Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
File: 7LYS4fa02D-KXVUs87YO3SO_6fQ.mft (raw, json)
Hash identifier: KmykkGWST1KowL1/OA4UeNrxyWaLn9bqowfeknNpSA4=
Subject key identifier: 04:07:5C:07:6F:F9:54:CA:27:AB:D4:13:AE:F4:DD:58:C0:A1:A5:95
Authority key identifier: EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
Certificate issuer: /CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Certificate serial: 0196C4952842690FEA4014804D5CD593315E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
Manifest number: 1496
Signing time: Mon 12 May 2025 13:00:31 +0000
Manifest this update: Mon 12 May 2025 13:00:31 +0000
Manifest next update: Tue 13 May 2025 13:00:31 +0000
Files and hashes: 1: 7LYS4fa02D-KXVUs87YO3SO_6fQ.crl (hash: JqNEgzPiaoQwDES/GTSkyFJL67N4+wqIL1gy57Imtmw=)
2: aG5rAcUPlfAS33bppi3npjnJwhs.roa (hash: zJztqNoDduT6a/19sVXNq9OoLdpe05NzflFeIp+fVjM=)
3: rkeCi7bAOmm8jNM4SPUix4rpKGY.roa (hash: mpdXZon8vvR8j0E2gSl7AGKnGzRDJd6WpjcomYnKKnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:28:42:69:0f:ea:40:14:80:4d:5c:d5:93:31:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Validity
Not Before: May 12 13:00:31 2025 GMT
Not After : May 13 13:00:31 2025 GMT
Subject: CN=04075c076ff954ca27abd413aef4dd58c0a1a595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:71:ed:38:5f:2d:78:51:fe:05:b9:0e:86:83:
39:59:21:a3:52:3b:dc:df:41:0b:0f:14:79:1f:09:
be:66:aa:cf:3d:30:a7:1c:68:3e:4a:8d:04:9d:1d:
a0:0f:39:f5:b9:dc:e9:84:2f:e0:90:66:62:77:e8:
1b:70:7d:55:0e:f3:d9:ed:b3:0a:a7:55:0a:b0:49:
67:00:f6:f6:63:d6:66:42:1b:b4:8f:fd:7f:49:c8:
c7:86:40:5a:84:26:e0:41:90:e7:1d:79:8f:65:b9:
83:c3:a9:13:09:03:78:fd:81:8a:43:59:6e:c4:5a:
7b:e7:3a:f3:08:b7:d7:f4:d2:0a:6b:21:02:94:26:
c8:5f:48:04:2a:94:95:16:d1:b5:69:17:68:10:d0:
2b:f6:ee:4b:50:cf:a8:59:2b:25:7b:2c:c8:eb:91:
eb:12:b2:fa:f3:17:93:ca:71:5e:35:70:de:d5:d9:
64:49:1d:f5:cc:e2:3b:0e:c2:91:41:e8:de:6c:99:
f0:b2:98:d9:8e:af:72:e4:45:36:43:b2:8f:e0:35:
01:71:7d:5f:8a:f3:1f:3b:67:70:af:ce:12:ff:6e:
90:06:7d:f4:19:45:63:75:f2:af:92:a0:2d:4b:0c:
57:4b:97:0c:2f:66:31:8e:38:93:2e:84:2f:88:de:
1b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:07:5C:07:6F:F9:54:CA:27:AB:D4:13:AE:F4:DD:58:C0:A1:A5:95
X509v3 Authority Key Identifier:
keyid:EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:89:71:c8:20:8e:40:9b:10:e8:7e:ff:ea:de:70:d3:6e:3b:
42:6b:f1:a9:ba:fc:4d:27:48:c8:79:f7:65:f8:ad:0d:90:5e:
e6:95:41:49:72:c5:fd:dd:45:b3:be:b2:70:fa:d7:28:3b:74:
98:71:40:3c:60:b5:32:ca:ee:52:b6:12:1f:46:3d:5c:d9:50:
4d:58:a5:4d:a5:e5:fe:01:29:d2:51:bd:ca:41:8a:8d:73:82:
db:15:77:a0:f1:3c:91:9e:e8:5f:39:86:c9:22:42:d8:a0:f2:
24:14:1c:26:cf:76:bb:46:05:a7:ea:d4:1c:d3:41:28:46:c3:
42:5f:f1:66:71:f3:ca:b8:87:a2:9e:5f:5d:72:d0:b8:f1:6f:
24:b5:06:03:5f:c9:41:c6:fb:44:d8:65:ea:ac:07:10:61:a4:
d2:51:ae:db:38:df:26:68:02:51:d9:ef:7d:34:bc:0e:9a:03:
08:98:a7:99:3a:68:db:0a:ae:27:f9:ad:bd:35:f2:a5:3f:60:
59:56:b7:cd:f9:47:72:c4:d9:23:cd:d1:b5:67:94:f1:71:52:
f4:90:a7:74:0a:7f:5e:37:af:b9:6e:19:01:3a:6f:a8:80:01:
5c:36:a2:00:4f:c7:3a:3c:94:d5:7a:0d:8f:66:f4:ff:db:ee:
cd:1c:e7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:01:30 2025 by rpki-client