Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
File: lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json)
Hash identifier: CvDbtyCkNp9NIQkr2koW2vpAIqSfAIsfKMayownaX/Y=
Subject key identifier: F4:58:A4:C9:41:89:6C:32:1F:C3:54:48:65:AA:03:CB:BA:D0:E4:67
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 01967C45ABE099868129C00823469EE6BAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
Manifest number: 151F
Signing time: Mon 28 Apr 2025 12:01:02 +0000
Manifest this update: Mon 28 Apr 2025 12:01:02 +0000
Manifest next update: Tue 29 Apr 2025 12:01:02 +0000
Files and hashes: 1: 1-wnHFiYjnB24GxLV0meyzqsLFuM.roa (hash: LOVK3lUPwn84ZhS3ik+53n7gRvihYYPhPwXZjIMuf0A=)
2: WkUeJeS2VIWyHMQB6OP6WxpRtuE.roa (hash: moR9C1uw6Uz7LXM37ENpKv40O3dD16LP7ICWKr7IDI0=)
3: Z0VohfzyIiLuyi-Hcs3EfPggoAs.roa (hash: dePmJdyQAMKfk9z1bRk5VV+9WiuJD5hNdYIl1QjUe2w=)
4: _9QXHDXD2W0fy8-Ix1_61oUgOdw.roa (hash: PBxel1cKi46iaG0YRLkS2zvm3xWWCreZ2nu/52SigQM=)
5: djxHGgUqKdNcqVM8z_uuH6OIUlc.roa (hash: wgIdr0CUuczPiiAnFOZrV9fosozOElD12J6XrjtfSGs=)
6: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: lxBr5JQyKXvS1PZ+aZ25SV0n09X7OskMqiFxrsfv/Lc=)
7: vgcjTeJgjqzs04Lo8DPrBtZnGbs.roa (hash: iV57rW45EBrtatSEbslptILthc80jn2LQS91fPeJvUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:ab:e0:99:86:81:29:c0:08:23:46:9e:e6:ba:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Apr 28 12:01:02 2025 GMT
Not After : Apr 29 12:01:02 2025 GMT
Subject: CN=f458a4c941896c321fc3544865aa03cbbad0e467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:eb:6a:2f:c0:0b:da:ca:1b:33:80:81:c8:
20:ac:a0:a1:fb:2f:5c:68:00:6e:b9:59:b3:e4:a7:
06:0b:c4:e7:d4:66:da:6a:62:6a:9d:59:57:57:2f:
5e:af:f1:b4:98:07:a7:d2:19:ca:a4:e8:ec:2e:54:
6a:f0:20:37:38:d1:de:76:08:55:fa:7a:de:e4:9f:
dc:75:99:88:50:a8:5b:bd:73:34:88:1c:f2:cc:68:
34:6f:3c:31:af:5d:39:31:a8:a3:99:0e:bd:bc:dd:
2e:9b:2a:de:29:16:a3:87:f6:b9:e5:6a:bc:ff:d5:
4d:2c:92:24:a2:2c:9a:58:36:61:d2:12:d1:33:ae:
fb:1d:c6:84:34:53:42:25:b8:b6:a6:7c:8b:2d:ed:
9f:d6:58:be:2e:db:0c:3f:e2:1b:4b:57:c8:08:95:
2c:7b:9d:19:f7:c4:98:9f:2b:d1:5b:43:73:ee:0a:
71:59:f6:7c:24:e3:53:8f:14:48:b5:61:07:b3:0d:
cd:b1:d3:8b:fe:21:f0:08:d0:05:0f:82:f7:a9:d1:
24:c3:02:f3:5d:d1:d3:58:36:0c:63:3b:9c:2a:1d:
bb:de:84:be:78:79:dc:8a:58:16:2e:e3:1e:4c:51:
15:0e:d4:54:4e:81:7b:48:7d:d2:03:2d:1a:ba:2c:
b8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:58:A4:C9:41:89:6C:32:1F:C3:54:48:65:AA:03:CB:BA:D0:E4:67
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:29:23:bc:99:03:d8:66:2e:3b:46:83:ca:f3:da:90:18:c5:
20:b1:2c:b3:0f:6f:db:9d:f7:1c:0d:88:9e:e7:d9:14:9b:9e:
be:6e:92:04:fa:94:21:52:7e:57:ef:ac:7f:7c:ce:8d:88:26:
48:2b:8b:09:19:20:12:17:3d:e6:aa:ed:d5:01:31:2c:bd:b7:
c2:e2:8a:0f:3a:44:b7:06:e4:57:d2:be:cc:62:6b:72:4d:a3:
f4:98:1c:91:1d:bc:a0:5d:7b:4c:2f:21:f4:2b:a7:77:6a:ec:
27:7d:1c:c0:3a:a3:8a:ae:60:33:80:41:90:20:56:51:1a:90:
f7:fe:22:c5:5e:d8:75:ae:67:65:b9:5f:d9:5c:6c:bf:b1:1d:
39:8a:a2:5c:8d:9a:25:9a:23:0e:9c:2c:93:de:0d:0d:c3:98:
9a:ef:b4:c9:ed:58:94:7c:8b:f9:1d:93:55:e5:f6:81:6e:a5:
dd:8c:75:bb:cf:76:b2:e0:02:91:5c:09:50:38:6a:b4:7d:13:
fb:16:07:f6:2d:b2:d0:e2:51:ec:c5:2e:7b:36:a0:9a:9e:d0:
ce:51:36:b4:09:8d:27:ec:23:98:67:13:2a:15:f0:cb:ca:8e:
af:ae:e6:08:ce:40:45:56:5f:0b:13:de:af:25:5a:ec:23:98:
99:fc:cb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:27:03 2025 by rpki-client