Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
File: laWt9q8fzAVwrfhY_Vv74oeRoYY.mft (raw, json)
Hash identifier: dT1Uc8PNpIg9Q4n8oe1PAw9jJGBMpx17LqHhSnouMPM=
Subject key identifier: 84:9C:FA:38:33:E1:4A:BF:F3:B7:1B:0A:1D:FC:0F:16:41:9F:67:02
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial: 019673E6B83CBFD718E9A2196145930B3FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
Manifest number: 0FBD
Signing time: Sat 26 Apr 2025 21:00:22 +0000
Manifest this update: Sat 26 Apr 2025 21:00:22 +0000
Manifest next update: Sun 27 Apr 2025 21:00:22 +0000
Files and hashes: 1: 8PVKdp7jBdhmskcbZzZ5u7sq85c.roa (hash: XnxGpZ/fINBa34w0yMKfzpg9ucbY/sXeEDSMiSeEKsQ=)
2: LSUjY22nbXmiCbKYSvjkpLOlwJ0.roa (hash: 2B/DnJQQcDMoJmbD3yPRvJKI69sYoXHy9Xbk2/LXV1M=)
3: LfyCocTCxKL8V3zHoX1xFiZMk8Q.roa (hash: V9KPs5yiTRXqdL9lcAPgAPfn6nhC2WxPwKEIJHJAwEE=)
4: fyoGinJNnbCXVA-FGTyI6g0iqfg.roa (hash: Qmtjez3xLzGPUsipebbDVEIAH1OV1oGj/8BaZ2trCyc=)
5: laWt9q8fzAVwrfhY_Vv74oeRoYY.crl (hash: VwJYBZed81SI773gdGk3f3jKXomPZRPRU+HPeL7eic8=)
6: w5AAaFloCKYaEQzBxuGEgwR95Zs.roa (hash: By9YcFbFu2q4K1YFFKZKWijRod5KlV5ghhACJNC0MvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:b8:3c:bf:d7:18:e9:a2:19:61:45:93:0b:3f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Validity
Not Before: Apr 26 21:00:22 2025 GMT
Not After : Apr 27 21:00:22 2025 GMT
Subject: CN=849cfa3833e14abff3b71b0a1dfc0f16419f6702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:11:2f:86:50:56:4a:8c:6e:e9:b2:af:d8:19:
4b:7f:16:66:6a:55:86:43:a0:aa:5c:ae:fa:ac:dd:
fb:4c:f8:51:c0:a6:cb:b6:d9:f7:95:17:6e:d2:b5:
85:b6:aa:7b:84:5b:19:77:8c:9a:42:c1:bc:ef:35:
a8:19:b7:6a:b3:80:31:ba:05:bb:be:c6:bd:5a:ef:
57:a4:cf:ac:c5:9f:29:e1:cf:bc:ca:fc:cf:df:95:
c4:30:de:74:83:8e:3b:f5:40:12:13:43:ee:5a:07:
09:11:f2:59:1e:05:33:03:94:d6:ee:d5:00:36:0e:
2f:a3:98:d4:b7:dc:5e:2e:ae:43:9e:e6:2d:75:81:
a7:fb:2b:77:ec:bd:de:ea:e9:0f:fd:89:8a:23:a8:
8f:90:1e:6e:66:f8:a3:da:e2:81:a9:7e:66:4f:de:
c9:7d:e2:2a:9c:49:88:67:11:b3:84:b6:75:0b:c0:
36:f7:d2:96:86:53:60:6c:e3:d1:99:cb:0e:e0:6e:
7c:e6:9b:e7:7c:ca:a7:85:00:70:71:2e:11:b5:3b:
94:68:06:99:c2:61:a9:a2:ba:42:7a:d2:fa:de:75:
22:9a:d1:80:16:3d:37:fc:88:ef:ab:3e:f0:d1:90:
7f:12:57:00:3d:d9:c0:a9:19:da:e5:e2:d6:3d:32:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9C:FA:38:33:E1:4A:BF:F3:B7:1B:0A:1D:FC:0F:16:41:9F:67:02
X509v3 Authority Key Identifier:
keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1b:14:80:78:7a:90:48:96:81:fe:7d:96:4c:aa:7b:9f:f1:
1a:9a:87:8c:a9:e7:02:7f:66:30:8f:c4:c8:0f:10:c9:bb:56:
31:95:e3:de:f1:17:ff:31:66:de:27:7a:4a:4c:05:41:79:53:
2f:8d:87:a1:84:c5:c1:94:e3:1a:27:ae:e9:e6:61:58:fe:00:
05:4d:2b:36:a5:60:60:a1:66:f7:9d:1c:e8:6b:bf:02:76:8d:
1e:ee:0f:6d:de:7c:80:ae:74:1b:6f:99:44:91:39:82:70:3d:
b9:9e:57:ce:fb:04:ec:0b:29:87:cc:e4:69:20:ab:01:ee:b6:
b3:77:12:47:af:cf:ae:60:c2:4e:60:c6:d0:1a:3c:11:dc:86:
dc:e6:75:e2:5a:9d:1b:3a:a6:6a:8b:1c:09:b8:ec:17:84:69:
c6:07:5c:9b:9b:1e:81:b6:b2:42:34:43:b3:af:d3:51:48:2a:
e2:5f:88:9e:5d:30:1b:50:5e:71:a9:d4:01:ff:b1:de:3e:09:
c9:72:88:47:81:32:66:7f:f6:97:52:90:ba:96:20:bc:ec:26:
ca:ff:98:f3:17:5b:f6:c5:63:9d:5e:e0:39:e7:08:b8:47:eb:
92:b0:82:2e:f5:00:aa:b2:77:fa:ca:b9:e4:b2:fa:19:f1:a2:
9f:a5:f1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:30:42 2025 by rpki-client