Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: Np/6RyUohY3KI8oNW5L3uLhSjhkeXHM7VLfF69Vcmu4=
Subject key identifier: 4E:6B:25:7E:50:3C:6A:FA:1B:16:06:FD:80:25:12:65:9F:11:BE:E3
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 0196C871F787E87E0551C29B3C8E2334B5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 153E
Signing time: Tue 13 May 2025 07:00:34 +0000
Manifest this update: Tue 13 May 2025 07:00:34 +0000
Manifest next update: Wed 14 May 2025 07:00:34 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: Y/WprRt7P+k/7QCXcjoriz+l7Niq+Et/xPlONaUQr0Q=)
2: MOwk6-gNTotPX4medNv9DwpG-nY.roa (hash: 6Jb3ucO6IvrIBpfG+RtQ1ACJyD7qIWwk6gOaPXaKjcU=)
3: YTaACXpx54gDy9xvy1Yl2SVGqRU.roa (hash: LQglYAbCThbY5IKAki5TmwIb5w2DJ6WRR1u7/db90zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:71:f7:87:e8:7e:05:51:c2:9b:3c:8e:23:34:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: May 13 07:00:34 2025 GMT
Not After : May 14 07:00:34 2025 GMT
Subject: CN=4e6b257e503c6afa1b1606fd802512659f11bee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:92:8a:eb:05:d4:4c:22:76:24:1d:ff:92:
84:03:c4:f6:a5:21:81:fa:40:1a:ba:02:0a:08:19:
f3:13:f2:04:ec:a3:07:7b:8e:c0:c3:e7:e9:f2:8b:
b2:86:e6:9b:49:cc:e3:5e:fe:a9:56:3b:ef:50:2a:
52:ab:04:2b:7e:6f:ef:1c:35:25:9c:2c:34:8d:a7:
0f:65:38:f3:51:31:52:74:5d:55:fe:54:91:7e:27:
a7:61:63:3f:b4:a0:ac:e3:0d:d2:b4:8c:5f:02:af:
9a:9a:ac:ac:89:e1:50:3f:dc:81:9f:e2:d6:a7:35:
98:04:57:6c:38:e3:de:88:ed:4b:64:84:af:ed:5d:
b3:71:cc:93:26:1e:7c:ed:0a:2d:5f:89:b0:d2:92:
70:31:3e:a4:c9:7c:0c:8c:bf:e0:7e:86:ef:f8:03:
6d:7e:79:42:d8:5b:03:21:9d:34:ef:03:9d:f5:4d:
66:b8:77:d8:24:ea:b7:a3:18:92:40:b6:4c:2b:52:
d9:c7:db:ed:c1:ff:36:31:23:d7:80:cc:0b:7f:4f:
c5:ff:f0:cc:ca:66:55:36:a1:0a:85:e1:cd:16:9d:
e8:7f:36:0d:bc:1f:f2:60:6d:c7:ad:a9:a3:a1:4e:
6a:14:be:93:e5:c5:36:a0:a7:d2:cc:e9:d7:79:da:
2f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6B:25:7E:50:3C:6A:FA:1B:16:06:FD:80:25:12:65:9F:11:BE:E3
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:01:3c:5e:cc:54:cc:53:28:c7:cc:ca:be:13:4c:33:64:1a:
b2:13:4f:78:65:27:2a:2f:a6:31:a2:7d:24:e9:5e:34:70:56:
2e:18:67:bb:0f:26:cc:b7:86:dc:5c:4c:2a:4b:d8:32:82:65:
8c:ca:61:4f:28:fb:42:25:22:8e:61:0d:95:02:91:49:e6:ea:
65:2f:a2:67:75:c3:3a:bf:3d:b1:4f:ec:63:37:21:a2:ee:93:
ab:72:c6:56:0b:7e:11:78:53:a0:fc:80:1b:56:de:98:e8:02:
23:43:a0:89:ca:fa:d5:63:58:1b:d9:19:b9:3a:1d:a8:83:93:
95:14:e6:ce:f5:ef:35:1d:61:eb:2d:3c:f0:94:77:40:c4:d0:
7e:41:fc:9f:f8:20:78:3b:5f:2f:88:80:62:4e:92:9d:77:f4:
8f:f7:77:68:e1:d1:54:27:49:4a:c6:9b:52:e3:26:da:0b:6c:
e0:28:18:a6:41:fd:7f:ca:3f:4e:94:8e:74:64:c9:c3:8a:9b:
67:12:7b:6c:40:c3:86:e3:84:ce:31:e6:22:66:4c:55:c9:a9:
5f:c8:1b:7d:8a:3e:96:b8:fb:e1:dd:a8:a6:0a:34:cf:62:9a:
85:3e:94:37:46:2d:cf:5a:d8:1f:07:c2:79:e5:8e:76:5e:40:
b7:8a:02:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:35:53 2025 by rpki-client