Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
File: legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json)
Hash identifier: HRJjCdEZD8fPVF+zV6v11Ch7pY5vukqleBta8sVmLQw=
Subject key identifier: 06:33:E1:66:0C:87:D0:A4:E9:0F:1B:D4:A4:BE:6D:B7:C2:0D:C2:0C
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Certificate issuer: /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial: 019689253590F5E65E048E569470E3E5587E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
Manifest number: 107B
Signing time: Thu 01 May 2025 00:00:39 +0000
Manifest this update: Thu 01 May 2025 00:00:39 +0000
Manifest next update: Fri 02 May 2025 00:00:39 +0000
Files and hashes: 1: WYTqj2Ru4b6Ds31lFp0qL0GBiG0.roa (hash: TiMpifh1/6heVxOwrxdYBK/lz/TeczLDX2jTHHgJqNw=)
2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: mWmgjaCQsFcZHXYE5B4wocxeBXo/l00NTIfxXNQjVYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:25:35:90:f5:e6:5e:04:8e:56:94:70:e3:e5:58:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Validity
Not Before: May 1 00:00:39 2025 GMT
Not After : May 2 00:00:39 2025 GMT
Subject: CN=0633e1660c87d0a4e90f1bd4a4be6db7c20dc20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0c:8c:8d:39:62:a3:6e:60:72:96:8b:23:64:
ca:a0:2f:d8:41:2a:50:c4:d1:91:63:f2:65:da:4e:
cb:50:08:22:cc:e5:f0:ff:b1:69:d0:8c:1d:47:83:
68:9e:30:3e:df:86:ee:0b:01:b5:a1:a4:95:0c:d2:
69:2e:fb:99:ac:02:9f:fe:05:ea:2f:4e:89:d1:b9:
ea:12:e0:eb:d9:d6:d7:65:a7:9a:ae:01:20:3c:9b:
b7:1c:9c:d9:a6:b6:8c:7a:65:f9:f4:b9:b5:c0:6f:
61:43:de:38:9f:00:c0:57:f8:9b:e6:1c:e0:75:87:
b1:de:bf:13:33:32:b8:12:2d:2a:00:ca:41:9d:fa:
30:d0:55:d0:92:f3:ad:be:e1:7b:17:d3:66:24:e8:
3f:31:8e:f7:a5:a9:64:d0:5c:10:8e:70:2e:1e:ba:
a7:a3:bb:ca:48:57:98:56:24:c0:fb:35:5c:98:23:
c8:63:2a:c1:4a:17:c7:51:ee:4b:94:43:d4:8a:8f:
92:89:21:56:fb:3c:1c:1b:6c:bf:8a:72:77:0f:e0:
1a:70:7e:08:86:ee:b8:c9:99:b1:e4:70:ba:45:c9:
44:78:7a:cc:72:1e:74:4d:75:d3:a0:23:23:77:9b:
67:d4:82:94:4e:f2:00:d6:ed:de:90:5d:21:36:a7:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:33:E1:66:0C:87:D0:A4:E9:0F:1B:D4:A4:BE:6D:B7:C2:0D:C2:0C
X509v3 Authority Key Identifier:
keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4c:89:a2:7d:ee:45:04:66:63:33:ea:7f:c0:9c:13:02:e6:
da:70:a5:e1:4d:0a:3a:93:b2:b9:02:32:bf:76:03:36:ec:00:
21:79:4d:9b:c2:69:87:e3:bf:3b:a7:63:d5:30:c2:2f:96:df:
2d:3c:07:62:48:00:7d:66:a4:db:8d:9d:c4:99:89:2f:3d:66:
e0:19:e5:84:69:05:e3:cb:54:55:41:40:9f:5f:92:7a:db:97:
a8:26:41:ad:27:ae:37:55:00:15:96:4b:e9:a6:95:ef:e4:0b:
c2:08:d9:d5:2c:e3:cd:5b:42:8a:32:1f:b8:97:f9:57:29:eb:
f4:67:1f:b4:46:c2:45:ac:b3:c9:5e:e0:7a:61:c0:f8:ec:7b:
a4:4d:60:ac:76:b5:b7:2e:70:ee:4b:35:f4:3a:57:30:38:cb:
02:28:3b:09:e3:77:ad:c7:f1:c0:e1:fe:53:cc:b6:2e:cd:21:
aa:a5:8d:b4:d5:5d:85:32:a1:8f:8f:fa:6a:90:27:e9:b3:a2:
3d:7d:11:28:68:31:2f:17:7b:14:fd:be:06:17:12:47:0a:e4:
10:f3:4c:b3:53:ff:80:0e:44:7a:8e:23:52:e1:d3:9b:9a:b0:
46:e5:33:d9:4b:25:95:35:c4:ca:72:78:b8:16:0c:6c:a2:6d:
57:7f:f0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:07:00 2025 by rpki-client