Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: s83FCOg/973GJcuuLpEobYjUUbzErKnKIP1tugrpx2o=
Subject key identifier: 0F:1B:60:79:71:69:FA:42:AD:0D:FB:28:88:1B:3D:08:70:81:84:A3
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 01967FB3C830B2234D77A6B955E153C5F920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 04:00:10 +0000
Manifest this update: Tue 29 Apr 2025 04:00:10 +0000
Manifest next update: Wed 30 Apr 2025 04:00:10 +0000
Files and hashes: 1: 1prz6nfwB7MR42V9eL5e4pTM0a0.roa (hash: nHNcflpIKWPFe/S0qGh+RfefQb1jF3HSnY4U4fHegwQ=)
2: k2hJkZDc_xeXo7A97oeeqJQmzBY.roa (hash: KfO87HjfOnIIu1KT3PIvCkLOefmGzWA42/xP3gBOPMI=)
3: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: +NQqpY/Co2oDMvc+kLZFdZKDjNdGuCbIuEm63del2tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b3:c8:30:b2:23:4d:77:a6:b9:55:e1:53:c5:f9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Apr 29 04:00:10 2025 GMT
Not After : Apr 30 04:00:10 2025 GMT
Subject: CN=0f1b60797169fa42ad0dfb28881b3d08708184a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:62:bd:32:8b:c7:4b:13:53:31:13:4f:38:9a:
0b:83:dc:4f:f8:b7:32:af:ff:46:56:92:30:43:78:
4f:71:e2:d3:3b:49:c9:05:36:c5:07:19:09:c5:b9:
3d:52:e9:e9:dd:40:21:dd:7f:f8:cb:a2:84:9d:3e:
7e:34:77:14:70:87:40:c4:ff:aa:e6:00:9c:32:9c:
b5:49:9b:df:bf:b3:50:c9:7c:6c:d5:69:f4:f8:2a:
25:9c:34:8b:3d:05:4a:d2:f6:f0:1d:1d:1f:07:9c:
9a:09:19:58:3f:65:c6:b0:5b:71:fe:16:b4:47:35:
14:0a:df:6d:bf:90:db:33:c5:cf:ab:b8:96:45:05:
77:0c:1c:79:ad:e3:06:92:72:4a:0f:c5:dc:90:69:
02:d1:70:d1:04:18:0d:5f:b0:41:e7:9b:1f:72:3b:
73:20:8c:7d:8e:28:e0:d4:fd:bd:1f:11:90:07:a6:
96:77:c7:7b:3e:7f:9f:bb:a0:f0:04:aa:27:6f:46:
b5:76:9f:9f:ba:40:17:50:05:f5:b1:f4:28:5c:ca:
d4:95:fd:4a:af:59:0c:c8:06:65:02:f4:2c:c3:a3:
e6:0c:5c:27:cc:1f:d7:ea:e0:4b:46:d5:30:11:67:
7a:9f:9e:2c:be:21:52:23:2e:72:71:52:d9:ef:bc:
3f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1B:60:79:71:69:FA:42:AD:0D:FB:28:88:1B:3D:08:70:81:84:A3
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:02:40:2c:08:04:17:88:ab:d6:2b:e9:c2:fc:e2:74:d7:b6:
9f:cb:75:00:28:7b:ed:81:22:8b:ba:6e:ec:a6:31:e3:eb:f7:
4b:b8:8d:e0:72:f6:4b:a5:9f:f5:9f:80:25:d5:bf:59:55:5a:
04:ff:bc:6d:01:54:fd:e3:6c:c1:13:11:23:11:76:6f:24:15:
bc:60:fb:71:03:9f:97:8a:28:de:cc:5d:00:a1:04:41:e8:8e:
b5:a9:1d:39:18:96:66:a8:3b:d8:92:c5:46:ad:b6:ec:27:c9:
23:6d:94:03:01:23:d7:fc:de:04:b8:8a:f3:9b:07:3b:d7:d8:
ad:6a:fa:a1:40:6d:b5:d1:28:11:be:7c:8a:d8:1b:94:44:5d:
22:12:7c:7d:62:d1:08:6b:64:fe:db:49:a1:98:28:3d:7c:31:
78:8a:f9:5f:1f:82:38:f3:e8:91:c3:88:0a:bf:3e:c8:f3:ca:
6c:45:3e:dc:57:2a:46:30:05:62:bb:58:33:b5:35:09:57:1d:
82:2f:ad:33:fd:7f:f1:82:9e:3a:92:6d:ee:d5:ab:6f:93:69:
5e:c6:7a:7e:fd:5e:d8:2e:fd:14:0c:fc:9e:d1:c5:a6:1d:30:
02:5a:f0:3a:b3:2a:34:f6:40:f4:8a:51:83:e0:11:6c:05:4e:
6e:95:9c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:18:59 2025 by rpki-client