Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
File: ln4P5z7udZt3H7cgI8VKecCmFxc.mft (raw, json)
Hash identifier: WKDphBg/m7EBPywyJdni1UuWTV3HHqX0+vwwYbGj+SQ=
Subject key identifier: 76:22:05:4A:06:FD:16:92:29:F8:63:E4:FE:96:D2:C9:3D:AC:17:6E
Authority key identifier: 96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
Certificate issuer: /CN=967e0fe73eee759b771fb72023c54a79c0a61717
Certificate serial: 019686C8E17BAD4C241372A7B0B02584BEC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
Manifest number: 02F0
Signing time: Wed 30 Apr 2025 13:00:33 +0000
Manifest this update: Wed 30 Apr 2025 13:00:33 +0000
Manifest next update: Thu 01 May 2025 13:00:33 +0000
Files and hashes: 1: CZTxdymHXJeNj0sHrlYmZG1IiYA.roa (hash: 1N/VlwYAeVpuFdfF49aCJDo/ioVhQJXBgZNT/IfXyjA=)
2: ln4P5z7udZt3H7cgI8VKecCmFxc.crl (hash: LPkg+6pvCnQJCaLHuCHAppA8Z5J6hhqD/sHXQI32/JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:e1:7b:ad:4c:24:13:72:a7:b0:b0:25:84:be:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967e0fe73eee759b771fb72023c54a79c0a61717
Validity
Not Before: Apr 30 13:00:33 2025 GMT
Not After : May 1 13:00:33 2025 GMT
Subject: CN=7622054a06fd169229f863e4fe96d2c93dac176e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:82:c9:ca:39:8f:5f:2f:e8:e2:2f:1e:70:3c:
ca:36:ba:c0:ea:59:2b:85:3d:4e:c8:ba:7b:a1:d1:
98:b4:b0:a8:52:f6:95:f2:cd:3f:40:11:22:f2:44:
2d:2e:2a:d0:dc:8d:85:82:da:80:f3:8d:a5:66:b9:
ad:6a:b6:dc:d3:9c:48:94:7f:96:d6:47:dd:24:98:
50:f0:91:0a:2d:f6:bf:c2:1f:5c:fe:1f:06:0e:c2:
05:c1:0e:30:63:02:46:05:64:db:c3:12:ad:7e:03:
fb:37:53:4c:4f:9e:e9:1e:2e:4d:42:fb:ac:eb:ee:
b1:01:11:53:66:f7:7f:95:e2:c6:61:4f:dc:0f:fc:
94:88:1d:b5:70:20:20:4f:c3:77:fc:0f:f9:d2:98:
c0:f6:9f:a0:9f:77:60:ef:00:8a:0b:03:41:40:6c:
51:90:e3:1d:cd:6b:72:2e:30:f4:79:df:22:51:69:
8e:3f:57:c6:44:4f:fb:0b:fa:3f:10:a0:91:95:d9:
e3:5a:3a:2e:97:51:c1:7f:d2:aa:3a:12:a3:f7:7f:
86:2c:33:61:96:28:1c:09:29:d7:d0:f2:b2:02:65:
a9:3b:05:6a:02:71:a5:a3:da:ef:94:eb:f9:a3:0c:
cf:e7:ca:9f:29:6b:a4:6a:6f:04:ab:03:7f:fc:4b:
95:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:22:05:4A:06:FD:16:92:29:F8:63:E4:FE:96:D2:C9:3D:AC:17:6E
X509v3 Authority Key Identifier:
keyid:96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c7:86:20:8e:a7:c4:c5:79:d4:84:6f:40:d4:a2:8e:59:ce:
23:68:dc:dd:be:91:8a:2d:e8:99:e9:a6:92:59:85:7a:03:e0:
0c:eb:58:5d:6e:9f:63:d8:03:c4:e1:1a:01:8e:80:69:c6:68:
2d:8b:ec:59:60:75:37:c3:55:4c:92:05:91:bf:33:0a:fd:80:
5e:96:f3:05:71:8b:d3:b4:ff:d9:39:9b:16:37:f2:f3:e5:8c:
70:4f:24:af:bd:55:71:13:e3:e2:0b:e1:46:f6:f8:09:b7:9d:
a1:07:86:cf:c1:8f:61:2c:1b:e0:3a:bf:9b:ff:19:ad:f7:a6:
c7:28:78:22:b2:13:9c:81:a7:bf:79:74:05:3a:0d:c6:7e:54:
17:1f:b7:6f:09:d1:19:a1:e5:ef:09:49:0e:61:57:f4:91:99:
02:6f:e7:4b:d7:83:0f:28:a5:9c:52:3c:88:4f:38:e7:33:7f:
8f:7e:d8:1c:a8:39:55:5d:49:29:a9:09:c5:28:64:2d:77:9b:
a4:5e:38:32:5d:73:53:60:af:aa:4a:32:85:64:43:c3:95:65:
c9:ed:a0:ac:b7:86:93:00:18:d6:4c:a0:91:1f:e9:11:f2:fc:
73:bc:e3:6b:f3:5d:cd:c5:94:74:bf:93:43:ff:c4:76:14:a5:
20:d8:93:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:45 2025 by rpki-client