Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
File: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft (raw, json)
Hash identifier: JzR4XEJHZbiqS5bEDg5XuvDgrJj4PBSpm14169D1eZQ=
Subject key identifier: 00:EA:3E:FC:E4:28:10:B1:9F:71:72:9E:CB:40:FD:FB:A7:3A:50:5E
Authority key identifier: EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
Certificate issuer: /CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Certificate serial: 019690034F1953448AA1F873AA5F881875CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
Manifest number: 135D
Signing time: Fri 02 May 2025 08:00:57 +0000
Manifest this update: Fri 02 May 2025 08:00:57 +0000
Manifest next update: Sat 03 May 2025 08:00:57 +0000
Files and hashes: 1: 2_qB8eFgSy7qYs-cTMDnxVlFBNw.roa (hash: fSrSkbUGiKE2ZlG+ZtKwnFUZkRCDBazw6Ikex7efYic=)
2: 7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl (hash: Md7T0mfyBgon/HjNopMxy4Zq01WlXW537CkB2g4Zn3c=)
3: keUTzloof1e5LCPNjCM6qrztCW0.roa (hash: 96VfjYTiDayJ8zEZcHUdOWEaY+iQmK9P7tnTsjIikmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:03:4f:19:53:44:8a:a1:f8:73:aa:5f:88:18:75:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbbf2ba5b32e42e8b6c03b836d764f975b5898f
Validity
Not Before: May 2 08:00:57 2025 GMT
Not After : May 3 08:00:57 2025 GMT
Subject: CN=00ea3efce42810b19f71729ecb40fdfba73a505e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ed:01:14:97:9e:b7:f8:b2:fb:60:06:2d:c2:
17:60:b2:04:3c:61:e0:0f:50:5a:d6:52:b1:55:2d:
4f:2a:20:6b:23:92:63:9c:6f:b1:97:06:b8:e1:cb:
f7:66:39:6d:67:28:00:2b:5e:ec:24:9c:2e:45:45:
bd:54:aa:24:ad:92:c9:d1:77:3b:ff:71:4e:96:41:
9f:a5:30:2d:80:ca:29:3b:a0:cd:d5:25:17:f9:f5:
04:05:f6:9b:09:d2:d9:34:09:e3:4f:66:e9:f3:ca:
12:83:50:5a:88:31:1f:00:5d:ac:1f:45:06:20:20:
5a:2e:91:f1:f1:35:88:96:e8:3c:e9:c2:ed:b0:b3:
b0:60:55:e0:84:18:80:a3:8d:ae:9e:9a:59:e2:d0:
94:b7:88:6c:b6:66:38:29:a8:45:3e:c1:1e:19:5f:
84:37:8c:a1:f2:4d:5c:c6:47:7b:69:9f:96:89:f2:
36:66:fd:47:c0:4d:58:d7:ce:d9:e2:d1:63:10:1c:
09:ac:55:57:0c:76:f2:39:33:14:cd:80:80:f0:ed:
90:25:8c:02:71:c6:5c:ca:d8:b3:a9:6c:ce:a3:4c:
8b:83:57:f7:53:77:81:58:2e:a3:5d:3e:d0:23:aa:
e5:d7:c5:ba:2e:c0:6d:ab:90:7f:2b:2f:3f:9b:92:
a2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EA:3E:FC:E4:28:10:B1:9F:71:72:9E:CB:40:FD:FB:A7:3A:50:5E
X509v3 Authority Key Identifier:
keyid:EC:BB:F2:BA:5B:32:E4:2E:8B:6C:03:B8:36:D7:64:F9:75:B5:89:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/431105-67a2-49cb-b7e0-83ffc80073b2/1/7Lvyulsy5C6LbAO4Ntdk-XW1iY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2e:fa:84:33:aa:c2:81:0b:36:9c:5f:96:c0:bf:65:c2:8a:
b1:76:7c:e4:59:8b:64:34:ab:55:c8:3a:b6:3e:6e:50:56:76:
88:73:e9:55:1f:01:80:b3:2d:d8:dd:43:af:f7:dc:50:14:0b:
eb:17:65:c7:2f:25:9e:47:6f:0f:d3:45:81:33:5a:96:02:38:
29:73:3a:b4:ab:a4:2d:39:61:0c:62:65:8e:97:bc:aa:19:3b:
93:a3:d5:62:4b:d9:e8:86:27:9c:4f:c1:b3:ce:47:b9:ea:fa:
b2:fd:9a:45:06:70:b7:b7:c1:c5:f8:ef:52:66:46:3c:ba:82:
53:ab:c2:f6:6c:d3:d3:22:43:ca:f7:ec:15:b9:ed:15:3d:f3:
9d:0e:dc:8c:cd:ea:a4:af:73:6d:66:2b:c9:f7:61:ac:b5:cb:
9c:99:27:d4:1a:c1:4e:10:19:a2:98:a1:ae:8f:50:e1:e1:e5:
b9:17:50:3e:f3:06:0f:7b:13:de:f9:17:d0:ed:f6:2d:ec:46:
4b:9c:54:72:59:e9:d8:b1:78:b2:39:28:72:38:9d:f8:53:f6:
97:54:77:e0:81:69:75:61:30:21:63:20:44:64:e8:d1:ad:0d:
ad:38:90:2c:4f:85:88:86:bf:31:c5:ef:08:cf:e7:12:7c:77:
24:41:05:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:58:25 2025 by rpki-client