Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
File: rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft (raw, json)
Hash identifier: Qj6C7HztU9H76e1PCJNz3zfo7Xa33NIguWjKkklprTg=
Subject key identifier: 94:1B:62:4A:50:98:F2:A4:ED:76:27:3E:12:54:59:90:71:91:50:B9
Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
Certificate issuer: /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Certificate serial: 01967E334FC099916CA2D21505C6E5BBB0C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 21:00:14 +0000
Manifest this update: Mon 28 Apr 2025 21:00:14 +0000
Manifest next update: Tue 29 Apr 2025 21:00:14 +0000
Files and hashes: 1: fEfLOGBVJeUecVVlEjapZ06Oj8U.roa (hash: OleUOgz+9pFvUxQajAS7ULw6aOZyzyIU0DZD60L7Tws=)
2: kM5CulzBTgjqTdxC0kA20nIBInM.roa (hash: 4mPvZr8lZjvljhR4YU0MwI6WkG6rsEag6Ecnz4z85HY=)
3: rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl (hash: 3dzkxAqGZ/3chQVG2YlGl743vd46M6kN/0m93ZSkoIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:4f:c0:99:91:6c:a2:d2:15:05:c6:e5:bb:b0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Validity
Not Before: Apr 28 21:00:14 2025 GMT
Not After : Apr 29 21:00:14 2025 GMT
Subject: CN=941b624a5098f2a4ed76273e12545990719150b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:09:62:9e:cd:3d:94:58:12:62:ef:d8:f7:
eb:43:17:ec:f9:20:93:44:73:f2:9b:24:9c:23:3c:
e3:1e:42:dd:2c:fe:7c:b6:7a:2e:df:05:50:40:a0:
9e:6d:e2:4f:b3:e3:bc:25:8b:8d:d8:7d:23:20:e2:
e0:b8:26:15:00:2a:2f:67:99:84:3b:e3:a8:14:51:
5d:12:1a:b1:bd:b6:76:e4:b5:64:0b:1c:28:18:62:
03:00:44:aa:72:a1:c2:d4:a5:1c:1c:8a:ca:32:ae:
8b:cd:e0:87:80:8a:75:97:e5:3b:6a:4d:2d:17:bb:
82:5e:a5:8c:e8:53:9e:90:82:26:f3:7d:40:77:b5:
65:67:97:e6:c3:71:a4:b4:38:9b:97:67:dd:e6:f4:
66:e3:e0:ba:09:31:a0:bd:3a:de:99:18:bf:e5:28:
be:6c:c8:e1:3a:7c:07:fa:34:3c:3c:0b:3c:3f:63:
20:3e:2f:d6:30:b2:56:9a:67:68:dd:05:f1:35:e4:
4e:0f:c9:16:a0:df:15:57:19:4c:e7:a9:d6:99:83:
1a:c7:01:f1:54:f8:a9:74:2c:cc:c5:98:7d:30:44:
92:2d:5b:aa:a1:76:03:f4:2c:81:91:93:8f:8a:5d:
af:72:ff:73:60:29:00:50:90:c6:c5:b0:31:7e:b6:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1B:62:4A:50:98:F2:A4:ED:76:27:3E:12:54:59:90:71:91:50:B9
X509v3 Authority Key Identifier:
keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cb:77:8d:07:1a:c3:61:a6:18:40:28:45:0d:87:bb:c8:a6:
04:c0:3d:85:f5:f4:ec:5a:a9:79:27:b7:00:7f:36:49:c1:23:
10:e9:14:c9:34:4d:60:ca:74:68:09:84:10:d6:b2:37:17:c7:
e4:fb:6e:6c:1b:79:5b:f9:0d:f6:dd:a5:ad:3a:89:2d:e3:b7:
8c:3c:b3:57:6b:0a:20:cf:3c:b8:db:cd:f4:e8:73:3d:ce:18:
ea:64:33:2b:12:e1:c7:94:4a:3b:1b:be:79:53:1e:16:d1:ec:
3b:7d:f4:07:e4:3e:13:1a:8e:a1:24:c9:17:ca:86:aa:77:10:
17:91:80:49:7f:43:61:78:3a:7f:af:1a:0a:0b:64:8e:12:63:
ac:d2:f5:b0:76:3d:fa:6c:c9:40:3e:cf:77:19:c4:9b:25:5e:
e8:68:c8:57:77:aa:c4:3a:ac:0e:2c:06:ec:6c:3d:ed:c5:8e:
a8:63:6c:7b:e7:04:6b:9c:46:69:2c:61:24:ce:3c:9b:ce:26:
46:10:05:be:84:da:4c:69:30:c0:bb:dd:da:1d:72:47:21:e4:
a7:de:1d:1a:4c:a4:e7:51:5e:50:fe:3d:7b:07:51:8f:5d:dc:
85:41:0c:ca:0b:50:05:87:2d:c6:8e:de:97:fe:16:86:c8:da:
08:c9:06:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:41:19 2025 by rpki-client