Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
File: l5WGA1q-I1acITXjINvRolW4QDQ.mft (raw, json)
Hash identifier: V7xEJb8sXt9hZaujtgxON9ENQElldp3uk6toyaxfr0Q=
Subject key identifier: D6:6C:99:33:68:EF:F1:75:33:DC:1D:F0:D2:28:E7:A4:3F:58:9F:D7
Authority key identifier: 97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34
Certificate issuer: /CN=979586035abe23569c2135e320dbd1a255b84034
Certificate serial: 0196767A1A5F4598FE1FF3687823674801C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
Manifest number: 0F0A
Signing time: Sun 27 Apr 2025 09:00:35 +0000
Manifest this update: Sun 27 Apr 2025 09:00:35 +0000
Manifest next update: Mon 28 Apr 2025 09:00:35 +0000
Files and hashes: 1: B8Ry5W4Nd7mGEXHvK2ID6RlaYKg.roa (hash: bjPJdt8d8Rm7Nt6tD0StaYZNVd8a8Vg9VG3eQIsicu8=)
2: l5WGA1q-I1acITXjINvRolW4QDQ.crl (hash: WrBd3WUxdxvr2VWtHQ0VcD7WoeEqM9pmo9/hMokahOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:1a:5f:45:98:fe:1f:f3:68:78:23:67:48:01:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979586035abe23569c2135e320dbd1a255b84034
Validity
Not Before: Apr 27 09:00:35 2025 GMT
Not After : Apr 28 09:00:35 2025 GMT
Subject: CN=d66c993368eff17533dc1df0d228e7a43f589fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:51:6e:71:ac:f0:50:1d:62:e6:91:41:d9:
60:c0:20:ee:92:40:29:5a:37:b8:a7:fb:2d:68:1c:
25:d1:ec:ba:e0:9d:f7:68:66:13:80:2b:d4:09:09:
b9:dd:b6:7f:cd:31:9d:a9:86:1c:29:4d:81:f4:46:
df:5d:c9:85:91:bc:1b:1b:e8:6b:ab:a7:1c:c7:dc:
c0:33:22:fa:9c:a1:95:32:e1:47:83:81:3f:74:43:
93:f9:f3:65:0e:98:f3:13:1f:a7:da:a3:55:ed:7e:
5e:a4:d7:ac:61:1b:9f:ca:19:4c:7c:61:49:27:5c:
cc:3e:f5:3b:1e:ef:92:0b:e5:89:a1:11:41:6c:10:
43:b3:fc:42:31:78:12:ce:a0:10:d7:1b:f7:e0:3a:
1a:78:33:b5:c5:29:e9:32:53:3f:5d:38:cd:33:b7:
b3:dc:d0:87:7a:b3:29:d7:a5:40:93:47:15:7b:85:
1e:89:35:91:8b:db:fe:ca:98:c0:19:04:33:01:56:
78:7f:79:86:eb:94:b0:a3:4e:e4:77:62:64:81:c5:
45:f2:b8:6a:cb:ee:a5:4c:db:00:81:50:97:0b:ea:
51:f7:9b:71:25:1e:2f:19:44:14:03:a2:0f:a8:f5:
cf:ba:e5:4a:10:11:de:ed:18:72:4d:68:24:ab:ec:
34:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6C:99:33:68:EF:F1:75:33:DC:1D:F0:D2:28:E7:A4:3F:58:9F:D7
X509v3 Authority Key Identifier:
keyid:97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6c:22:6d:be:26:bc:62:26:79:9a:e3:66:ea:37:99:23:08:
44:d3:70:26:a3:08:49:7d:d3:1e:80:aa:ac:e5:83:90:a9:df:
ff:90:67:ac:a4:a4:2c:a4:27:c2:e6:93:b2:0e:d1:9c:13:4a:
c4:1b:bc:70:72:3c:9b:40:6d:77:26:06:37:10:ee:64:d8:f3:
27:3c:74:1a:50:de:85:3c:ee:8a:c8:b3:a1:e2:28:54:87:d5:
c7:2c:27:e1:98:d7:16:a7:b2:6f:5f:b0:79:8e:8e:80:24:f7:
49:1b:ef:ed:54:17:6e:a1:62:66:36:b1:e8:59:8a:f5:0f:54:
bd:b6:da:f3:8e:bb:6a:8e:4d:4e:2d:71:53:1d:45:a8:2f:65:
77:ec:9d:75:57:86:15:50:71:63:63:38:03:6a:92:f1:93:a4:
88:f2:cf:1e:0d:28:c7:1b:df:a5:cb:84:74:bc:b0:43:c7:35:
b5:d8:a9:0c:3f:82:44:b7:d5:13:10:e6:88:21:70:a8:ae:4e:
87:c8:77:c6:02:07:5e:96:22:f5:81:d4:bf:2e:9e:17:8b:7d:
b4:9f:0c:3c:67:96:4a:8f:ba:68:b2:e0:16:5a:f0:20:33:a6:
49:f4:75:73:53:b7:24:51:fd:ad:39:03:d7:95:a7:2c:98:5f:
f7:1c:d6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:12:20 2025 by rpki-client