Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
File: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft (raw, json)
Hash identifier: BffrUGYi+WOxQt4MRd6xEVpSxleg91XaOc55LOjIgh0=
Subject key identifier: 5F:C7:99:B4:B9:09:8E:3D:6E:08:C5:01:B2:BF:EA:95:C2:16:13:1C
Authority key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
Certificate issuer: /CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Certificate serial: 019675D552303B3772E86E360F272472E583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
Manifest number: 03ED
Signing time: Sun 27 Apr 2025 06:00:36 +0000
Manifest this update: Sun 27 Apr 2025 06:00:36 +0000
Manifest next update: Mon 28 Apr 2025 06:00:36 +0000
Files and hashes: 1: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl (hash: hjsMdzdaXRKNML/kbuqd3PMK1Nk/LHS3MXJ+XiXvd/s=)
2: GwUYPxJQaw648raZgaiMud0BTgo.roa (hash: LGJZt6ikz8yBfuTCs6jZTUAALLEYDfmbRQi7+ExvBNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:52:30:3b:37:72:e8:6e:36:0f:27:24:72:e5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Validity
Not Before: Apr 27 06:00:36 2025 GMT
Not After : Apr 28 06:00:36 2025 GMT
Subject: CN=5fc799b4b9098e3d6e08c501b2bfea95c216131c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c0:5b:f6:2a:c8:41:5b:bf:0c:8b:d9:29:f8:
16:42:4c:8c:88:5b:0d:83:35:a8:37:d8:cc:7a:3c:
0c:4f:4c:b7:d9:75:5f:3a:f1:5b:bb:dc:14:65:a5:
dc:a2:15:b5:22:a7:9d:84:62:5b:dc:31:c1:ca:25:
e5:1e:d7:26:90:a0:b2:f8:dc:bb:7b:95:f4:33:60:
14:6c:2c:a8:49:b6:eb:71:e2:48:e9:dc:26:83:c4:
26:ab:4f:fb:40:0f:0f:a0:f7:6e:35:6e:bc:5e:46:
c0:6d:5e:ed:ec:4c:50:c5:20:74:dd:a9:40:c6:b0:
61:27:ff:e8:a3:3a:d8:4f:3d:38:c7:e9:15:fd:71:
89:ae:2e:2c:7e:df:0b:d9:1a:d4:d0:47:58:fd:1c:
7f:f3:3c:17:f3:ec:95:ee:36:eb:4c:10:79:22:ab:
09:d6:78:92:5a:0a:5b:21:b3:65:44:6e:c3:b8:4c:
32:8d:cf:7c:05:3f:9d:fe:7b:c1:8d:2f:ae:07:43:
09:24:1e:54:b0:9c:34:a7:f9:12:2b:9d:38:8f:69:
6e:f4:ee:46:5c:c7:2e:60:67:d8:19:cd:89:da:9f:
42:9f:70:8e:52:02:7c:13:67:58:07:eb:9e:6f:75:
12:f4:a1:90:5c:8d:b9:33:30:dd:cb:b2:cb:3c:fd:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C7:99:B4:B9:09:8E:3D:6E:08:C5:01:B2:BF:EA:95:C2:16:13:1C
X509v3 Authority Key Identifier:
keyid:F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:24:f7:c7:cd:e9:56:01:f8:a8:2c:bf:61:a0:36:ea:5c:f4:
d1:70:bf:18:f2:df:36:57:cb:06:35:65:a2:72:7f:cb:6f:08:
a9:fd:6d:53:2a:22:6b:94:4b:fb:a6:0d:8d:76:8e:d5:4a:8b:
ae:c7:e1:e6:de:a5:c9:32:61:6c:0b:4c:d2:e9:a4:aa:64:6d:
9d:23:6d:70:8b:49:d3:80:d8:31:35:00:8f:41:c2:ff:80:05:
2e:17:e3:92:9e:a4:72:35:d0:96:20:ab:2c:92:37:be:fe:c4:
74:dd:f4:0d:76:5f:d9:6d:4e:b3:b4:d9:9c:14:6b:91:a3:4f:
70:b6:27:72:7f:0f:47:71:23:87:32:3c:ec:b1:02:39:bd:42:
bd:ae:ec:2e:46:6e:5a:c4:5b:68:a4:8f:f0:3d:38:7b:0f:98:
ab:eb:ed:25:30:72:a1:4c:01:25:b6:89:1a:b2:91:a2:3f:b7:
a0:5c:f8:05:6f:de:d7:42:cb:c1:10:77:d4:68:ba:7e:d5:52:
cd:95:28:65:b9:a1:6a:4d:0c:5d:62:1d:cb:c9:5a:d0:7a:14:
a7:50:72:d0:58:af:8a:a0:9d:9f:15:20:b8:f4:cf:5a:4e:ba:
f9:6d:5c:5a:28:19:50:ff:d5:ae:e7:8e:ea:14:ff:5e:70:69:
97:23:80:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:07:49 2025 by rpki-client