Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
File: l72bhlMeVEr6AwnYvip7ppFj-a0.mft (raw, json)
Hash identifier: wmZUjQcqczN0yrjJ7NBymPfu9QoNUXMM6bxEE4W2S/8=
Subject key identifier: 6F:48:81:D8:B2:C4:D4:7D:6D:81:E6:08:E7:45:D5:EF:33:22:14:6D
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 019677C374AB8BD067C3F1F87197E108304B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
Manifest number: 12C4
Signing time: Sun 27 Apr 2025 15:00:20 +0000
Manifest this update: Sun 27 Apr 2025 15:00:20 +0000
Manifest next update: Mon 28 Apr 2025 15:00:20 +0000
Files and hashes: 1: aMPRUufSIC3BSpnCaSjB3R1EWjU.roa (hash: PznJuTDoIXsWz9HXtvvwD92eU5XcI97tyAGmTVxGT4c=)
2: jkSVZWrRJ0p_sHmkLKgtRqPLq4c.roa (hash: 5AMIR+nAOYfoGTd/SNFuAJTTjyBmPlK6SsLZWPzLm6Q=)
3: l72bhlMeVEr6AwnYvip7ppFj-a0.crl (hash: Z+05sHWK3JRsmOSK7HT2pqztW2eN6yaMjmIOA4XEsDg=)
4: vYaorPpQFuOhpBOvS0Y7tNPAUfw.roa (hash: yR9f2kZ/nIXVrv9dXrEzRY+6fv+TWV0eQZK0RZqpM/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:74:ab:8b:d0:67:c3:f1:f8:71:97:e1:08:30:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Apr 27 15:00:20 2025 GMT
Not After : Apr 28 15:00:20 2025 GMT
Subject: CN=6f4881d8b2c4d47d6d81e608e745d5ef3322146d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:a3:c2:48:90:c2:5f:76:b1:a8:2d:5f:10:
00:7b:a6:50:07:31:68:80:33:b5:a5:b7:3f:09:c0:
fc:fa:66:e2:fb:dc:e4:cb:93:7e:68:cc:01:f4:bc:
a0:89:dc:d7:8a:d0:2e:ab:9a:7c:4e:17:56:79:65:
6d:33:08:08:ed:b2:98:b8:cc:1b:78:28:07:e3:93:
ba:20:ac:a2:38:88:23:a2:48:9d:ff:d5:cd:0a:6f:
3c:14:a5:83:f5:2b:a8:21:0c:f6:a5:28:29:15:6a:
1c:75:af:a4:91:da:0b:3c:4c:e9:8a:b5:43:33:6d:
1a:1c:d2:84:01:f6:0d:97:d0:16:6e:40:27:9e:83:
1c:08:74:d3:ad:86:88:68:ab:bc:7f:d7:f1:e4:fa:
a7:57:46:5d:b3:2f:f0:a1:eb:04:c5:f9:00:8e:80:
86:c7:51:a5:14:72:06:7f:b8:bc:89:e5:1e:f2:b6:
8c:99:80:55:96:c7:e9:1e:a3:d2:6d:6b:29:ff:f2:
00:e9:ff:6c:af:0f:04:4a:4f:7c:b9:fb:e2:54:e1:
a7:8b:f5:e8:84:fb:eb:5a:49:74:ce:eb:28:42:71:
51:ac:b0:f3:6f:77:80:f8:db:a5:0e:89:74:6c:48:
92:38:cf:5f:e2:92:74:f6:f8:38:c6:01:44:5e:6b:
af:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:48:81:D8:B2:C4:D4:7D:6D:81:E6:08:E7:45:D5:EF:33:22:14:6D
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c7:53:c2:5f:83:d0:f8:01:c7:a6:35:05:b6:f4:ba:7a:18:
ac:cc:f3:b5:78:e9:27:18:af:49:be:05:ce:4f:93:cc:19:92:
20:38:b0:ac:0d:99:27:05:00:08:c7:3b:e5:a3:34:bb:6c:58:
b4:d9:4b:cc:2b:61:3b:06:44:d1:d2:24:0b:c9:f3:a9:3d:9a:
6b:ea:73:6c:52:89:24:6b:cd:8f:0d:e7:f7:cb:72:30:b2:d1:
ee:ee:38:77:56:79:fd:1c:89:0b:a9:dd:49:3e:5d:df:a0:16:
5e:fb:da:c7:c4:db:81:5b:bc:4d:e9:9d:b6:bd:93:7c:27:3b:
d5:15:f5:6e:ff:b6:bc:d9:39:fd:1b:ce:fb:fd:46:7c:8a:7e:
f7:dc:6f:1d:77:ae:64:13:df:61:81:20:54:7e:cf:33:4e:cf:
aa:03:05:27:dc:60:a7:9b:26:f0:74:ca:d9:5a:21:f6:5f:ff:
f7:d6:ad:85:2f:a0:eb:37:d0:2c:6a:ad:92:c7:4a:6e:9f:bd:
b1:13:fc:6f:d9:43:95:09:a4:94:5b:ce:29:3e:d4:5c:d4:bf:
c9:ce:d3:f2:b0:4b:e7:25:34:aa:03:60:d4:1d:de:77:0a:56:
0b:71:b3:66:39:bc:95:9f:31:04:f8:42:af:0f:6a:cd:76:5c:
37:b2:e4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:13:07 2025 by rpki-client