:18:fd:98:68:bb:26:e7:65:f2:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7A:73:84:A0:27:C2:FC:FC:F8:1F:66:26:8D:75:40:D2:EC:C4:A9
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6f:bc:94:1c:85:b2:b4:76:95:9d:36:20:7a:78:46:86:1c:
1c:e8:bc:3c:68:c8:56:bf:36:8b:e6:78:4a:a6:2d:51:61:ad:
15:24:d2:2e:cb:1d:84:0c:74:fa:72:2b:41:c0:f4:15:e6:65:
05:71:f5:9a:98:95:74:5d:f5:53:5d:49:bc:81:09:4e:5f:33:
32:73:c6:39:cb:d7:18:58:df:cf:60:87:0f:74:8a:a4:0b:33:
b9:ec:fb:37:a8:74:3b:c9:39:a3:37:b6:77:ac:0e:e2:a3:86:
d8:e2:f8:56:32:e5:0e:b1:9f:65:b2:c4:f9:97:f6:70:41:88:
b5:e8:d2:e1:df:93:a4:e2:e4:41:7b:7c:74:5c:ab:0b:41:15:
d0:6b:a0:26:1a:1b:a0:bf:2b:18:f0:da:f5:57:ca:8d:3c:46:
1a:5b:a6:db:68:ab:d0:64:37:75:2d:fb:96:09:57:73:a8:d3:
0d:19:f6:26:be:e4:8e:56:ae:e6:9b:2b:df:65:f6:37:5a:75:
99:20:be:e2:e2:a6:83:7b:7a:a5:0e:ea:43:95:15:37:b6:c1:
65:8e:e0:60:c8:11:1d:9a:5e:e3:b3:6f:5b:f3:60:a4:ea:c1:
0a:49:f3:6c:c1:09:58:cf:fa:46:bb:b6:ae:5e:cb:d2:fd:6b:
2e:bf:b1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:54:04 2025 by rpki-client