Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
File: L7h6LDCddVU6RuECV3XpqkH2szc.mft (raw, json)
Hash identifier: qu61+4Msd1ANZBZYk8x5Db0QUixnCR4//Z/yvZhVV5s=
Subject key identifier: E8:B7:42:C8:6A:3D:0D:5D:AB:8F:8D:AD:50:AC:52:F1:72:75:A7:58
Authority key identifier: 2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
Certificate issuer: /CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Certificate serial: 0196C8A8E50599F0A2BC93F9E1963FAC6279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
Manifest number: 1263
Signing time: Tue 13 May 2025 08:00:33 +0000
Manifest this update: Tue 13 May 2025 08:00:33 +0000
Manifest next update: Wed 14 May 2025 08:00:33 +0000
Files and hashes: 1: B67VWzdl3AAKjk23JpPqT48jA8c.roa (hash: bzW8M0K39ivXss5N9+C/b0aX7RrIq8uKGLc//kpqL54=)
2: L7h6LDCddVU6RuECV3XpqkH2szc.crl (hash: rbFxYlLzLCsUlyJ1O8QQA7WH3Pp/SKIDAGNyIEjlJUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:a8:e5:05:99:f0:a2:bc:93:f9:e1:96:3f:ac:62:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Validity
Not Before: May 13 08:00:33 2025 GMT
Not After : May 14 08:00:33 2025 GMT
Subject: CN=e8b742c86a3d0d5dab8f8dad50ac52f17275a758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:2e:d2:c9:61:6c:65:df:ac:2e:00:7e:b4:
a8:5c:8c:42:18:87:8b:61:d3:a9:b8:45:60:14:80:
bf:55:ab:77:48:05:26:08:01:42:19:d9:55:c6:79:
5d:d6:73:dd:d0:1c:31:bd:af:b9:d8:df:fe:94:e9:
0f:5d:0b:4f:34:51:82:b8:c6:77:76:97:54:43:2f:
e7:ac:2c:42:0e:36:51:58:d3:f1:ac:13:9c:33:2a:
76:99:3d:88:0b:8b:f4:3b:98:4b:bd:48:ed:75:30:
a7:1e:36:c9:8c:34:8c:80:bd:ab:14:44:2c:c5:4a:
bf:40:be:69:b5:09:b8:14:c0:9c:30:d0:5c:d7:5a:
bc:76:db:58:8b:a7:2f:e6:30:ce:06:86:cb:c0:3e:
06:89:b4:65:b0:f2:63:37:71:a0:c1:07:80:e2:0a:
04:41:de:a5:87:e3:f3:19:4e:e6:da:68:50:32:6d:
6a:a4:a4:7d:c8:5f:5c:5b:56:ec:39:28:13:85:0c:
fb:7a:f2:5d:ba:cd:04:14:5a:db:2e:50:66:4a:01:
6b:53:c9:c2:14:4b:2c:54:b4:da:69:ba:70:1c:97:
f7:1e:97:b3:0e:67:d2:3a:e0:71:3b:02:bc:ca:6f:
b4:4f:74:be:ac:b4:c7:f8:7b:12:1c:67:7b:2f:fa:
ce:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B7:42:C8:6A:3D:0D:5D:AB:8F:8D:AD:50:AC:52:F1:72:75:A7:58
X509v3 Authority Key Identifier:
keyid:2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:53:a8:e3:e1:2e:b9:f3:36:4d:ad:85:4a:38:f6:c3:fd:35:
d0:17:00:4b:e9:45:a0:c1:36:9e:89:79:11:7a:f3:26:9c:71:
02:6a:ff:b1:f3:6f:01:7a:ec:a8:57:10:d4:8a:b1:e1:78:63:
54:54:e5:0a:75:a2:2f:48:f6:e5:45:7a:04:21:2f:e8:97:d0:
46:c5:71:8f:c7:02:53:62:2b:b1:98:4d:bf:97:0c:57:3d:1d:
2c:a4:c4:48:3d:0d:cc:07:ce:20:37:e0:5a:13:8f:e8:15:4a:
48:97:40:f0:ea:38:cd:14:de:ef:a4:de:97:ce:75:23:5c:17:
d2:12:48:24:f1:6a:f9:e9:2d:ce:77:75:71:e8:1e:db:a0:3f:
f7:cf:12:76:8f:50:3d:70:91:85:cf:f3:1d:ad:74:97:4e:e8:
4b:a9:73:99:19:71:47:0c:a5:89:c8:7f:0c:b7:b8:57:e8:67:
c6:11:51:fa:de:ea:7b:c3:41:89:4f:80:e5:cc:64:2f:d1:48:
30:ec:ca:1d:5d:e1:2f:52:8d:9b:28:0c:24:67:9a:3a:1f:36:
46:68:fe:40:b6:70:87:70:19:5f:88:34:76:90:0e:20:8d:94:
b6:2b:02:f7:ae:3a:b6:52:e7:c8:3a:e2:0a:c4:72:ed:c0:c2:
c6:36:9a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 14:35:41 2025 by rpki-client