Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
File: lQPIUJD5zC4inTj96rrmJlCL3rg.mft (raw, json)
Hash identifier: 6SzTscegEuofIiQSOBuTFzdW/FcdUiZduCiY3ETkpLA=
Subject key identifier: 2F:04:4B:80:5D:2E:CE:A5:A8:D7:71:DE:F6:DA:87:FA:EA:A3:2F:DC
Authority key identifier: 95:03:C8:50:90:F9:CC:2E:22:9D:38:FD:EA:BA:E6:26:50:8B:DE:B8
Certificate issuer: /CN=9503c85090f9cc2e229d38fdeabae626508bdeb8
Certificate serial: 0196759E69EFAE294BC47FDE940518396188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQPIUJD5zC4inTj96rrmJlCL3rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
Manifest number: 0230
Signing time: Sun 27 Apr 2025 05:00:38 +0000
Manifest this update: Sun 27 Apr 2025 05:00:38 +0000
Manifest next update: Mon 28 Apr 2025 05:00:38 +0000
Files and hashes: 1: lQPIUJD5zC4inTj96rrmJlCL3rg.crl (hash: AhD2bGklhqyuyC+5izQRvC0H5Mr61hNsjiibg7mwotE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQPIUJD5zC4inTj96rrmJlCL3rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:69:ef:ae:29:4b:c4:7f:de:94:05:18:39:61:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9503c85090f9cc2e229d38fdeabae626508bdeb8
Validity
Not Before: Apr 27 05:00:38 2025 GMT
Not After : Apr 28 05:00:38 2025 GMT
Subject: CN=2f044b805d2ecea5a8d771def6da87faeaa32fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:99:f2:80:c3:8f:79:2f:04:34:5d:72:22:cc:
67:1c:eb:b3:6d:47:6e:e8:d7:01:e1:77:68:10:7d:
7f:34:31:d8:55:a8:a6:2f:7d:a8:89:4e:83:45:64:
5f:8d:9a:6f:73:a7:ec:4c:7a:27:12:2f:d1:6b:68:
fa:55:03:16:0a:58:d3:a6:0d:89:c5:d4:d4:37:2a:
34:36:18:68:3d:d8:4b:6d:b9:bd:5f:c5:d2:d2:60:
2d:fd:a8:01:56:29:e5:88:2a:85:d3:71:30:ef:f9:
29:94:b4:eb:9d:5b:d3:94:62:57:80:96:97:13:e4:
47:1f:04:8e:a1:41:0c:72:ae:08:56:23:0e:9b:09:
45:39:66:c6:01:f0:1a:89:ba:43:2f:81:44:c7:71:
a7:2c:c8:e3:09:c9:41:20:c4:72:b0:f1:b6:1a:99:
27:40:96:54:b2:97:37:ad:01:dc:da:36:3d:c6:df:
0e:c7:f1:d4:ce:4c:c8:a0:10:1b:6a:5f:da:93:a5:
5c:ca:59:98:b8:1d:57:83:18:78:a8:bb:34:e1:22:
3f:bc:08:83:6f:59:71:3d:66:c6:06:94:fb:12:b9:
17:53:a3:ec:79:cf:98:61:99:59:7a:7d:b4:86:d5:
45:97:ab:ef:3d:76:05:9a:bb:42:eb:56:4f:94:8d:
7d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:04:4B:80:5D:2E:CE:A5:A8:D7:71:DE:F6:DA:87:FA:EA:A3:2F:DC
X509v3 Authority Key Identifier:
keyid:95:03:C8:50:90:F9:CC:2E:22:9D:38:FD:EA:BA:E6:26:50:8B:DE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQPIUJD5zC4inTj96rrmJlCL3rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:53:ed:1d:c9:d6:15:c5:ff:fd:5b:a7:d0:e5:20:6b:ac:82:
31:86:61:e8:9f:e0:57:5e:d0:d4:48:5b:51:72:d0:e4:36:9b:
38:e9:d6:53:d6:c2:e2:57:51:6c:df:6b:92:8c:89:6f:f7:73:
10:e3:71:c2:1e:9a:6e:f2:3f:0b:62:e0:8d:2f:41:f2:eb:d2:
62:e1:ae:69:f8:20:98:4f:0a:0c:b3:bd:37:52:64:c8:57:3f:
8e:5b:e7:fd:54:80:f0:ca:08:6b:d7:9e:44:1e:f9:8b:a0:76:
4a:21:83:3f:9e:18:8d:49:9d:94:a5:0f:b9:6c:1c:c9:4c:e8:
b8:56:e2:0e:4a:db:e4:7c:40:d6:9e:c8:67:81:33:51:d3:66:
ee:21:4d:ec:fe:f2:7f:d0:c5:98:9a:5d:ad:94:55:38:63:dc:
d2:d6:b7:2c:4c:37:21:15:8b:45:25:61:9a:e6:8f:5b:9b:b3:
bf:a9:fd:f2:98:51:6f:69:0b:cb:99:e0:f5:94:67:12:fc:c2:
fd:6d:5d:9a:3c:3e:4f:f3:d8:89:50:70:96:31:b4:b0:46:83:
f4:ab:f3:10:25:c9:3b:05:05:9d:0a:55:8a:8b:4f:bc:d5:81:
b6:49:d5:2f:b9:ac:fc:ce:e2:e4:ae:86:2b:3d:c6:b1:74:c5:
28:b8:98:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:03:09 2025 by rpki-client