Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
File: l7v--RgT0Oj37t9o7VaefP3fDPA.mft (raw, json)
Hash identifier: OJG0xXrfJAL/OEtF7AlRy5Ky40sq71S4oD0Gdszm1ds=
Subject key identifier: CF:42:81:A8:D3:0E:58:C9:D1:A5:50:55:08:FB:D9:E0:83:5F:88:0B
Authority key identifier: 97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0
Certificate issuer: /CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
Certificate serial: 0196B8C7B7E12672E629A545893A9E629976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 06:00:18 +0000
Manifest this update: Sat 10 May 2025 06:00:18 +0000
Manifest next update: Sun 11 May 2025 06:00:18 +0000
Files and hashes: 1: 1-sigTPJAC1PNSATn-sK6lRfTKyQ.roa (hash: jOHa8XaZlnY37LiuZhg9CFenWtMsktZUfeaX7d5RSx0=)
2: l7v--RgT0Oj37t9o7VaefP3fDPA.crl (hash: 50p/HEFWB72C7QiE8nskmJ65o4XP5HNs1tnk8z0r/z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:b7:e1:26:72:e6:29:a5:45:89:3a:9e:62:99:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
Validity
Not Before: May 10 06:00:18 2025 GMT
Not After : May 11 06:00:18 2025 GMT
Subject: CN=cf4281a8d30e58c9d1a5505508fbd9e0835f880b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a9:8a:d7:a0:47:e2:da:f4:3e:a4:13:53:41:
e7:a2:03:2e:9a:ae:b1:3d:a5:ab:3d:d3:39:d0:9d:
3a:da:5a:44:77:8a:26:37:fe:19:42:26:6e:e7:43:
59:f5:7d:29:11:df:89:79:40:57:a9:93:e5:e4:ed:
1a:cc:9c:4f:17:bf:cf:ab:03:a8:61:d9:a5:06:1d:
ce:f3:c5:b2:0a:04:c3:20:ff:92:04:d8:45:1a:60:
94:fc:cd:ec:5a:1c:2f:11:6a:d1:59:0b:02:ab:40:
4d:3b:af:9c:fe:58:f4:69:c3:67:47:04:43:96:47:
14:ef:21:08:8d:2f:06:11:c9:65:f2:80:ce:76:56:
6f:29:66:83:7d:99:96:df:aa:9e:f8:bd:b2:16:91:
0b:46:95:02:fe:2a:77:c9:d6:3e:ab:59:88:8c:20:
c9:cc:53:a7:27:9e:09:ec:50:98:db:40:7a:ac:fd:
20:0f:5a:b1:f6:00:7b:ab:0b:fa:14:15:32:59:ef:
9d:d1:3e:e0:a0:2e:b9:94:1d:aa:22:da:44:39:4b:
9e:a4:06:01:39:5f:10:8f:3e:3e:3b:1c:ff:36:ec:
79:af:05:01:f2:2a:29:2d:3e:79:c4:e5:1f:8e:05:
22:13:27:04:86:2b:44:b3:11:3a:fe:e8:bd:b5:87:
af:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:42:81:A8:D3:0E:58:C9:D1:A5:50:55:08:FB:D9:E0:83:5F:88:0B
X509v3 Authority Key Identifier:
keyid:97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5d:b0:02:5e:a7:c0:6b:41:1d:05:ef:50:a4:ae:b7:34:15:
8e:b2:66:ce:37:60:3d:ae:43:27:79:75:18:5b:82:39:4f:e0:
37:d4:64:5e:11:a6:4a:c1:ce:ca:99:32:d6:85:18:99:83:af:
19:85:53:c2:32:a4:e8:22:28:75:4c:6e:4c:a6:92:c0:82:e4:
38:05:1a:7f:58:ed:82:70:65:2b:61:2a:4e:f9:1c:73:46:d6:
bb:b0:19:2a:5d:5d:96:09:06:fc:9e:75:a7:7c:ff:6a:e0:c0:
98:e8:c0:98:ab:93:1a:a5:f2:b0:21:77:cc:02:c5:8b:42:32:
56:2c:4b:43:0a:5a:d3:a9:b4:15:af:a5:a0:09:78:b2:13:e6:
d0:b7:9f:4c:e0:66:f0:25:fc:bc:7e:13:23:5c:f6:a7:29:1b:
a7:1f:52:81:a2:24:7a:11:2b:1d:f9:e9:14:e3:92:fc:73:24:
90:16:05:c7:a9:83:6e:ab:4b:e9:6f:2e:11:92:af:c6:03:04:
28:b7:ec:1e:c3:ac:31:fb:27:60:3f:29:a6:03:d2:8d:5e:af:
46:19:cb:8f:22:92:f7:8d:8d:43:4d:2d:04:c3:65:16:3c:bc:
67:91:68:3a:37:70:83:6d:34:8a:de:3a:7b:4e:1e:1a:7d:49:
0b:e2:e0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:44:58 2025 by rpki-client