Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File: L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier: kIOTj3UprJF2lLg54qECTrE2QDn0EgobMYWDj5UnQjU=
Subject key identifier: B9:2F:E1:8B:20:B4:9E:6A:7F:29:F7:7C:9E:55:A4:5A:FF:92:0F:44
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 0196A7D4402C20E02189379B805D5A5A5979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number: 0329
Signing time: Tue 06 May 2025 23:00:27 +0000
Manifest this update: Tue 06 May 2025 23:00:27 +0000
Manifest next update: Wed 07 May 2025 23:00:27 +0000
Files and hashes: 1: AYSw-t6FZQxOf3uyaYVOxPT7rkw.roa (hash: Xaavj0qNWpbVbYI0PhwiiuL7IGyoywVJOdUO3BJEDgM=)
2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: hRrD2WZMMbjG/o1XJEVLkWXutg7BRiyOiSIDlhqp7YQ=)
3: M-EHR3HmGlEqhPSa4hFH9zBtA4U.roa (hash: dHd9hXlo/bLFC9dpW29XAWP5l4uG2XM3fAni1G6KglA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:d4:40:2c:20:e0:21:89:37:9b:80:5d:5a:5a:59:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: May 6 23:00:27 2025 GMT
Not After : May 7 23:00:27 2025 GMT
Subject: CN=b92fe18b20b49e6a7f29f77c9e55a45aff920f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fb:71:97:34:c1:1d:59:70:04:aa:f2:fe:c6:
5a:c7:04:ae:8d:89:23:44:48:cb:39:de:c6:7d:af:
87:c0:14:86:99:a8:54:9b:42:b6:c8:bc:57:7f:3b:
0b:e7:06:be:48:ed:aa:f8:9c:12:6f:51:9b:1e:19:
da:64:7d:ec:ed:5e:ec:3d:de:6d:f2:f3:93:14:5a:
e8:6f:fc:88:4e:00:d7:f8:5f:ff:69:66:8b:da:2d:
ac:3e:05:88:bf:f7:da:62:3b:41:7e:18:71:60:29:
d7:4b:7d:2d:8c:59:8a:88:4b:c6:4c:26:17:99:47:
40:86:47:03:59:86:e8:2a:88:33:fd:51:e8:c6:95:
1a:02:b2:3b:d0:8d:66:74:8d:32:a5:b9:e5:8a:02:
71:40:22:d3:02:86:ee:41:b3:bf:fd:1c:9d:46:07:
b6:60:d1:91:7d:d9:e4:2d:04:a0:d0:2f:31:d0:c3:
23:55:f5:76:fa:0b:c9:ec:f2:af:5a:bb:d2:b3:04:
18:27:68:42:f3:01:3d:b2:50:1d:57:01:78:53:c2:
1c:fa:8f:c0:b1:9d:6d:c8:1a:b2:80:06:ac:7e:1e:
7a:ba:5a:5d:65:bb:bb:db:7c:e8:4a:ef:da:ca:86:
d3:70:81:52:4d:2e:6a:1e:70:d7:fb:35:94:4d:31:
54:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2F:E1:8B:20:B4:9E:6A:7F:29:F7:7C:9E:55:A4:5A:FF:92:0F:44
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:b7:c5:14:1d:62:4e:f1:5f:7e:cf:50:18:ad:52:ab:ff:fe:
1b:d7:11:5c:c1:c8:fe:7c:90:f9:f6:9e:5b:b3:53:06:86:7e:
4d:7c:38:b4:87:66:cd:22:ec:69:4e:58:4d:5b:05:c7:01:f4:
09:95:70:d4:85:79:7b:57:bc:b7:37:dc:fe:bb:e0:66:3d:ad:
bc:42:5e:f8:06:cf:9e:49:d1:1d:46:75:3a:07:90:28:47:77:
44:07:ae:f8:03:50:f8:9e:2f:2a:66:f6:c1:b9:0a:fe:88:2b:
ee:f4:50:a4:4f:7b:ef:9b:01:c8:5f:03:e5:84:d2:9e:8e:88:
66:30:8b:67:5c:52:ad:83:d9:25:91:42:60:32:6f:cb:37:4f:
95:c4:bd:3e:4b:ec:4b:06:5c:55:1f:9d:ea:cb:dc:c4:1f:ae:
e9:4b:5a:01:9c:f8:1c:b6:e8:90:c5:e5:b2:b8:f3:43:ed:9a:
92:48:6a:f9:75:50:44:52:ae:62:21:1b:32:68:b6:f0:d1:19:
a5:06:fc:6a:37:6e:30:78:87:de:43:fa:05:3a:32:ae:87:b4:
d8:93:d8:ab:67:4d:cb:5a:09:a9:e5:e0:11:32:87:b1:01:86:
17:e5:11:55:42:3c:00:dd:63:af:7e:7a:68:5d:5c:a8:10:48:
09:63:84:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:44:58 2025 by rpki-client