Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier: FCrW7kexm8JZ7kOheErttIpZBN09P8FgYKDZvwe1cLU=
Subject key identifier: A3:CB:A7:C4:D5:A1:1B:60:FA:EB:AA:C3:10:DA:99:3D:AA:96:A8:AE
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 019673E6FCD2341DF92A5ECFC8EE097FFAED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number: 131E
Signing time: Sat 26 Apr 2025 21:00:39 +0000
Manifest this update: Sat 26 Apr 2025 21:00:39 +0000
Manifest next update: Sun 27 Apr 2025 21:00:39 +0000
Files and hashes: 1: 48AsG-LjGtdTKSRHyXXwuNMjcms.roa (hash: Jom94X0Y2GD2G7Zghq086XBn+Rajbf0i7he27dJdYgU=)
2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: AcrzsTahnFrsaDF/HJrS/zvr9XLVQwgJljRPj0t3fhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:fc:d2:34:1d:f9:2a:5e:cf:c8:ee:09:7f:fa:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: Apr 26 21:00:39 2025 GMT
Not After : Apr 27 21:00:39 2025 GMT
Subject: CN=a3cba7c4d5a11b60faebaac310da993daa96a8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:05:96:03:66:d1:e6:41:f7:3e:fe:5f:ea:84:
76:fc:83:67:82:80:f6:3e:58:7c:f1:75:76:eb:95:
98:e6:3a:9c:ed:71:c4:db:ce:9a:ba:b2:4c:c2:ba:
e8:2b:f9:a3:fe:3e:05:ce:9e:fe:8f:1a:8d:81:b1:
e9:b0:86:cf:2a:65:37:9d:76:82:13:ed:40:4d:1d:
33:51:78:c1:17:e6:42:83:49:23:e7:ca:b5:38:ec:
91:1e:ce:58:88:90:2b:d6:c0:7a:6d:99:6d:2d:ba:
dd:f7:2f:c8:2e:00:b1:da:73:e3:4a:a4:cd:78:03:
9a:87:78:c4:d4:a7:3d:b9:37:10:5f:a3:52:92:14:
d5:1b:f0:01:aa:aa:12:35:24:c2:a2:5e:4f:18:3f:
90:c9:f1:89:ce:97:1a:8a:0c:a3:3b:15:69:30:8a:
66:bb:e7:b6:f4:98:87:81:b6:22:a7:6c:01:80:bd:
1f:53:8e:72:34:8a:18:21:1a:22:72:c5:67:23:31:
d6:5c:f1:70:2b:e0:4c:b2:6c:5f:c5:20:92:86:47:
6b:2b:23:08:8f:12:ed:46:00:d4:b9:72:71:f9:05:
e2:d8:c1:6c:e9:8d:7f:6b:5a:38:c9:40:4c:44:10:
8b:4b:6e:9c:04:cd:c6:1d:65:57:67:36:bb:c6:00:
2f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CB:A7:C4:D5:A1:1B:60:FA:EB:AA:C3:10:DA:99:3D:AA:96:A8:AE
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:56:0e:2b:48:8e:6d:78:73:74:73:df:73:ef:87:07:02:f8:
5e:d1:5e:0c:90:ef:fc:95:b4:10:be:3c:03:2a:92:25:a2:81:
d4:27:f6:1e:b0:ee:d3:47:10:84:ea:e4:72:46:ab:68:0a:d2:
21:6d:ad:70:05:50:09:75:a6:03:6f:14:c7:c6:43:10:6a:d7:
9d:44:47:2a:f6:d0:dd:75:21:97:ab:6b:16:c0:75:0d:ae:83:
91:4b:a1:ae:47:91:29:50:ac:3d:94:cf:c0:dd:1d:fb:48:19:
e0:7f:3d:32:4b:35:1e:fe:94:fb:a4:91:31:be:b8:ae:d8:cc:
bd:02:e9:fa:33:b9:4b:ae:27:0f:de:d3:74:36:57:cb:fe:19:
98:ac:0f:a2:69:12:f3:7a:25:27:d8:a9:03:ab:22:41:ba:bc:
83:10:89:26:84:5d:69:2e:40:b5:59:14:83:7a:9c:19:ad:a7:
10:9f:25:a1:bc:2b:a1:8b:9b:82:25:6c:2d:43:1b:fa:66:72:
62:57:a9:b5:75:46:1d:ca:4f:9f:bd:a0:02:47:03:26:77:e2:
4b:55:8e:b7:58:48:29:37:1c:f4:c4:82:7e:eb:bb:fc:e1:af:
f1:09:08:54:30:20:47:f9:4e:3f:86:b7:1e:58:c9:58:c2:19:
37:e7:ab:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:32:47 2025 by rpki-client