Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
File: IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json)
Hash identifier: QjjUdK6FFozYzlg3upqa48FZx3xpw0ImQFX65SX87KY=
Subject key identifier: E1:52:81:16:2D:BB:D3:CD:3B:83:A5:D0:7F:66:C2:C3:08:FC:62:95
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial: 01967643148DDA9F6ED23C8B3072E43031D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
Manifest number: 09A4
Signing time: Sun 27 Apr 2025 08:00:29 +0000
Manifest this update: Sun 27 Apr 2025 08:00:29 +0000
Manifest next update: Mon 28 Apr 2025 08:00:29 +0000
Files and hashes: 1: Fiar-ENd6nnmoEdCXbLpcIPIC8k.roa (hash: QQnwLsS3aNsC6jrod8mH1TrmnCup6aH2qx4uUiV6rWs=)
2: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: ARPUJIsymd56l2y74eLwYJjYIG0R5SBFB9aK7QRvvFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:14:8d:da:9f:6e:d2:3c:8b:30:72:e4:30:31:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Validity
Not Before: Apr 27 08:00:29 2025 GMT
Not After : Apr 28 08:00:29 2025 GMT
Subject: CN=e15281162dbbd3cd3b83a5d07f66c2c308fc6295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:2a:9e:78:4f:2e:d3:c1:ae:b0:20:4d:26:
1f:c3:24:ab:c8:b9:28:f1:8f:c6:86:cd:5e:ac:2c:
da:a7:c3:e5:4f:39:ff:ee:22:75:2f:3c:06:23:06:
cc:14:e6:7a:5f:98:a4:ec:80:e7:32:9b:ff:29:80:
18:7f:16:58:fb:5d:e2:55:67:46:ef:81:97:db:74:
f6:f7:87:1d:a1:2f:cc:b6:31:0a:43:b4:e3:25:44:
31:60:aa:6e:9d:41:6d:a1:ad:37:e0:66:ed:45:23:
d1:5b:e7:81:db:b0:08:be:51:92:91:18:42:21:d0:
c7:82:1b:cf:f1:72:db:4e:d2:2c:8c:11:29:50:52:
17:13:03:6d:04:e2:54:9b:ed:ff:ff:de:66:6c:6a:
b5:88:82:b6:3c:a2:77:7b:64:bb:64:24:1f:03:aa:
69:c8:3a:43:27:11:c9:05:81:e4:8c:31:69:9b:13:
11:b1:f9:d4:8a:9d:dc:35:23:2b:9b:ff:d8:30:f1:
34:6a:9d:c4:b8:e8:ad:9b:5e:29:7d:5b:e0:da:d0:
13:17:6c:f0:6b:e8:28:e8:40:a2:b0:65:46:84:d6:
42:9c:36:f8:de:8f:79:38:4b:07:ab:d9:7b:78:fa:
f1:85:39:97:f6:c2:94:9a:ed:dd:6b:23:43:86:4d:
c0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:52:81:16:2D:BB:D3:CD:3B:83:A5:D0:7F:66:C2:C3:08:FC:62:95
X509v3 Authority Key Identifier:
keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:01:cb:8a:a8:15:f9:a1:1c:39:31:d2:0d:24:90:80:c7:5c:
21:04:04:31:ee:b5:14:1b:cf:6c:7f:65:cc:46:c1:ea:99:bb:
79:7f:96:2b:37:5d:cb:94:b9:17:61:8c:4a:cb:39:03:d5:b5:
78:2f:81:77:4e:1b:d9:34:50:db:6a:f8:44:f1:96:3f:75:34:
24:42:bc:bc:43:02:5c:7b:9c:19:db:6e:b3:59:1d:7b:23:87:
9a:ed:99:4a:0d:67:3c:bc:89:51:e0:12:f2:e3:7d:05:c2:7b:
5f:4f:42:43:df:00:39:50:68:3b:0b:d0:2c:26:b5:c2:23:ab:
0d:6e:c9:15:fc:78:e8:f1:27:46:2f:98:9c:25:b1:75:3b:77:
6f:5d:96:2b:de:2e:24:72:7b:b5:ab:2b:4e:b7:c7:03:c5:74:
26:33:36:17:ca:22:cb:4a:25:fd:2d:20:34:04:4f:be:9d:12:
95:39:22:07:d7:99:99:80:65:e5:dc:02:ea:46:9a:fc:fc:9a:
55:c8:19:7e:57:09:62:cd:f2:c5:43:19:2b:1a:9a:3a:40:e8:
4a:85:9b:84:9f:81:03:5a:08:3c:9f:c4:3b:82:77:ba:7e:a7:
ae:af:6d:8d:d9:f7:b8:13:4b:12:56:33:24:90:18:68:98:5a:
97:d3:13:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:16 2025 by rpki-client