
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
File: l7v--RgT0Oj37t9o7VaefP3fDPA.mft (raw, json)
Hash identifier: 0j7/fxLbGTB1wKRKr/WxE5cMnnsTH9TVs/xdXDf42D4=
Subject key identifier: 71:41:15:B4:04:13:7A:5C:71:5B:6C:C9:E7:7B:C6:D1:A0:89:E7:CB
Authority key identifier: 97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0
Certificate issuer: /CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
Certificate serial: 0196545C167DE8F393DC16E60CBC856080BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 18:00:43 +0000
Manifest this update: Sun 20 Apr 2025 18:00:43 +0000
Manifest next update: Mon 21 Apr 2025 18:00:43 +0000
Files and hashes: 1: 1-sigTPJAC1PNSATn-sK6lRfTKyQ.roa (hash: jOHa8XaZlnY37LiuZhg9CFenWtMsktZUfeaX7d5RSx0=)
2: l7v--RgT0Oj37t9o7VaefP3fDPA.crl (hash: Ad424QuujHRKniKd70qkgpSnodj8aOo+qYwYhbR0zTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:16:7d:e8:f3:93:dc:16:e6:0c:bc:85:60:80:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
Validity
Not Before: Apr 20 18:00:43 2025 GMT
Not After : Apr 21 18:00:43 2025 GMT
Subject: CN=714115b404137a5c715b6cc9e77bc6d1a089e7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:18:f8:0a:c4:5d:fb:07:43:0b:89:30:9c:
da:5a:c1:b5:86:38:8e:1e:d7:da:86:a3:6e:f1:02:
a1:04:12:06:20:c1:6b:c2:3f:c4:a8:d3:c6:81:7e:
e8:88:b0:be:e9:fb:bb:2e:b1:b5:cb:26:33:92:ae:
8f:06:eb:ef:22:48:49:2b:31:b4:bc:f6:f7:32:ec:
09:f0:32:fa:18:03:4c:67:f1:a7:1d:e9:ad:c6:f8:
e4:1c:8d:e4:7c:9e:c1:5a:ff:4b:97:72:00:9f:93:
49:d8:d7:00:78:11:bb:ce:8d:92:36:8d:d5:b1:5e:
57:45:1f:b4:19:10:8d:93:0a:b9:9e:75:d9:61:00:
1b:f1:c7:4d:2d:c5:0c:52:30:2c:5a:61:42:f0:1d:
1a:aa:fc:bd:8c:45:db:3d:f0:b3:c1:e8:c1:c0:d7:
4e:27:a6:fa:14:3f:15:31:a8:6a:8c:17:1c:9f:a8:
f1:68:79:ad:ee:23:1e:6c:54:8f:d2:d0:54:37:b0:
72:88:8a:4a:3c:f1:9b:1f:4f:24:31:31:32:89:4f:
51:0d:39:3d:9a:8e:10:3d:d0:1a:f1:3c:10:6d:0d:
1c:d2:36:69:aa:1d:85:62:8f:a0:64:d5:25:c5:1d:
d5:e4:62:ff:72:64:7a:d1:ce:92:1b:3c:c7:1c:53:
50:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:41:15:B4:04:13:7A:5C:71:5B:6C:C9:E7:7B:C6:D1:A0:89:E7:CB
X509v3 Authority Key Identifier:
keyid:97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:15:93:bf:07:e3:c1:53:77:0d:21:55:b3:a8:ca:78:f5:0f:
1f:59:57:5c:7e:21:e9:f8:a5:cc:55:88:f6:6f:c3:3a:93:7f:
43:76:73:79:3b:c0:17:b6:af:0a:34:b0:ed:a1:9b:47:30:81:
28:7c:5e:ab:2b:40:a2:14:f5:a0:cd:1f:18:e5:81:70:ea:e6:
68:c4:ba:62:13:54:78:bf:94:40:77:fd:5e:bc:0e:38:32:fe:
8c:11:f6:f9:1b:a6:06:aa:6d:66:1e:ce:05:52:91:a3:1f:28:
3a:96:82:ab:d4:ec:3c:cb:42:f3:10:5d:ee:c9:14:02:e2:e3:
e9:87:ef:0d:b8:ee:5c:2a:cf:19:1b:a7:44:19:0e:06:dc:39:
a1:a5:74:ce:f2:c9:0b:f2:c6:77:54:6d:93:a2:3f:ed:af:21:
9f:fa:02:21:66:52:e1:f3:a1:f2:dd:19:ad:42:e2:a4:1e:f0:
46:5f:ce:93:3c:cb:61:9d:6b:7f:6c:0c:4d:2f:b4:af:a9:b1:
a1:da:e1:86:48:e6:3b:59:0f:8f:06:c1:ae:a0:90:d6:df:f5:
15:08:dd:d1:92:e3:73:90:6f:05:1e:81:65:8a:3d:a8:6a:fa:
af:9e:ce:46:3d:c4:67:a7:04:bb:20:56:e8:cb:f1:15:ee:c5:
72:26:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:31:04 2025 by rpki-client