Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
File: 7LYS4fa02D-KXVUs87YO3SO_6fQ.mft (raw, json)
Hash identifier: vq6EJyENBw3nyiZqVk3GE0HJ6xe2Wclq/p0u1rHR424=
Subject key identifier: A4:10:DB:E8:0D:8F:9F:AA:28:2A:E4:07:C1:AA:A0:BF:63:E9:97:F3
Authority key identifier: EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
Certificate issuer: /CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Certificate serial: 0196907106842BB8DED759A98E9C4745FC94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
Manifest number: 147B
Signing time: Fri 02 May 2025 10:00:48 +0000
Manifest this update: Fri 02 May 2025 10:00:48 +0000
Manifest next update: Sat 03 May 2025 10:00:48 +0000
Files and hashes: 1: 7LYS4fa02D-KXVUs87YO3SO_6fQ.crl (hash: XqRWtRl7nX5dxKXZ3JUam9ml+GSuSs49Zmy3TG3zLjE=)
2: aG5rAcUPlfAS33bppi3npjnJwhs.roa (hash: zJztqNoDduT6a/19sVXNq9OoLdpe05NzflFeIp+fVjM=)
3: rkeCi7bAOmm8jNM4SPUix4rpKGY.roa (hash: mpdXZon8vvR8j0E2gSl7AGKnGzRDJd6WpjcomYnKKnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:71:06:84:2b:b8:de:d7:59:a9:8e:9c:47:45:fc:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Validity
Not Before: May 2 10:00:48 2025 GMT
Not After : May 3 10:00:48 2025 GMT
Subject: CN=a410dbe80d8f9faa282ae407c1aaa0bf63e997f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7b:66:d9:6e:58:de:02:ba:49:0c:a2:51:f5:
23:d5:f1:90:b4:ac:a4:25:d8:3b:8a:c4:f9:3a:a0:
eb:bb:f8:11:5c:05:7f:29:21:4d:54:00:85:7b:7d:
89:64:5b:b2:87:34:01:be:f1:36:88:12:67:64:4b:
32:27:b0:92:c9:80:d6:61:a2:e3:46:66:b1:fe:b5:
93:13:b8:30:d2:c8:77:16:68:33:b1:60:83:76:bb:
9f:c1:34:16:29:26:ee:53:8e:58:a9:df:d4:33:15:
97:6c:72:61:3a:94:09:f7:c4:45:fd:5c:21:6c:b3:
c6:08:e5:78:62:53:b2:bd:66:5f:c5:f0:eb:70:20:
ca:02:c0:72:64:4d:b1:4c:24:c8:55:bd:13:90:0a:
af:c0:2f:b4:79:cf:a4:49:2f:42:2e:6f:df:7b:6c:
88:6c:47:d2:a2:8b:56:14:7a:bb:e6:cc:01:8c:bf:
b0:5e:cf:d3:39:04:fd:d1:f2:83:7c:6d:5d:5d:43:
d4:f2:f3:f5:60:47:fd:c3:25:e0:fa:36:69:65:9f:
ad:f2:ee:fc:e1:46:05:30:97:89:eb:2e:6d:af:2f:
08:ed:6b:36:f2:c0:d9:64:19:11:f7:26:ce:ac:71:
39:91:ec:34:52:08:57:f4:57:5c:9b:78:83:3f:a6:
21:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:10:DB:E8:0D:8F:9F:AA:28:2A:E4:07:C1:AA:A0:BF:63:E9:97:F3
X509v3 Authority Key Identifier:
keyid:EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1a:40:d9:98:4d:f2:a9:85:e0:8f:44:e1:8a:64:e0:d5:21:
99:77:fe:11:0d:82:86:ae:76:ca:86:0c:9b:44:6c:f3:f6:da:
6f:f4:34:fd:21:b0:8b:b6:c8:f5:b3:f2:e2:5c:09:1e:6b:d0:
18:23:c5:66:90:55:2e:50:f2:d5:81:1a:9f:48:46:d8:09:6c:
92:c8:a6:95:d4:37:7e:3e:1b:d4:27:d0:a7:da:56:f3:e9:fe:
3f:fc:f5:af:af:83:de:cb:dd:b8:31:c4:ba:4d:74:e2:16:76:
d1:b8:37:d5:6b:d0:0e:23:2a:26:a8:8c:31:df:c9:10:27:b5:
98:eb:c7:ed:e9:19:e5:57:b3:68:82:8c:bd:0a:66:da:ab:3a:
bc:a2:fc:64:a5:1f:22:8f:47:82:78:44:51:99:a4:af:db:d6:
eb:8a:5e:4a:b4:e0:63:2b:17:eb:73:18:91:55:31:fe:13:ec:
9e:f6:b8:69:fd:e4:ff:62:65:af:21:a9:20:df:0f:0c:c8:65:
df:0e:9e:8e:d8:43:10:83:57:39:83:0b:32:41:cf:af:dd:52:
b2:20:39:47:ed:e3:de:35:ca:31:9e:34:ac:9c:3e:d5:3d:d3:
1e:3d:d4:d3:be:0e:37:02:30:3c:f8:ad:a9:85:58:32:ef:45:
14:dd:76:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:51:04 2025 by rpki-client