Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
File: l2umIpxFnXaV01KbEgfiwpsIQrE.mft (raw, json)
Hash identifier: ITjU/u3CCY9a+jhZ26+N6xDXWDPWkilai+ml432d1Vw=
Subject key identifier: 23:C2:F4:36:4E:C2:ED:1B:20:6B:C4:5E:D4:25:8C:A5:28:F9:1E:D8
Authority key identifier: 97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
Certificate issuer: /CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Certificate serial: 019679EA0635E29D3A9098CF7F342E1A7BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 01:01:42 +0000
Manifest this update: Mon 28 Apr 2025 01:01:42 +0000
Manifest next update: Tue 29 Apr 2025 01:01:42 +0000
Files and hashes: 1: 8i_tvPtWf70i2EmSEMpvUHFIlh0.roa (hash: 5i+xKeAIrkPv9y5KV9LM5WC3PSC5H7SyU1nhMQB9nho=)
2: l2umIpxFnXaV01KbEgfiwpsIQrE.crl (hash: v7QKS+Fq78S+KrBwacL5Nqh4PJby6Wfbx8WEUwgQ51E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:ea:06:35:e2:9d:3a:90:98:cf:7f:34:2e:1a:7b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Validity
Not Before: Apr 28 01:01:42 2025 GMT
Not After : Apr 29 01:01:42 2025 GMT
Subject: CN=23c2f4364ec2ed1b206bc45ed4258ca528f91ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:ab:1c:63:01:3d:80:5c:21:c9:85:d3:62:
e0:79:67:e7:0f:e6:5c:a5:e0:4f:e9:d3:76:20:e5:
6a:ca:ae:5a:2d:5f:54:e2:f9:f3:67:6e:ed:c4:d5:
86:d9:e9:10:fa:ae:f0:7d:ce:7d:15:12:7d:6f:ab:
b7:8a:62:13:5a:a3:9f:fa:dd:7c:78:56:b3:f8:b9:
da:02:97:a1:b2:54:6f:5d:46:29:1c:84:4d:cc:de:
95:de:f4:75:a6:10:d3:bc:0b:1a:4a:18:40:7e:a0:
ef:3b:14:fc:84:fc:50:0b:cf:dd:e9:f9:a7:45:dd:
2f:57:d1:dc:b4:8f:06:28:d9:96:d1:22:3d:c5:9f:
b6:6f:39:0f:e6:96:a0:20:e0:f3:bb:18:60:63:6b:
c8:30:a9:72:47:1d:a6:84:c0:c6:7c:11:62:98:bc:
49:0b:67:b6:2e:a6:5d:f2:55:d8:7e:56:8e:38:2c:
6c:a8:a5:45:fe:08:9c:5b:15:93:5c:ba:39:e2:13:
ea:1a:77:c9:bc:e6:a8:e2:87:f7:24:d6:2c:1c:23:
1b:bc:b9:6b:91:9c:ac:da:19:69:4b:98:45:bc:5e:
69:ad:05:be:78:b4:5a:f8:9e:b9:c0:98:25:32:72:
d9:1a:4f:6a:32:6e:8c:23:c6:ad:11:e2:95:d6:c5:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C2:F4:36:4E:C2:ED:1B:20:6B:C4:5E:D4:25:8C:A5:28:F9:1E:D8
X509v3 Authority Key Identifier:
keyid:97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e0:58:46:c3:a3:48:7c:2a:c4:c9:d9:73:be:9e:59:aa:d3:
ee:82:57:5f:c5:78:5c:cd:7f:4b:75:a1:a3:2c:08:ec:c7:38:
fe:75:8c:af:d3:04:57:a2:c0:cd:6b:d1:89:5d:3d:5a:76:f1:
41:52:7a:e5:2e:69:59:68:77:16:af:d2:b0:cf:27:f5:04:93:
20:bf:1c:5b:48:40:18:ea:c9:b2:1c:e2:53:8f:cd:84:8f:12:
d7:95:ec:86:58:70:a1:1f:81:83:e3:15:31:8b:05:b7:56:a3:
f7:da:d0:6e:51:3c:f5:86:5a:3f:47:7a:b3:6d:20:46:7c:8d:
59:37:c4:30:7c:60:ee:35:03:52:a1:75:90:a6:8c:59:06:33:
0b:ab:56:69:08:21:17:d4:be:49:fc:c8:71:57:ce:5f:76:1b:
bd:a5:47:40:0a:eb:cf:fc:32:66:97:49:2c:0b:64:9a:50:22:
96:7a:e4:3c:22:3c:73:9d:60:a2:7c:e9:d6:78:c4:ea:73:82:
4d:6b:fb:f5:f6:e5:9e:e3:d8:d5:59:a4:72:21:f3:cc:d7:e1:
93:2e:6f:07:f0:9f:69:f1:95:ed:40:52:6d:b4:1b:b8:53:31:
33:31:cd:0c:92:0a:39:8d:9d:e6:c2:18:ec:72:5a:c5:c2:45:
f0:76:09:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:21:32 2025 by rpki-client