Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
File: l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json)
Hash identifier: dBC54QAecOSdbpjOvZV2GOWySfV8cuutaS8XSM2o7w8=
Subject key identifier: 2F:3D:9D:4E:4E:78:5E:0F:D2:06:DA:23:9C:08:96:B5:D9:21:5C:1C
Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Certificate serial: 0196BCDBC21F944BA6A0726B102A19D62CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 01:00:40 +0000
Manifest this update: Sun 11 May 2025 01:00:40 +0000
Manifest next update: Mon 12 May 2025 01:00:40 +0000
Files and hashes: 1: 1Hc2xFSXXcJKNwa405Fj3_hDKSA.roa (hash: w37TZNzx2LyJoBt8yxG/TPR6Wn5kb/77Kd+gVANfH9Y=)
2: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: SjJScd5UITOgIs58rDV+vsM82FssURlqjh/0Xup0t/8=)
3: v-FzkOfor23ZpEfwEBhRNq77PYQ.roa (hash: 70g9UjyCtQwjoHFmC+0L0k8nJTqUlni/8z8zZMtL+E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:c2:1f:94:4b:a6:a0:72:6b:10:2a:19:d6:2c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Validity
Not Before: May 11 01:00:40 2025 GMT
Not After : May 12 01:00:40 2025 GMT
Subject: CN=2f3d9d4e4e785e0fd206da239c0896b5d9215c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:95:c6:76:70:b3:94:e5:b1:9b:e1:4a:44:
fd:39:e8:50:7d:54:43:ad:49:ee:24:93:b0:e0:6b:
36:bd:7d:0c:70:72:9a:b2:1f:e4:00:a3:cc:76:94:
1d:26:9f:98:c4:85:97:c3:a4:87:26:4b:9b:af:30:
7e:e2:e2:65:7d:99:2e:d4:5c:af:55:d4:8a:14:9f:
f6:d2:99:3f:07:95:80:a9:d6:28:e3:ff:29:e6:46:
e5:87:0a:f4:a5:89:8b:ce:fb:63:39:61:01:2f:e5:
e9:b6:0c:59:54:b6:b5:92:30:44:b3:96:fd:f6:37:
dd:ac:3d:65:00:7e:44:5b:6d:16:5c:ad:2f:eb:19:
98:7f:c4:e7:31:58:b6:0f:cd:77:bc:54:e2:c6:4b:
b1:9f:0c:22:40:23:c3:c0:d1:7c:be:a0:c8:ff:c6:
a9:f8:f5:aa:72:ab:a0:c9:48:66:92:06:9a:e8:60:
16:be:55:6f:35:14:ed:fc:62:de:8c:eb:4b:7d:44:
22:00:99:50:a1:4d:8e:d0:09:48:ae:b9:81:cc:90:
88:41:17:f5:6d:ec:02:e3:6a:c7:b6:6d:9f:cd:78:
d8:94:49:33:c7:58:a0:12:dd:e2:c1:e7:2c:3b:0b:
22:22:60:90:51:1f:30:d6:24:7f:bc:b3:dc:81:ae:
58:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3D:9D:4E:4E:78:5E:0F:D2:06:DA:23:9C:08:96:B5:D9:21:5C:1C
X509v3 Authority Key Identifier:
keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:95:f9:16:4e:b1:ab:b3:41:f9:56:e5:91:ed:a2:61:fe:30:
55:ac:dd:4a:58:91:37:b8:97:2d:21:08:24:28:33:94:06:bb:
fa:31:12:46:f2:ec:aa:aa:9e:85:86:2b:c2:23:4e:b4:63:b3:
52:d8:2d:7b:4e:26:33:b7:5c:0a:e5:f3:e9:08:a6:23:87:76:
a4:4c:26:86:5f:5a:32:df:1b:a2:ea:04:17:08:4f:7a:b3:64:
33:65:0f:9d:40:d5:58:04:68:4e:95:47:ee:76:bf:c5:78:13:
21:ef:a2:29:a0:4a:af:f8:46:cb:97:72:ac:34:28:03:f7:db:
3b:ee:ed:24:7e:17:24:4f:e1:65:d3:6c:be:40:48:ef:25:6a:
99:9b:9d:82:88:d1:07:90:c4:af:12:25:6c:7b:b0:78:ef:00:
e1:4b:f6:ff:7b:90:4f:cd:4e:21:f4:a0:70:fd:9d:22:80:2e:
1f:5e:10:3d:f0:0e:4d:ee:46:65:ec:cc:83:b5:1d:e7:81:9e:
68:3b:a5:e6:95:c7:89:d6:02:e2:80:a5:b0:d2:07:4e:b2:f3:
3b:fa:c3:c9:40:df:ec:4b:63:b8:8d:fd:9b:c2:c4:71:f7:66:
91:19:27:d4:c5:0d:2d:88:95:1c:7e:fc:17:52:e4:49:13:3f:
99:f1:f6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:16:52 2025 by rpki-client