Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
File: L7h6LDCddVU6RuECV3XpqkH2szc.mft (raw, json)
Hash identifier: mk0CqaA8zGPvfkWn5oOWTKS9kjqi+5kdMPNEiU1ri9A=
Subject key identifier: 0D:1C:74:58:2D:DD:56:62:76:EF:EE:BA:83:7E:EC:D5:B1:2B:1B:3C
Authority key identifier: 2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
Certificate issuer: /CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Certificate serial: 01968ADC51A4B7032EE2FFE62CEA4D7E9E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
Manifest number: 1243
Signing time: Thu 01 May 2025 08:00:16 +0000
Manifest this update: Thu 01 May 2025 08:00:16 +0000
Manifest next update: Fri 02 May 2025 08:00:16 +0000
Files and hashes: 1: B67VWzdl3AAKjk23JpPqT48jA8c.roa (hash: bzW8M0K39ivXss5N9+C/b0aX7RrIq8uKGLc//kpqL54=)
2: L7h6LDCddVU6RuECV3XpqkH2szc.crl (hash: S60gppthXYxuUArf9D8EpaLslxfnMXDG5gHJONEPM6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:dc:51:a4:b7:03:2e:e2:ff:e6:2c:ea:4d:7e:9e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Validity
Not Before: May 1 08:00:16 2025 GMT
Not After : May 2 08:00:16 2025 GMT
Subject: CN=0d1c74582ddd566276efeeba837eecd5b12b1b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:fd:92:01:9c:1d:a7:73:7b:da:8f:e4:5e:
9c:36:41:83:19:66:ff:da:ce:c1:1d:b5:2f:ac:30:
08:ba:3a:8e:4d:20:34:98:b6:56:fd:ee:b6:17:0d:
3c:3a:d5:a9:1c:88:b3:be:53:fa:e6:92:e0:42:0a:
8d:6d:76:3e:d2:d5:cc:0a:c2:29:78:97:e4:59:c7:
84:59:62:b8:da:ce:9e:e8:1c:b5:3f:4f:5b:b9:4c:
3d:e1:6f:af:65:83:48:8f:1f:bc:3e:4d:78:9f:16:
29:56:fe:97:62:b9:67:1b:ce:dc:01:af:52:97:06:
ec:24:a4:00:de:86:16:60:39:7e:c9:d2:e7:7d:3e:
34:e6:a6:d5:66:6d:60:27:2c:53:8a:d5:06:aa:15:
71:5b:d2:f9:f6:71:f4:a0:41:b6:f3:24:30:49:d7:
b4:86:a7:86:29:8d:41:a9:91:b0:ee:98:5b:53:ce:
31:0f:68:51:90:72:ec:a5:87:e3:30:83:51:58:6e:
8e:66:04:15:fb:9b:33:b4:4c:00:38:a1:2e:8a:d3:
2a:c6:aa:31:d1:45:5b:24:e6:e2:22:df:ee:bf:3b:
4b:ec:ef:50:26:cc:27:68:6e:af:61:6f:a4:d7:e9:
3d:53:64:18:e5:39:ed:1b:02:66:74:e7:de:51:68:
9f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1C:74:58:2D:DD:56:62:76:EF:EE:BA:83:7E:EC:D5:B1:2B:1B:3C
X509v3 Authority Key Identifier:
keyid:2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:71:e7:63:67:d4:e3:d4:96:2b:a8:df:6d:00:ad:6d:4e:ba:
6a:d8:47:1b:4b:fa:f0:6a:e4:8c:0a:dd:a7:85:2b:7e:cc:1a:
7c:83:5f:72:b2:9c:d5:3e:3f:d0:c1:f1:70:dc:0d:c7:4d:63:
85:fe:7c:49:2d:86:08:f9:e0:15:7f:d6:2c:7a:ac:ed:51:6b:
b3:cd:86:e6:7f:58:4c:1a:fc:dc:6a:74:a6:90:2c:a2:e1:d3:
83:87:01:06:3c:24:89:22:91:57:e0:7d:64:90:0a:a4:ac:23:
dc:5a:6b:a2:9e:d2:3c:b0:2a:ef:8a:81:c6:ee:f8:65:54:ab:
db:bf:d2:0d:fc:12:b0:76:61:81:4c:b0:d0:27:c8:55:8e:1d:
9c:a9:b0:e7:a4:45:cc:3d:12:d4:87:ca:33:74:f0:44:42:19:
85:11:dd:bc:1f:75:f7:37:5f:2f:58:75:2c:d5:96:a0:06:87:
e3:21:84:f8:15:89:72:27:aa:62:83:53:57:e7:9e:72:a2:55:
0a:b3:10:f9:76:f5:6c:3a:70:88:f9:e8:d6:c4:6d:55:7b:21:
31:04:84:ea:af:36:ff:9c:f2:d0:7d:e6:84:32:20:b9:a4:ec:
9d:f4:19:d0:81:e0:5f:8a:ae:50:e4:ee:c8:21:4c:c6:87:d0:
6b:1e:ee:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:50:45 2025 by rpki-client