Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
File: l-z7s1UL8sdnTMUunLvzqTP153g.mft (raw, json)
Hash identifier: e0TA5L3UOGZ6Ma6XFseUGx7Gf4DreOfewggZfFQXMCQ=
Subject key identifier: 93:5E:50:13:AC:CF:9D:89:CF:27:41:8E:6F:C4:F0:37:D4:6C:A5:1B
Authority key identifier: 97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78
Certificate issuer: /CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
Certificate serial: 0196AA308568B1F1AFD971F657A3D167F1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
Manifest number: 1529
Signing time: Wed 07 May 2025 10:00:28 +0000
Manifest this update: Wed 07 May 2025 10:00:28 +0000
Manifest next update: Thu 08 May 2025 10:00:28 +0000
Files and hashes: 1: l-z7s1UL8sdnTMUunLvzqTP153g.crl (hash: 2U+Tzm6pXHjapayItjIwVmyaVqisIJ4uCfrciHlVJtg=)
2: lz1Zu-7Dd1zohtmSo2B7eoc-JLk.roa (hash: 4nM0pH6w4uGyHRxAYln0YQ8h8FqFvJIZzMm3lqAMtRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:85:68:b1:f1:af:d9:71:f6:57:a3:d1:67:f1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecfbb3550bf2c7674cc52e9cbbf3a933f5e778
Validity
Not Before: May 7 10:00:28 2025 GMT
Not After : May 8 10:00:28 2025 GMT
Subject: CN=935e5013accf9d89cf27418e6fc4f037d46ca51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:2c:68:eb:67:d0:eb:b4:1f:98:88:f9:d3:
c7:0f:f0:52:0b:c0:fe:13:5d:8d:db:12:35:2b:90:
98:c8:ca:aa:62:7e:4e:fa:a8:44:fd:ca:58:9c:d4:
f8:12:64:c4:13:ba:93:b7:3d:7b:a3:f7:f0:e9:b7:
85:27:f1:17:f3:fc:2c:41:4d:b4:b7:83:b4:44:17:
3c:10:0f:e1:30:49:0e:b0:d0:96:86:81:73:d4:c8:
7e:4e:fe:4b:82:f3:ca:c3:d9:d3:ae:15:3d:fa:1f:
24:8a:35:66:cf:04:76:ac:a5:61:b9:5b:85:fc:a2:
8d:76:86:cf:98:f5:30:4c:0e:46:8d:4c:0f:e3:88:
ee:06:a9:dc:35:0f:ef:56:82:7e:9f:ae:6d:13:04:
0e:d3:39:63:23:cb:60:b6:14:53:e9:05:60:48:12:
53:c3:e1:68:f9:04:a1:84:b5:ad:05:98:29:2c:2f:
14:c0:c2:4d:41:0f:76:2a:23:0f:dc:2f:fd:47:a7:
4e:67:95:c7:e0:1d:32:9e:af:71:4e:4c:b6:c9:13:
36:af:c5:d0:e5:74:6b:73:93:42:27:a8:72:d4:e8:
81:0f:d3:45:7c:ea:d1:87:9d:da:65:42:20:00:a8:
ff:62:a3:7f:c3:26:bd:73:f9:b0:49:04:8b:54:d5:
36:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5E:50:13:AC:CF:9D:89:CF:27:41:8E:6F:C4:F0:37:D4:6C:A5:1B
X509v3 Authority Key Identifier:
keyid:97:EC:FB:B3:55:0B:F2:C7:67:4C:C5:2E:9C:BB:F3:A9:33:F5:E7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-z7s1UL8sdnTMUunLvzqTP153g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1c0ea6-a6df-4522-8bc9-8c511698fcae/1/l-z7s1UL8sdnTMUunLvzqTP153g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:67:23:c0:68:ec:f3:5b:01:00:4d:c4:4c:bf:a3:26:b7:b4:
99:44:37:f7:20:99:5c:af:9d:3c:8e:18:c8:b1:00:a5:26:1c:
a1:00:bf:41:e2:b6:09:d2:ad:5c:d2:0b:8f:82:29:5f:28:90:
70:30:36:31:b9:fd:21:9b:62:01:cc:58:5b:56:bb:8e:9f:74:
39:c7:fe:f5:85:5b:0b:f0:fd:0f:55:3b:79:d9:81:ac:73:98:
b5:e3:cf:d7:7d:e8:88:19:00:6d:a3:16:c2:72:c8:d0:bf:f6:
8f:c2:67:80:6d:41:ff:00:af:ac:10:b8:7e:e9:ca:87:a0:eb:
ef:19:93:2e:0a:1f:1b:55:4c:76:3b:9c:4e:12:ef:0e:4e:30:
3f:69:df:88:ca:b9:56:c1:eb:d4:21:2f:ab:ac:aa:02:45:d4:
1e:89:da:03:c0:63:8e:43:be:19:21:02:c5:85:33:31:ed:83:
ff:ab:7d:79:72:79:1d:e7:a4:ee:97:f6:c9:b4:1f:59:65:a9:
1d:58:fb:ab:ee:26:35:24:52:6b:3a:74:10:22:65:1d:c0:67:
06:8d:fa:48:92:92:00:f4:2c:0a:91:b4:a5:e6:cf:9d:7c:bd:
c7:d9:a5:5a:31:49:78:cd:11:9e:07:bf:dd:0c:0a:a6:03:73:
78:65:3e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:17:28 2025 by rpki-client