Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
File: lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft (raw, json)
Hash identifier: f+mjWGA4ygTpy1gL5H7TfmV3Qo+sb4MrSPId/DnYcaU=
Subject key identifier: CE:C1:8A:D1:02:2B:62:95:89:33:C9:3A:3C:21:F6:E3:6A:10:24:C9
Authority key identifier: 95:14:DF:9F:DC:3A:0B:12:8C:20:EE:8C:06:62:8C:43:C9:58:BB:F0
Certificate issuer: /CN=9514df9fdc3a0b128c20ee8c06628c43c958bbf0
Certificate serial: 019686FFBA134C3EF08D86AF039F3780B39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
Manifest number: 0601
Signing time: Wed 30 Apr 2025 14:00:28 +0000
Manifest this update: Wed 30 Apr 2025 14:00:28 +0000
Manifest next update: Thu 01 May 2025 14:00:28 +0000
Files and hashes: 1: cCGgeXQG7w7JJ0VVtoCaqK0Nuk0.roa (hash: OWS86sPN3Xs5u+J3GeHiIwJ0UACEogG9zbUxH/qhnWU=)
2: lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl (hash: ukQPeaf9AdDRUx/MuvI9vpDY3UD0v0d/JSxJ0MZYfW0=)
3: x4XI86xuT3wsfzGO7m_2JB-s4p4.roa (hash: Dt7gE1TI/UXgmAj9V+d2Jv58edUR433oJyH6DVwQHcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:ba:13:4c:3e:f0:8d:86:af:03:9f:37:80:b3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9514df9fdc3a0b128c20ee8c06628c43c958bbf0
Validity
Not Before: Apr 30 14:00:28 2025 GMT
Not After : May 1 14:00:28 2025 GMT
Subject: CN=cec18ad1022b62958933c93a3c21f6e36a1024c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:dc:30:fc:0d:ca:d7:95:27:d4:7d:42:65:
43:ba:e8:19:67:81:07:41:98:7e:7c:1c:47:b7:59:
0e:48:12:79:6f:13:bd:d7:82:02:7e:a5:d0:e3:65:
cd:e0:43:65:8e:f1:04:48:57:ac:b9:55:25:6e:51:
e4:4c:18:c2:23:40:78:e3:93:a7:46:74:dd:5e:4d:
d9:e3:f0:b0:c0:a7:4c:e1:79:08:c8:a1:cc:3e:31:
7d:99:9a:20:f2:8a:ba:53:72:5d:2e:1d:d2:8d:42:
1e:f2:4a:43:f3:49:98:05:f3:bb:72:ef:6f:0d:f2:
96:eb:77:8c:45:9a:50:8f:71:00:27:dd:3e:e3:e8:
bb:73:7c:34:c9:1a:22:c9:f8:ac:67:22:75:19:81:
22:48:14:1f:78:33:9e:ca:4f:23:a1:ea:19:9c:03:
42:31:dc:c9:e0:85:12:19:b8:d1:c4:00:75:6d:65:
7e:64:0d:a2:ff:c0:9a:7c:26:c0:9d:2c:9f:44:20:
bb:1f:2b:e1:97:bd:bf:bb:98:19:7a:a2:c9:1a:ba:
d5:2c:3f:4e:c9:bc:b5:e9:fa:db:35:35:bd:33:a7:
26:47:18:b3:12:dd:f8:54:21:75:a4:1d:4a:cd:5e:
91:3c:b2:c2:35:78:37:74:2d:02:81:57:d9:f8:00:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C1:8A:D1:02:2B:62:95:89:33:C9:3A:3C:21:F6:E3:6A:10:24:C9
X509v3 Authority Key Identifier:
keyid:95:14:DF:9F:DC:3A:0B:12:8C:20:EE:8C:06:62:8C:43:C9:58:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:77:8e:60:c8:e7:cd:d3:21:76:86:6f:d3:0f:0e:21:c8:e6:
c8:7b:f5:27:12:a4:7a:f2:3e:3e:49:18:39:1c:9a:ad:59:7d:
76:69:71:d9:98:f8:30:51:be:cc:5e:35:aa:d4:d7:ba:8f:44:
76:5d:a7:b2:25:b8:43:c1:19:19:ab:53:c6:a4:6a:70:0a:85:
c1:d3:fc:26:ca:9d:f9:47:af:50:b2:ad:c5:23:0e:aa:40:2b:
c5:0a:6b:5e:7e:cb:ac:8f:a1:a4:41:21:69:1d:dc:b3:57:86:
09:8a:c9:82:16:50:5c:53:f2:c5:c6:d5:fa:78:c8:26:b4:32:
02:bb:54:9a:fe:77:b9:bb:c2:cb:d6:f6:27:79:4d:86:72:00:
99:d9:27:df:f1:97:e6:30:27:95:54:11:ba:10:fb:8d:d4:09:
50:fe:3d:80:f0:1b:a7:8f:e6:8f:1f:bc:37:5a:40:55:55:27:
ec:f2:02:27:7d:58:b6:f7:d2:ea:72:56:ca:bb:1b:00:9f:2d:
53:29:a7:6f:5e:d2:f5:2e:66:b0:36:a3:aa:e6:02:ba:b0:68:
63:12:bc:e0:7f:d5:36:4e:6b:9d:c0:7d:ee:66:f6:ab:68:27:
78:f0:a0:6b:2e:30:9f:60:37:3f:9f:6c:bf:f1:df:cd:8b:43:
cf:c7:1e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:45 2025 by rpki-client