Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: zfgGt0kpQ8sZzG+cdVc6Qqy+bwdPLcmpxmS4IUA8qis=
Subject key identifier: 02:9A:F0:F1:FA:67:F3:DF:8B:F8:4F:B4:6F:52:46:41:F6:FB:D3:5D
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 01967AC516A2988E56A073DEBEC11A67253C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 0118
Signing time: Mon 28 Apr 2025 05:00:58 +0000
Manifest this update: Mon 28 Apr 2025 05:00:58 +0000
Manifest next update: Tue 29 Apr 2025 05:00:58 +0000
Files and hashes: 1: fATmKoPkxnFaeIEAAJJ02F6yM_M.roa (hash: 9vZ8Uz6k4By0kjf2AHSVtoIff7eSff80iL0R5CgM+Wc=)
2: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: BqmEmj0dTvkYbhKDv4i/7lgPp0zuFsIplaauDflneJw=)
3: nxwl4psj0ZeUsfjLgqXGlryR_84.roa (hash: V1Lgl4QJ6FifoZAOxyZaoWJeRw45hAvPFwT3/eP0Ph4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c5:16:a2:98:8e:56:a0:73:de:be:c1:1a:67:25:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Apr 28 05:00:58 2025 GMT
Not After : Apr 29 05:00:58 2025 GMT
Subject: CN=029af0f1fa67f3df8bf84fb46f524641f6fbd35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:24:b2:3e:83:4c:6c:1d:69:e9:82:89:a0:
59:92:3a:2e:26:76:f8:e0:6c:58:e8:a5:fd:36:8e:
03:8d:f8:a9:6f:8e:b1:d6:b5:e5:b6:35:c0:e4:48:
f4:01:d2:7c:33:fd:03:a1:85:6f:c0:0f:1c:34:9f:
a5:c6:16:2b:8f:fb:aa:c0:e3:83:9b:29:30:8f:a2:
85:fa:95:68:4b:c4:14:f6:46:4d:95:da:dc:2f:c6:
7c:aa:bf:21:1f:d8:58:a0:ee:93:00:60:eb:da:43:
a8:94:00:ef:15:89:d1:01:a4:ac:86:aa:0e:86:a6:
8d:44:dc:a6:a7:e3:99:ae:d1:50:b2:5f:d3:d6:7a:
c2:a5:10:41:9f:88:28:2b:67:0a:7e:67:7e:0f:07:
e4:c6:1b:cb:c2:85:b2:bf:b7:f9:70:46:20:33:4a:
01:42:23:63:9f:3a:e7:14:16:49:81:bc:56:59:64:
79:7d:98:58:1b:9f:1d:4d:cc:c8:fb:08:ce:94:eb:
7d:b5:7b:66:b6:07:34:6c:e7:d6:32:f1:72:30:dd:
d0:f5:67:5c:a3:a3:59:25:f3:25:cc:f9:ec:da:4f:
74:7c:9d:e1:74:4d:e2:79:9e:17:53:3e:b8:56:e7:
41:c3:83:1b:c1:c8:fa:98:c0:7a:4a:68:96:e4:4c:
30:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9A:F0:F1:FA:67:F3:DF:8B:F8:4F:B4:6F:52:46:41:F6:FB:D3:5D
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d7:93:fe:37:43:64:1e:f9:cb:f6:6d:c5:00:e5:c2:e0:ae:
40:06:80:38:9e:86:3e:48:c1:3e:55:f5:7f:71:7e:cd:9c:e1:
b9:1b:cd:c8:13:a2:4d:52:3b:45:b0:c6:ce:e2:0a:38:f0:a2:
57:d4:2d:69:39:a3:b6:4c:b5:65:36:58:f3:fa:2d:ea:8b:e9:
bb:6a:bb:31:d3:e6:e0:60:19:10:27:8b:db:03:dc:8e:e9:f1:
da:86:a1:84:58:cc:2d:ed:aa:e9:7a:50:33:7e:ac:eb:54:32:
c0:fc:84:5b:e0:25:a9:37:35:cc:d7:1a:ed:a5:c4:98:e4:3b:
93:2a:14:53:aa:52:84:fa:d5:c9:90:eb:7d:9c:53:9c:19:68:
ec:e1:b3:34:13:02:57:9b:7d:7f:9c:fd:55:db:22:3e:7c:31:
79:e6:4f:3a:80:41:89:71:24:38:7c:c9:ec:47:33:15:51:64:
5c:72:07:a1:9e:03:f5:50:79:f9:82:61:eb:b3:af:f3:4e:6f:
c1:50:08:8e:38:53:9d:ab:f8:6b:f1:94:7c:65:32:da:98:9d:
02:61:dd:f6:ab:ef:e8:9e:bb:50:9d:70:9c:e2:19:6b:54:fc:
43:3f:0d:04:9f:07:01:34:1b:3d:2e:b1:85:d3:1d:8d:ea:f7:
cb:05:39:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:22:13 2025 by rpki-client