Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: cmCxZUKWRknHqvOYdpXXAyJtlFyT4ITA9Tehl3MGVIk=
Subject key identifier: AF:9E:4B:16:04:F6:60:6D:4C:AA:35:1F:42:73:CC:7B:36:05:80:C9
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 019678687830898ADF9CB0341C060BDD4D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 18:00:34 +0000
Manifest this update: Sun 27 Apr 2025 18:00:34 +0000
Manifest next update: Mon 28 Apr 2025 18:00:34 +0000
Files and hashes: 1: 2iLiWe0BMpbPlHeRUZgf_7ggDIw.roa (hash: 5a6Nlx4knEH8VTjhj8RCsqY6ZT98S2ewOdcJJkdDglM=)
2: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: pUm5gdkyWIZ605Sy000gw3NJbHqC2ZkVuZTIilCUGtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:78:30:89:8a:df:9c:b0:34:1c:06:0b:dd:4d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Apr 27 18:00:34 2025 GMT
Not After : Apr 28 18:00:34 2025 GMT
Subject: CN=af9e4b1604f6606d4caa351f4273cc7b360580c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:ab:53:cf:8f:56:d2:2d:b2:58:86:02:be:ba:
00:2b:dc:8b:b5:54:bb:8c:08:4d:53:88:b4:94:15:
45:e5:90:d4:8c:1f:b7:3f:3c:ba:65:91:90:e2:d0:
16:65:72:29:84:ec:6b:87:b3:1e:fa:ca:c2:64:f1:
ea:7c:c6:98:0a:c7:59:0c:c0:06:49:68:48:88:7e:
7b:e5:fd:a9:39:49:13:d7:2a:3d:da:a0:38:c2:f4:
cb:62:98:d6:d3:e9:24:eb:8a:30:27:e4:07:68:c1:
32:e2:a4:53:db:99:1a:51:65:fc:19:96:45:95:5d:
c5:06:8d:cb:89:d5:b9:7a:80:7b:66:bb:fa:22:7d:
85:8a:ff:5e:69:b1:aa:42:fa:0c:ec:1e:41:e0:3d:
de:79:28:2d:53:18:93:c2:f2:f8:99:c5:34:77:cb:
59:2a:da:3e:55:ca:aa:6b:70:17:1a:ca:c8:cc:75:
cb:52:e9:c6:53:f4:74:47:9a:64:cb:e5:42:da:ac:
b5:47:a9:e3:1a:d3:e6:ef:3f:02:32:1d:73:3c:5d:
04:02:9b:f9:38:64:38:50:31:c5:35:f1:7a:c8:60:
a0:a0:aa:5b:a9:d7:f6:16:6a:e7:27:52:35:98:f6:
d1:82:38:cc:e8:be:63:ca:36:b2:45:2f:dc:da:2a:
56:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9E:4B:16:04:F6:60:6D:4C:AA:35:1F:42:73:CC:7B:36:05:80:C9
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:05:21:d4:ed:51:5c:51:6a:47:53:87:ae:c3:35:ad:ea:14:
3e:1a:b5:7f:ca:cf:03:5a:f6:4b:be:1d:26:25:64:b7:73:20:
5d:62:b5:4c:65:d9:42:29:32:04:82:f0:10:ac:a3:8c:48:1e:
14:7a:d6:69:1e:6e:fb:86:04:52:e4:ad:fc:9b:d4:f1:f5:4c:
60:52:36:7f:86:24:3b:43:5c:3d:a0:02:f6:1c:7a:53:78:c9:
87:56:2f:ea:ef:c8:c6:78:66:52:12:b0:59:b6:9b:8d:ee:58:
13:85:46:8c:dc:8d:a9:9e:72:c1:04:3b:39:d5:ea:af:66:e6:
8d:44:8f:98:c2:87:69:53:cd:ce:61:43:81:39:9e:77:c7:2a:
d9:85:a6:b3:6b:fc:07:53:d6:9b:9f:63:ca:f9:45:d4:f5:62:
7e:59:ff:73:62:59:f5:05:38:be:ad:de:6d:1b:56:50:ee:52:
ed:1a:95:8a:7b:dd:f4:54:3e:4e:d3:73:87:aa:da:47:f0:a3:
46:5e:fc:5b:47:b1:c7:ee:4b:fc:aa:2c:c3:20:c0:44:e0:15:
3e:c7:55:a4:6a:b9:44:e1:7f:51:63:73:ed:56:13:48:fa:1c:
82:80:82:99:40:dc:29:69:c4:24:1e:b5:30:33:06:7b:16:b7:
85:36:d4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:00:55 2025 by rpki-client