Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
File: L42NDO68zXW2BrpJaPXHlG6NR8A.mft (raw, json)
Hash identifier: 5AmbJOkWeDc7uPGDadbn++GQg6GR+8nNHYYq6wG6nc8=
Subject key identifier: 93:69:2A:8C:61:02:9E:CC:B7:EC:93:62:EA:9C:71:02:4A:9F:EA:E5
Authority key identifier: 2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
Certificate issuer: /CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Certificate serial: 0196797B2AB479F974FCE49CDE0ACBD72F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
Manifest number: 0AFE
Signing time: Sun 27 Apr 2025 23:00:36 +0000
Manifest this update: Sun 27 Apr 2025 23:00:36 +0000
Manifest next update: Mon 28 Apr 2025 23:00:36 +0000
Files and hashes: 1: KvErQkIa-7bptS15YPSXyRA9CSc.roa (hash: oCFio8e2SnoXuYWAJDUSo/+OUQCG41H/KpmIERPwk3M=)
2: L42NDO68zXW2BrpJaPXHlG6NR8A.crl (hash: 1tnIq0c8dbwDdk0UXMzyc1tW+JMQ7KW9gPgz//nIOVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:2a:b4:79:f9:74:fc:e4:9c:de:0a:cb:d7:2f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Validity
Not Before: Apr 27 23:00:36 2025 GMT
Not After : Apr 28 23:00:36 2025 GMT
Subject: CN=93692a8c61029eccb7ec9362ea9c71024a9feae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c2:88:8c:51:2d:f8:72:f3:1f:ab:e4:2a:a9:
93:08:1c:b0:82:21:89:9b:ca:f6:39:a8:5c:f4:6d:
90:22:3c:93:16:e6:a7:2a:92:ae:1e:06:47:04:03:
59:84:af:58:68:a2:6b:cb:8e:c9:b3:f6:6c:56:73:
ad:ad:3d:6d:07:00:b3:ee:8d:43:8c:66:09:65:c0:
02:83:da:19:97:e5:2d:09:b3:d6:3a:21:39:20:77:
10:b7:2d:77:18:c5:0b:78:ba:b9:3d:15:ed:8c:83:
9e:a5:48:23:ad:e7:8d:57:b3:76:9c:ca:e3:89:75:
0f:77:c3:01:6d:8d:c0:6e:45:b2:bb:e2:48:9d:4b:
39:95:e2:e1:ff:aa:3f:e9:96:41:49:99:78:53:9e:
dd:8b:29:f7:95:38:f2:1a:fe:95:b4:8f:e2:64:a8:
82:16:be:13:57:8e:bc:a0:2d:18:39:ad:4f:6d:5b:
c3:a3:7a:83:21:b8:fe:08:62:d7:7f:8a:92:de:06:
ab:04:d5:8d:ba:82:cd:60:4a:b2:77:5d:af:45:38:
91:43:f8:7c:7e:0f:9b:e1:d7:2f:26:0c:c0:97:1b:
0f:1d:17:d0:48:3e:44:1a:f8:27:52:98:29:df:73:
0e:b1:e8:f3:ef:cf:c3:f1:7b:90:e1:58:2c:b1:a2:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:69:2A:8C:61:02:9E:CC:B7:EC:93:62:EA:9C:71:02:4A:9F:EA:E5
X509v3 Authority Key Identifier:
keyid:2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:dc:28:0b:9b:a1:fd:b7:eb:a9:12:0b:30:ad:90:eb:e3:05:
4a:5b:b3:79:9f:0e:4e:c8:8f:43:dd:e8:de:2d:d6:10:1d:b6:
85:81:36:ae:24:3a:c7:a3:59:09:dd:a4:36:02:f7:b4:81:ff:
9c:76:3d:6d:24:f7:22:b0:09:bd:dd:41:66:df:99:08:e9:35:
6e:22:99:7e:96:00:0b:b5:40:f8:01:a8:74:e6:b2:04:94:b8:
1c:46:c9:32:d4:c7:38:09:d6:bf:90:10:f8:ea:3f:05:f1:ea:
c1:44:22:21:d4:b9:e9:5f:69:04:a3:5f:eb:6d:d0:32:a3:c4:
ac:06:36:53:d2:87:04:05:83:6b:bb:7d:a1:b6:df:a2:29:de:
67:4a:98:c9:49:cd:a6:6a:42:d3:4b:c4:16:a9:1b:c9:a1:5b:
64:e3:cc:2a:49:8a:3a:29:ed:c9:6e:2a:ae:ac:bb:ec:4f:90:
1a:74:65:ce:91:5a:ef:66:87:98:88:6c:7c:1e:4b:84:f2:77:
43:d2:c4:39:61:ae:6c:b6:47:f7:7b:b2:c7:b2:da:ca:e9:56:
dc:ff:12:11:a4:d8:47:db:77:04:f3:b0:c6:c3:cb:10:57:fb:
1e:5d:fa:15:16:b1:e4:b2:2a:ae:eb:47:14:15:6e:fd:63:4a:
9e:0e:45:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:39:23 2025 by rpki-client