Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json)
Hash identifier: eXgIZppZNhm6HE273ZH96Qi99657Emjbge0xhtxw9Tk=
Subject key identifier: 2C:4A:11:A2:ED:D0:8F:5E:BF:1B:16:5C:94:12:E0:B1:74:5C:EF:99
Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Certificate serial: 0196827E66348838A53300775C6F3D7F0456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
Manifest number: 14FE
Signing time: Tue 29 Apr 2025 17:00:43 +0000
Manifest this update: Tue 29 Apr 2025 17:00:43 +0000
Manifest next update: Wed 30 Apr 2025 17:00:43 +0000
Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: Ds888+4eVHVZrdTA6RiiqSRIcCZwqzFsjRbnIPjwtTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:66:34:88:38:a5:33:00:77:5c:6f:3d:7f:04:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Validity
Not Before: Apr 29 17:00:43 2025 GMT
Not After : Apr 30 17:00:43 2025 GMT
Subject: CN=2c4a11a2edd08f5ebf1b165c9412e0b1745cef99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:56:f9:86:dc:5c:e2:73:31:e8:73:14:7f:a9:
b3:9e:99:eb:14:8e:32:93:76:da:7f:4c:f3:a5:6f:
0a:1c:4d:dd:4c:6d:0c:30:57:cf:7e:90:c6:32:17:
78:98:5b:63:ec:c0:81:51:25:4a:c8:a6:b7:e9:86:
5f:89:07:f3:bb:ce:70:01:0e:73:b8:2a:04:60:37:
ad:89:9f:ca:f0:67:e2:a1:fb:64:78:22:95:87:15:
2c:0d:d0:36:d9:33:7a:bf:7f:72:5f:71:8b:b2:2e:
8f:a6:87:42:a7:7c:0b:8b:f2:08:20:bc:c3:61:fb:
72:06:04:4c:39:96:f7:11:43:2d:99:27:98:84:b0:
a8:55:6d:7e:bf:31:41:b4:82:20:ad:da:7c:ba:b4:
6d:09:0c:98:e2:bd:46:9a:ca:e8:ce:91:0c:c5:4c:
e4:4d:d6:92:81:31:8b:13:cc:c8:ca:1e:d4:7e:03:
9a:21:46:a9:16:1d:72:4b:ca:dc:bb:18:95:10:33:
68:af:18:87:67:1e:a4:d2:84:a9:e2:5d:30:3e:53:
ee:17:ea:77:4c:82:6a:7d:1a:da:a1:69:eb:2e:9c:
32:20:bb:0f:b7:4d:2b:14:a1:e3:b4:2b:c5:e1:02:
e5:7c:de:67:d6:dc:50:4f:16:df:2b:20:76:d2:86:
78:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4A:11:A2:ED:D0:8F:5E:BF:1B:16:5C:94:12:E0:B1:74:5C:EF:99
X509v3 Authority Key Identifier:
keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:17:70:83:15:f0:ba:c8:5c:a4:df:ba:e6:6e:56:29:30:93:
7e:7a:43:77:d6:7e:e1:ed:db:44:ba:cc:0d:15:b5:a2:42:a8:
71:40:31:ae:0f:56:a7:76:1d:e1:0e:b0:16:07:cb:5b:7f:8c:
df:d0:53:bc:25:cb:3a:39:27:0a:48:1f:1a:15:14:d9:61:3a:
c0:e8:3a:dc:64:b6:3c:65:2c:84:f7:31:26:bd:cd:02:00:76:
08:81:39:f5:e3:3e:ae:04:9a:5a:1a:50:7b:8f:81:da:d9:49:
84:69:f9:8a:fa:70:a1:8c:47:0b:17:89:26:ab:70:9e:c5:47:
f2:7f:83:4d:db:ee:5d:c9:12:c5:a1:80:72:9a:4f:f8:37:62:
02:2a:f0:fe:09:5b:0b:a5:f8:14:ae:82:b5:ff:46:1d:27:e0:
f3:2d:69:87:bd:95:7f:29:80:b4:ed:69:b9:5c:f6:fd:97:20:
5c:52:f2:a9:7c:8e:d4:ae:75:14:1f:47:87:ba:71:00:6a:ba:
cb:76:04:2c:4b:78:84:4d:b9:88:7b:5a:4b:c3:d8:e2:a2:9a:
13:67:97:d0:43:2e:cf:5d:10:37:51:4b:b3:6e:fc:fb:22:8b:
15:bd:76:33:5b:44:45:e7:05:81:2e:54:81:ba:5b:ce:c7:b4:
11:5c:63:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:36:27 2025 by rpki-client