Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: 9UvDfOsiKCRY2O4BLsHb02NO5SNnlegaUTzlm4bNHtE=
Subject key identifier: D3:9F:0E:B6:66:B1:18:48:DC:EB:F5:83:F2:34:5F:32:EF:39:FE:FD
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 01967DC5DE866D1E3A8A97017D1722320579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 12F1
Signing time: Mon 28 Apr 2025 19:00:41 +0000
Manifest this update: Mon 28 Apr 2025 19:00:41 +0000
Manifest next update: Tue 29 Apr 2025 19:00:41 +0000
Files and hashes: 1: 79fBoxetqM8W78-kGmHTvjPW7Uw.roa (hash: pMW1Mp2B+qXHZp51RoJRa8NJEQ1rG2VsgYraYBKPRXE=)
2: 8J0Lc2AsJQgnkJG9_qri1EHFctE.roa (hash: C4HlyCH6kbwI3fK9kG+XOoCsicg+/qe888AdIQka/S0=)
3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: 1NjKiuh0YBE9Qk6EaTT2jPZKLTa/CwUaExLd6fsustw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:de:86:6d:1e:3a:8a:97:01:7d:17:22:32:05:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Apr 28 19:00:41 2025 GMT
Not After : Apr 29 19:00:41 2025 GMT
Subject: CN=d39f0eb666b11848dcebf583f2345f32ef39fefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:5b:01:87:ad:7e:b1:90:10:80:0d:a3:37:
12:0b:85:a4:84:1e:61:16:33:47:0c:75:ff:ea:cb:
b9:4f:24:1f:c3:fa:71:b4:6c:81:48:d1:8d:aa:bb:
9c:c6:c7:b8:42:1b:ed:76:17:4c:82:20:9c:d8:4a:
49:a8:b8:c6:e3:22:fe:4e:99:93:9d:35:8f:02:d0:
bc:f7:d7:be:90:06:30:4b:3a:02:6f:3e:80:b4:d4:
b0:9d:33:0b:b3:00:fb:b2:3a:ee:49:d7:db:68:36:
8c:eb:61:26:7f:3e:cf:56:c9:c4:ca:70:4f:c1:29:
7f:0f:f0:1e:41:b9:c3:87:d1:4a:b9:d0:11:88:84:
7c:4a:b2:56:af:ab:b1:91:52:03:04:fa:fa:e2:78:
56:31:f7:94:db:60:1f:94:86:27:a7:52:53:04:a2:
d1:e4:41:3e:d5:ba:58:15:90:ed:19:02:78:8a:87:
38:0e:e7:f4:82:c6:c3:1d:ca:1f:4f:f9:97:66:dc:
79:d4:07:77:b4:17:52:00:e8:04:1c:81:6d:a3:b5:
27:5c:95:ef:1c:97:66:66:93:45:a6:54:7e:88:61:
d4:1d:19:f2:9f:ab:1b:06:3e:89:87:a9:cb:92:88:
4c:05:d3:27:da:11:ad:28:9f:78:ee:55:c3:ea:10:
4a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9F:0E:B6:66:B1:18:48:DC:EB:F5:83:F2:34:5F:32:EF:39:FE:FD
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d2:c5:a3:43:36:36:4b:5d:43:0c:06:31:41:67:6e:22:f6:
43:91:7d:ee:08:ce:9a:21:e4:42:b2:e0:c9:47:2c:df:d5:ea:
bd:7e:62:91:45:4c:16:35:8c:22:5b:bd:7d:c0:e2:2a:8d:28:
45:e6:c2:98:e5:e3:22:91:a9:b8:77:e2:d2:62:75:ac:42:55:
0d:cb:4b:0a:5e:1b:b6:84:40:1a:9b:4e:2b:60:92:85:90:f7:
d2:50:00:6a:13:cd:8f:16:87:d5:ea:3b:73:10:66:7b:ae:5b:
8f:f2:cf:0a:45:bc:19:85:7f:7f:30:3d:de:3b:2e:77:34:fb:
1b:7f:66:5e:54:8e:10:84:cf:95:59:da:9e:5d:30:bd:3f:4f:
cd:11:d5:96:3b:f6:36:a5:17:53:82:95:37:86:e2:b9:cd:15:
c4:01:57:2d:a5:3a:47:ed:f3:f0:88:18:bf:0c:c7:9b:8a:cb:
97:f1:65:3c:c3:ee:b2:90:c0:7a:3a:1d:e4:68:ce:ce:7a:4c:
b1:dc:9e:bd:3c:06:ab:d3:5f:67:77:db:b7:74:d1:a4:9f:47:
28:90:96:f5:54:6a:23:f6:9c:f9:c7:70:6b:d1:e1:d6:97:9b:
eb:2a:48:31:df:7d:ff:a5:62:8e:68:10:44:bf:f4:02:90:25:
ac:76:49:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:17:00 2025 by rpki-client