Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
File: l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft (raw, json)
Hash identifier: vwX6U9SGecbPHOYY0pexZ5HMfkrq0e2Ng8uiypihGVE=
Subject key identifier: 83:CF:64:FA:9C:66:6C:EC:85:B6:97:E7:F6:6A:DA:29:5C:38:D9:D9
Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
Certificate issuer: /CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Certificate serial: 0196790CEDE29BCF63451253E9AB302D116E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
Manifest number: 079E
Signing time: Sun 27 Apr 2025 21:00:12 +0000
Manifest this update: Sun 27 Apr 2025 21:00:12 +0000
Manifest next update: Mon 28 Apr 2025 21:00:12 +0000
Files and hashes: 1: Dlst4zdGN0XEjaRKAVG2aUW3Zys.roa (hash: JUWMAM2lZQg8cUdPcrThF2mh7HbwsAT1N8ME9RsjW/U=)
2: l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl (hash: uGZwsQUwD0g03OmjmHisrhY8rqGHIZFmtkE3QYea0vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0c:ed:e2:9b:cf:63:45:12:53:e9:ab:30:2d:11:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Validity
Not Before: Apr 27 21:00:12 2025 GMT
Not After : Apr 28 21:00:12 2025 GMT
Subject: CN=83cf64fa9c666cec85b697e7f66ada295c38d9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:37:ed:b6:53:99:a5:99:23:00:c2:4f:cb:64:
3f:27:8d:b5:8a:b7:62:9e:72:9a:8b:e6:56:f2:f9:
9d:69:4c:0d:35:2c:36:ce:d3:42:4d:6e:fa:28:52:
ff:bb:79:0e:a6:56:a8:97:d2:6a:c6:a3:96:a5:ab:
56:3c:35:ec:8e:c7:c6:fa:16:95:d4:17:23:97:90:
b0:40:d0:da:83:e3:ed:29:5b:96:b9:e5:60:83:50:
25:ee:26:6c:da:e8:ee:20:fc:b2:7a:d3:37:f1:5c:
d4:89:75:cf:13:1c:c9:48:0f:1f:3a:2e:9b:8e:60:
04:c2:eb:4c:76:90:84:aa:1f:8c:58:e0:4c:82:db:
a3:1f:ee:46:a0:95:13:fa:a4:a1:0c:62:87:70:d9:
14:ef:a3:d7:b1:f2:82:15:2b:e4:a9:19:05:0d:63:
73:86:34:d4:99:51:3b:f5:a8:23:7e:61:8e:4d:42:
cc:fa:b4:63:73:f9:19:21:d1:a7:10:ac:18:cd:a5:
84:01:c3:ec:78:19:5f:9b:bd:b4:74:3f:99:09:f4:
dc:b5:fb:79:ef:b3:17:50:75:9c:ae:5b:a3:42:e6:
94:73:71:14:4c:ac:08:8d:fe:f4:f5:fd:c2:db:c2:
e9:51:58:cf:f9:82:6e:4c:10:41:91:80:bd:11:f4:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CF:64:FA:9C:66:6C:EC:85:B6:97:E7:F6:6A:DA:29:5C:38:D9:D9
X509v3 Authority Key Identifier:
keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:16:0b:ab:50:e4:cf:0c:f2:2d:be:ee:af:3f:08:2b:11:d0:
9f:bf:17:b5:58:ad:47:6e:3d:3c:0a:9f:b6:1a:05:9e:b1:a3:
9d:09:3c:09:8d:a0:fc:65:fa:72:e8:17:2b:8b:f4:dc:25:15:
14:b5:5f:c8:76:66:67:ea:82:1d:61:ca:ea:13:36:30:63:ea:
92:24:b2:f6:91:70:7a:06:46:03:2c:fe:67:69:bc:7a:86:45:
5a:80:5e:62:77:7e:28:e2:94:38:11:fe:6a:9d:7a:a7:46:4c:
fc:7f:44:07:21:91:5b:dd:f9:3b:6f:20:80:77:3f:69:ab:cb:
e1:b8:e8:75:06:dc:25:1e:9b:b8:74:8c:67:b7:d9:d9:77:f6:
90:c7:13:48:bd:91:2f:c1:98:15:63:20:32:57:3c:26:89:16:
22:7b:5f:3f:e9:e7:34:20:06:50:2f:5d:9e:e3:39:01:60:a5:
ae:b5:d0:b4:f1:15:a9:09:d4:09:1a:8b:9e:13:1f:b5:e7:72:
cb:0c:c6:1c:95:f0:7d:c4:b7:1b:71:bf:5a:65:72:0f:8e:5d:
6b:06:f1:4e:68:f8:1e:86:75:30:e0:5a:01:98:78:f1:9d:46:
22:96:2b:bb:1e:2f:ff:3e:7c:e5:c5:9c:ef:bf:5a:dc:fa:ca:
8e:60:29:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:55:51 2025 by rpki-client