Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
File: lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json)
Hash identifier: DWGp+wtw0u+BcFOhN6fsGHqckW0N2vu862660Nyq2i0=
Subject key identifier: 4F:58:5D:8F:38:95:14:C3:C6:05:1A:E6:D4:40:3C:64:C8:66:06:EE
Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
Certificate issuer: /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Certificate serial: 01967868A3F3D6447B397DC641AFB2E9E88F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
Manifest number: 14B1
Signing time: Sun 27 Apr 2025 18:00:45 +0000
Manifest this update: Sun 27 Apr 2025 18:00:45 +0000
Manifest next update: Mon 28 Apr 2025 18:00:45 +0000
Files and hashes: 1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: 7iNBhaqp3V0RxK/t6jd9dqqa05mJiy9ygzntGvxrAlc=)
2: pWYU_3rSNo7EOhyAYaHN6usNBI0.roa (hash: KeYaihRxFR7GfUW9GuvXnSgoYdgkOnmiGNfHnpBGPBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:a3:f3:d6:44:7b:39:7d:c6:41:af:b2:e9:e8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Validity
Not Before: Apr 27 18:00:45 2025 GMT
Not After : Apr 28 18:00:45 2025 GMT
Subject: CN=4f585d8f389514c3c6051ae6d4403c64c86606ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:37:ae:27:88:61:d0:23:43:97:8f:0a:cd:
64:4d:ee:b1:c3:10:a4:7f:f4:68:70:e2:90:2f:62:
a7:34:aa:73:24:9c:73:15:ee:29:21:a6:90:f7:b2:
cf:b0:f1:e9:15:82:0a:21:70:9f:41:90:2c:9b:54:
56:57:54:88:7b:7f:b8:fb:20:9d:34:6c:1e:94:51:
57:9f:a0:7a:45:fb:e0:c4:37:c0:c3:e2:27:ee:8b:
0f:75:ee:8c:af:f7:90:53:36:00:85:97:a1:8b:43:
af:bc:73:14:d8:16:39:c7:b0:32:9b:de:81:de:94:
73:5f:49:cb:8a:d4:c2:17:24:63:2c:ec:2a:ee:1a:
66:28:66:dd:38:8b:25:f9:ef:6f:c6:60:16:61:69:
74:22:8b:73:b2:ac:49:7d:8c:6c:5b:38:89:aa:0b:
99:21:6d:cb:5f:b1:c9:4e:6e:aa:d9:6b:f4:26:fc:
81:ab:40:13:c1:97:70:55:ff:92:24:4a:f5:54:8f:
30:7c:66:86:b7:8c:ae:5d:a9:91:32:83:e1:4e:58:
63:9e:3a:25:b1:d7:84:6e:47:a0:04:8a:b2:e4:40:
98:59:cf:86:bd:a0:58:df:52:c4:2f:93:cd:93:4a:
64:a0:98:8c:80:03:19:94:79:f5:c6:f1:3b:8b:7e:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:58:5D:8F:38:95:14:C3:C6:05:1A:E6:D4:40:3C:64:C8:66:06:EE
X509v3 Authority Key Identifier:
keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:36:dd:5a:32:9e:eb:c7:f4:92:f6:7e:d5:09:fd:87:b3:7f:
99:c5:e0:27:56:a1:35:94:27:27:c5:22:63:12:63:88:77:1e:
b3:8b:da:36:b0:e0:04:32:8a:e9:04:af:92:0d:99:44:d0:15:
27:31:6a:82:3a:d3:7a:f4:86:58:15:ff:6b:18:eb:17:26:3b:
f1:c0:de:df:3a:ad:5e:4a:37:0a:3c:bd:93:02:58:38:40:3b:
78:3d:47:02:04:19:b9:66:93:53:6f:61:b0:eb:0e:d0:66:86:
17:30:3c:dc:0e:3b:16:a5:e2:4a:34:80:f9:15:fe:54:50:5d:
17:25:ea:83:13:88:22:d6:8b:77:91:5d:30:92:31:0c:8c:97:
6c:59:e0:45:3b:9f:06:e1:62:22:2f:a4:cd:2e:71:bb:59:de:
34:30:b0:bb:98:a6:07:b7:17:26:b6:e2:70:88:09:8a:42:fb:
72:8b:d1:d0:af:3e:27:bd:61:3f:52:de:80:9b:07:64:6d:40:
8e:ca:0b:e0:d6:9e:ba:e6:00:1e:eb:fd:21:05:b2:a0:09:bc:
d0:64:de:db:cc:85:c3:c2:aa:69:e3:dc:48:c5:74:d5:ab:70:
5a:a0:1d:ca:e5:50:cd:7c:49:e1:3d:9e:1b:5c:4f:2e:8c:0f:
25:24:af:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:18:45 2025 by rpki-client