Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
File: L8plksD-NPq-_MQ3GSh7hE1HygM.mft (raw, json)
Hash identifier: VR7sJODGqrD64Mt/xuqpBukK3PstybtsAq2n3/ozwbo=
Subject key identifier: AA:58:A6:89:2F:0A:68:F1:6F:06:2E:68:62:F1:A5:2D:A0:F2:95:A1
Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Certificate issuer: /CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Certificate serial: 019679E9B9B5ABB509C431BC0B7FB2B9747B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 01:01:22 +0000
Manifest this update: Mon 28 Apr 2025 01:01:22 +0000
Manifest next update: Tue 29 Apr 2025 01:01:22 +0000
Files and hashes: 1: Ii6Eihe3uHllmAF3w-e0EbIsuEY.roa (hash: AaLyOgaPOF0EjSeS5+fNuZIHrJ04ogADIw6xzspYUTk=)
2: L8plksD-NPq-_MQ3GSh7hE1HygM.crl (hash: wmmCIozGj4I98O4l3f01WTaCBkFUQKLN9ks33rUwG18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:b9:b5:ab:b5:09:c4:31:bc:0b:7f:b2:b9:74:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Validity
Not Before: Apr 28 01:01:22 2025 GMT
Not After : Apr 29 01:01:22 2025 GMT
Subject: CN=aa58a6892f0a68f16f062e6862f1a52da0f295a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:df:56:9f:31:49:53:fa:ec:f9:f0:3a:9b:d6:
c2:f4:e9:c5:81:ba:15:c6:d3:20:48:7c:30:3b:4a:
a0:6d:2b:ce:fd:e5:e6:f6:85:18:a6:26:72:3d:52:
85:35:79:85:28:f4:e8:c7:8e:86:9d:33:05:9d:aa:
f2:7b:3c:65:71:b8:e5:3c:c3:d3:d9:70:3d:a3:b6:
8a:1b:3e:bb:b3:42:3f:34:78:f0:cd:bf:2d:b5:1e:
78:a1:9a:43:4f:ce:25:1e:3c:3c:40:de:d9:47:b7:
ee:6e:05:ab:2a:b5:74:2e:79:14:24:fa:25:8d:fc:
48:b6:7a:cc:26:0b:9b:7d:a7:7f:57:01:a4:f3:2a:
3a:61:8a:3e:ff:8c:64:06:38:1f:bf:4b:56:09:ea:
37:6a:6c:1a:d9:50:f5:c7:64:cd:35:87:68:25:f9:
f6:98:8e:ea:9a:a0:ec:c4:67:ba:a3:72:fa:8b:10:
0c:ff:32:68:ce:52:8e:43:67:eb:e9:37:65:43:19:
27:12:a3:70:e3:52:e9:6f:2f:95:3e:a3:9c:3f:53:
93:ff:d5:32:23:e4:a1:6d:34:27:f5:1a:1b:d8:7c:
e9:0c:2a:bc:5f:97:22:fe:f4:d0:93:9b:45:17:69:
f9:7d:2d:cc:ed:04:6a:a7:ab:35:3a:5f:34:60:eb:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:58:A6:89:2F:0A:68:F1:6F:06:2E:68:62:F1:A5:2D:A0:F2:95:A1
X509v3 Authority Key Identifier:
keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f0:60:03:84:7a:50:e7:5d:d1:50:09:56:4b:28:cd:cd:41:
a6:e8:0a:7c:96:3d:36:44:83:23:c1:f3:1a:43:2d:80:9b:63:
18:bc:7d:25:35:2f:83:ad:f4:71:85:70:85:5e:d3:27:6b:a8:
0a:c9:a9:ec:f3:5c:e7:32:79:0b:56:84:69:20:ce:82:01:f7:
17:1d:2a:6a:48:78:dc:70:15:4c:e0:df:2c:27:10:b5:e1:43:
32:eb:72:e2:5d:86:09:b2:91:12:c0:5f:7d:bc:62:7a:f3:18:
a1:1c:e9:0f:84:ad:47:e8:f1:11:0f:2f:2e:73:28:95:19:e3:
f8:cf:e8:5c:31:77:fc:fa:60:cb:b1:c6:90:77:07:7f:15:de:
96:ea:37:73:e5:27:94:e7:d8:99:99:fe:9a:c5:5c:f1:c4:42:
ba:8e:39:7f:72:40:16:c3:65:57:17:e7:f7:4d:ae:97:22:cf:
6e:13:9d:5e:ed:c7:d2:47:8a:ec:2b:41:6a:e2:03:05:bb:1a:
b5:8c:80:b7:73:ba:11:c9:c3:57:4f:ce:d5:c9:a2:6d:64:f3:
a3:03:e0:01:55:80:11:6c:ed:c3:9e:5d:7d:a0:31:3f:b8:d1:
f4:80:3c:94:ae:04:4b:92:4b:97:e3:ae:37:1b:05:e9:f9:19:
3c:57:6c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:48:09 2025 by rpki-client