Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
File: lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft (raw, json)
Hash identifier: +s0jxpbpbfCN/XIp6aBOelOXW7qhqvu6B7owW3r3LEA=
Subject key identifier: BC:1A:6F:06:2B:64:9A:6C:03:DE:61:B7:02:95:64:7C:7C:CB:6E:06
Authority key identifier: 94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
Certificate issuer: /CN=945efd6c477806bd6b45267558d6828feec61ea6
Certificate serial: 01967FEB195EBB63FBDF33380EECCC6E9E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
Manifest number: 11E3
Signing time: Tue 29 Apr 2025 05:00:35 +0000
Manifest this update: Tue 29 Apr 2025 05:00:35 +0000
Manifest next update: Wed 30 Apr 2025 05:00:35 +0000
Files and hashes: 1: 7Jg06ldxKlvbz-CEYbOTLWDbPQE.roa (hash: pFruh1e8rswIQqQRB2tI9O+JmHtlnpYn4xJr1wtjctA=)
2: lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl (hash: VoGydAfcjBJiNbKemu8WxaTS6BkAcqlvQnEZcWvb5+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:19:5e:bb:63:fb:df:33:38:0e:ec:cc:6e:9e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945efd6c477806bd6b45267558d6828feec61ea6
Validity
Not Before: Apr 29 05:00:35 2025 GMT
Not After : Apr 30 05:00:35 2025 GMT
Subject: CN=bc1a6f062b649a6c03de61b70295647c7ccb6e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:44:e4:ec:1b:bf:a9:3a:45:78:e9:bc:52:
a1:05:2d:62:2e:51:90:cb:b0:87:ea:b3:8c:61:9b:
18:42:8f:a3:dd:c7:7f:4b:ed:39:14:2e:72:09:40:
ea:ca:00:e1:cf:4e:aa:f6:47:34:7e:5e:d8:f0:8d:
5e:3f:8c:67:4a:b6:f9:66:2f:38:50:00:c9:3a:fc:
09:3e:a1:7a:10:57:cf:80:68:3c:33:1d:b4:7e:0e:
98:05:46:eb:a7:7d:ac:7e:2b:ef:c7:a9:20:30:f7:
05:99:80:5f:4d:7a:29:91:01:0d:68:18:25:0f:5c:
57:f5:65:19:50:00:c3:2d:41:e6:70:61:24:b2:6f:
33:72:18:2c:ba:59:5d:f3:08:ec:23:f2:6b:91:0c:
41:59:86:1f:fd:7d:b9:55:e1:f3:c2:bf:b5:e0:21:
2a:32:36:28:78:a0:8f:50:08:64:62:7b:f1:89:82:
11:dd:6e:0e:ea:1d:00:a1:d7:a3:4e:01:4a:a3:ba:
fe:08:fd:64:e3:03:9d:9a:a0:58:3e:6d:2f:b8:48:
05:ed:db:5f:15:f8:18:e6:d7:ee:4f:30:ba:97:50:
48:3c:ae:8c:1d:c8:a8:ff:cd:36:b6:eb:6c:bb:6b:
88:1d:f4:e5:0f:6e:c5:06:06:7e:d6:ab:1d:90:ab:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1A:6F:06:2B:64:9A:6C:03:DE:61:B7:02:95:64:7C:7C:CB:6E:06
X509v3 Authority Key Identifier:
keyid:94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:52:c8:92:80:2d:99:92:2e:28:ff:96:46:fe:f2:1d:a9:ff:
a1:1b:66:9d:4d:7b:cb:4a:3f:8d:0b:30:b6:a8:68:92:2b:6f:
f7:99:55:9c:b3:e3:41:22:c3:73:2c:32:39:6b:03:c5:28:1f:
63:b9:7f:24:a6:01:0d:01:bc:fd:cf:56:c1:2a:6e:64:eb:ad:
27:16:e1:4c:a4:f8:3a:47:83:ac:32:6e:9f:1f:ab:2d:b5:f0:
f5:58:3f:55:f7:ea:d2:9a:7b:dd:65:9f:dc:eb:79:c5:7c:a7:
b8:56:29:91:cb:54:d7:79:16:3d:65:c3:d4:6f:34:72:de:c2:
34:d8:8d:47:f2:a4:c6:46:9f:8d:9f:36:d9:b8:2a:7a:d0:32:
17:e0:b9:ea:24:1f:64:4d:43:99:19:19:6c:b3:f1:38:32:03:
c1:1d:02:68:7e:cf:f7:40:d3:87:df:e6:6c:58:92:02:ef:f5:
a5:24:a8:21:24:b5:5b:ac:23:a8:c6:88:e8:72:a2:4f:94:77:
d5:60:d5:07:81:7e:61:23:23:93:95:a0:64:be:80:56:75:1a:
83:2f:24:07:a5:6a:6d:6b:f8:fe:a4:80:57:39:ee:5b:d8:d4:
d4:69:0e:03:d4:9f:eb:1a:06:38:0e:91:fe:9b:d9:bc:a1:e3:
48:2a:e3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:28:33 2025 by rpki-client