Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json)
Hash identifier: 9adu7JlYmd2vWXWXq4NuqvHaBSSCtQ4/VD6h4DcalQQ=
Subject key identifier: 4A:6D:C3:E3:32:09:9D:22:85:02:59:E5:3E:FB:19:B1:9F:E0:CF:EF
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 019675678AAEAF96DC8B40752FF9132860D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 04:00:41 +0000
Manifest this update: Sun 27 Apr 2025 04:00:41 +0000
Manifest next update: Mon 28 Apr 2025 04:00:41 +0000
Files and hashes: 1: OGPVBoRE-lHq_3um0W6LRa7Uil4.roa (hash: dK0nHno7O0jV6OHBq7qhW3Foh08a8amSBMLlT7zl2oQ=)
2: knkWf-fbjTf4zgzKy1AppaZPT08.roa (hash: S3oeOh+AmL3z+HK7s4l2LyCpUlSMrkxr1YSTJohxRRI=)
3: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: p5EZCPI9njM6rBIm2B4LwZ+tABE/+TJrkl5FXGEv+FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:8a:ae:af:96:dc:8b:40:75:2f:f9:13:28:60:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Apr 27 04:00:41 2025 GMT
Not After : Apr 28 04:00:41 2025 GMT
Subject: CN=4a6dc3e332099d22850259e53efb19b19fe0cfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:32:54:8a:bc:38:73:40:2a:87:7c:93:e1:
69:f9:5d:45:ae:8f:50:a3:74:bd:7e:fc:7b:a9:03:
f8:75:4d:a8:72:61:29:5b:69:16:ce:91:eb:cf:70:
69:df:2f:8c:f3:03:eb:ff:e9:94:03:a4:1c:72:78:
a4:ee:95:0e:9f:69:d7:09:29:31:ab:87:bf:48:3b:
59:a2:50:1e:60:ea:5a:aa:08:8e:8d:3c:d8:03:f7:
7a:e2:c0:5d:ac:af:a6:e5:f7:57:4a:65:63:f9:57:
31:de:2b:9b:38:ef:0e:74:e9:ca:52:df:a8:00:af:
1c:54:af:0c:7c:9b:83:1d:9f:b4:de:1f:8e:03:d6:
ad:40:f0:12:57:4f:3b:14:5b:4c:fa:9a:9b:70:3d:
81:7f:d6:12:d3:05:91:bf:b1:ff:14:66:d5:10:0b:
ce:23:5a:5b:22:58:f9:a0:8f:5a:e7:95:7b:d6:b9:
83:12:86:7e:bc:b6:37:d5:8b:34:d6:7c:19:3d:e8:
a1:06:5b:0c:fc:ae:f6:27:f5:29:01:2e:0b:9a:fe:
70:d0:58:18:d6:f9:f5:2a:a3:1f:01:74:1c:36:95:
07:de:36:c2:6f:66:66:f1:e3:ad:35:6a:7f:2b:55:
d5:d1:4b:55:f0:72:33:62:7a:dd:ac:fa:4b:ab:1d:
75:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6D:C3:E3:32:09:9D:22:85:02:59:E5:3E:FB:19:B1:9F:E0:CF:EF
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:74:ad:9c:8f:e0:72:b2:1b:84:d1:bf:6b:be:ec:22:99:d7:
ae:8e:07:60:29:27:64:1f:dd:61:0f:53:0b:a3:a1:7d:1d:f4:
4a:b0:fe:d4:41:c8:14:16:d7:a6:ef:61:28:b1:cd:d5:ba:ce:
20:b1:85:35:3e:4f:cc:f4:04:0b:f6:2e:90:aa:a3:6b:24:ea:
99:51:ba:b5:20:01:03:52:1f:92:ac:d5:fa:a9:57:7e:fa:e8:
47:14:90:41:37:1f:7b:53:49:0f:e7:17:b8:35:a3:96:85:26:
98:a7:b4:83:b2:68:34:1f:db:5c:4f:e5:92:c5:e5:e1:1a:0b:
e0:44:27:9e:c5:63:fa:a7:6f:6e:0d:95:c9:b2:1e:df:df:4c:
9e:99:56:9a:19:c6:bb:70:f3:6f:66:da:24:1a:a2:30:15:78:
c5:59:9f:94:60:d6:91:e4:44:54:f2:e6:1e:31:c2:fe:a0:ef:
9f:b8:75:f1:ad:7d:e4:bc:11:91:c2:38:75:10:00:f8:f1:c8:
ef:ee:95:3d:ce:93:e9:87:17:89:69:3d:8e:25:da:b1:68:e7:
b9:ec:c4:d4:98:10:bf:c2:69:cb:f4:79:83:e9:45:21:ab:f4:
ec:45:3a:f2:a5:7e:5d:0e:f5:f5:c4:78:aa:a8:55:0c:c0:b7:
79:11:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:17:37 2025 by rpki-client