Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
File: levYBm8QkMMRnNtp6dTcQNkDBPg.mft (raw, json)
Hash identifier: VYTD3yWAOfrUC4MZd4W4Td8n/tN2k66+HRXnFDz9KLw=
Subject key identifier: 76:3D:58:75:BB:38:4A:F1:11:6C:4F:E0:86:DF:80:61:C4:67:E0:81
Authority key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
Certificate issuer: /CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Certificate serial: 0196854825ACDB6373A32F1B5B5559222A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
Manifest number: 151E
Signing time: Wed 30 Apr 2025 06:00:20 +0000
Manifest this update: Wed 30 Apr 2025 06:00:20 +0000
Manifest next update: Thu 01 May 2025 06:00:20 +0000
Files and hashes: 1: levYBm8QkMMRnNtp6dTcQNkDBPg.crl (hash: hyZzmeEI4m+JFYH9YVjxWrBnXpOgR5VCrCCvKgQGMPg=)
2: wRukRujev3BO2RN4ND9D6D63w5k.roa (hash: BYKbibBqJO+JvICBVUX/a9TBtkzvHJs+kP8dXi4jNhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:25:ac:db:63:73:a3:2f:1b:5b:55:59:22:2a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Validity
Not Before: Apr 30 06:00:20 2025 GMT
Not After : May 1 06:00:20 2025 GMT
Subject: CN=763d5875bb384af1116c4fe086df8061c467e081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:80:8d:b9:bc:b9:7d:c1:81:f6:a9:59:b3:94:
65:4a:cf:fc:6f:6d:61:12:c1:97:57:2c:33:41:b8:
68:49:84:7e:bf:1a:fa:10:ce:ce:aa:3c:7e:6c:7e:
6d:53:a8:28:35:cb:7b:03:3a:9b:80:7b:10:ea:b3:
e6:a7:51:1d:9c:13:c4:81:67:0f:00:1d:a6:b7:81:
a1:9b:ff:71:bc:da:6c:58:f3:b3:c6:17:f4:bd:58:
a6:00:21:c8:36:f2:2c:90:7c:52:04:b9:32:f8:52:
63:ba:01:42:cf:94:6b:71:8f:83:04:dc:e4:2a:fb:
bb:af:c5:22:a0:4b:0b:b4:ab:d8:76:08:bb:2a:79:
49:4c:27:1b:9e:5b:5c:94:ac:fd:6f:22:bb:12:9f:
fe:8b:cc:2b:66:55:ba:79:cf:6b:44:b1:6a:f4:8b:
c0:49:0f:46:d0:c6:c2:9f:ca:90:99:4b:4f:e7:6f:
a1:e5:e4:d8:43:e4:d7:01:57:5d:a9:d4:77:2c:1a:
5f:7b:10:31:ef:3c:67:57:96:fa:9a:31:41:6b:27:
03:86:af:b8:04:20:37:6e:eb:b6:8d:7c:78:21:ae:
36:3f:5c:16:84:c7:06:14:74:f8:6c:12:1b:bb:24:
a9:b8:81:57:f5:67:2f:6b:ba:2b:c3:de:41:07:a3:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3D:58:75:BB:38:4A:F1:11:6C:4F:E0:86:DF:80:61:C4:67:E0:81
X509v3 Authority Key Identifier:
keyid:95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:17:03:07:15:ca:72:ee:ce:83:7b:26:3e:11:ba:83:83:78:
5b:e2:f5:78:79:89:54:ba:09:3b:de:2b:2f:6b:cd:85:4d:f1:
c8:25:83:f1:db:71:02:40:ba:95:2d:a0:9f:68:ef:b4:ed:32:
c9:83:5a:fc:4f:b1:dc:92:87:76:78:67:3b:7d:30:80:42:bb:
87:3c:5e:79:99:fe:1e:89:af:23:98:c2:f8:ef:7e:c7:09:97:
b6:d5:8f:69:ae:44:20:ba:c1:08:35:a1:c2:2d:6e:8a:95:28:
e0:35:6f:98:18:d5:e2:7c:df:5c:37:10:c5:c3:7c:37:e4:54:
9d:85:6c:12:14:24:06:58:a6:ba:57:04:14:de:3e:60:62:02:
80:88:66:fd:a1:9d:57:fb:54:69:34:aa:a5:85:18:93:a7:8b:
29:1e:97:99:0a:2f:2d:d3:07:ba:44:d9:60:96:79:c5:95:2c:
d9:05:da:97:a9:8b:57:65:97:95:36:bd:4b:e6:12:24:a9:eb:
57:f0:e3:96:10:7f:f9:0e:3c:25:03:db:6f:c8:60:0a:c2:27:
c9:02:a2:96:2e:21:ac:b3:e8:e8:31:22:33:c7:ad:3f:c2:97:
01:30:44:08:62:72:12:ad:19:85:f6:d9:b1:07:e5:df:d4:23:
30:8e:33:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:43:15 2025 by rpki-client