Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
File: lXbbt2mVtJUKhsXwfKjbPrSWePY.mft (raw, json)
Hash identifier: AzMfp0E3e8+SeD1BbX37BUiD8SNWBMdSPS7HK44dSEM=
Subject key identifier: A9:F0:F4:60:7E:5D:04:C0:3F:34:75:1B:25:06:E4:A1:B6:97:FD:F4
Authority key identifier: 95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
Certificate issuer: /CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Certificate serial: 019676B13BD478995A9DF90BEEC916587BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
Manifest number: 024F
Signing time: Sun 27 Apr 2025 10:00:48 +0000
Manifest this update: Sun 27 Apr 2025 10:00:48 +0000
Manifest next update: Mon 28 Apr 2025 10:00:48 +0000
Files and hashes: 1: lXbbt2mVtJUKhsXwfKjbPrSWePY.crl (hash: l+VH9dSOzf21PLg3IntZGLEs2ti6Q2Rxw7Kp/CM7kB0=)
2: wOkYAGqpSPBGigfUEv7El852HGA.roa (hash: jGAVgltAX4k1B+fH3k6Z7JMTyuIFNv8n6kIlzZB4Zww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:3b:d4:78:99:5a:9d:f9:0b:ee:c9:16:58:7b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Validity
Not Before: Apr 27 10:00:48 2025 GMT
Not After : Apr 28 10:00:48 2025 GMT
Subject: CN=a9f0f4607e5d04c03f34751b2506e4a1b697fdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:b9:6c:bd:b3:48:9f:55:dd:e5:b6:71:41:
cf:43:98:9f:a3:5d:5b:71:eb:d8:30:ac:7a:13:92:
ad:90:f2:1a:c5:9a:22:bf:e2:4a:cd:36:ba:96:3b:
65:8f:45:7c:50:bb:49:66:d3:16:c5:d6:c7:1a:b9:
79:11:2e:ad:03:16:84:c1:f5:c7:19:06:d8:f1:5d:
57:f8:8a:a7:8d:3d:23:43:57:f6:e1:15:6d:e7:dc:
4f:52:4e:0c:73:e5:a3:4b:04:8f:fc:e9:21:91:63:
b8:9a:71:e5:9e:4b:ba:84:fb:93:14:44:2b:d6:af:
f8:ac:d0:9b:a2:fd:5d:bb:c3:4d:55:32:13:89:7e:
2f:26:9f:bf:58:cd:c4:17:22:58:c3:a7:71:0f:07:
4e:f9:ab:18:36:5c:28:0b:5e:6e:df:92:07:dd:64:
9a:5d:a1:6e:29:53:33:c2:a3:3b:91:18:c7:4a:75:
98:0f:32:7f:8a:34:0f:5c:db:c0:f0:22:fd:a9:b2:
13:24:4a:6c:ae:15:a1:88:9f:d0:4c:5d:5e:99:e3:
e6:3e:bb:7e:a0:8c:43:b4:90:d9:d8:0e:6e:a1:f1:
b8:38:50:1d:cf:9d:4e:4c:d3:f3:6e:32:45:e3:b2:
b2:cf:a4:71:3f:16:07:a8:f1:25:5e:8c:ca:e2:bd:
1a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F0:F4:60:7E:5D:04:C0:3F:34:75:1B:25:06:E4:A1:B6:97:FD:F4
X509v3 Authority Key Identifier:
keyid:95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:29:78:d2:af:52:2d:e7:17:d8:80:de:8f:3c:d8:20:fc:08:
65:e5:19:be:e2:a7:ed:0f:3c:f5:e3:2b:02:83:75:44:48:bb:
d0:1f:9a:c1:0e:ff:3f:b9:68:d5:46:6a:ec:84:49:59:8a:43:
9f:7f:91:35:57:e9:1b:d4:b3:f9:cf:11:d1:bd:3e:45:ba:77:
02:7f:73:20:ce:95:19:86:2e:08:4f:09:da:c8:30:df:35:44:
68:9a:02:3f:ec:28:7f:16:d0:3c:01:1c:90:9b:5c:f9:35:a9:
d4:16:a9:b6:62:d1:66:45:8c:59:fe:e8:fd:bd:6d:2b:76:2c:
64:5e:ab:0e:03:2a:90:93:f1:af:70:ff:b9:46:6f:f8:db:ad:
75:c1:23:f5:56:6c:6d:fa:7d:00:d0:16:3e:be:b3:5b:43:92:
f1:cf:1b:55:92:23:7e:07:54:89:cf:69:de:81:14:a2:75:5f:
b4:9f:06:40:7a:d9:06:e7:ad:5d:44:80:b1:17:ff:86:0f:ff:
9b:b0:77:a0:5d:18:67:86:01:e6:82:7d:66:79:86:61:02:79:
5c:85:db:dd:0c:ab:7f:a8:1d:94:cc:2e:de:3b:a1:13:02:39:
ce:b5:af:e3:01:09:5d:72:37:45:6a:bc:f9:00:6e:74:46:1f:
43:12:3d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:39:21 2025 by rpki-client