Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
File: L28Hzq0GpPgRVHYAusAvrwzAhMk.mft (raw, json)
Hash identifier: I8lJtY72dbg6A2DBnpfSQK8Z0w19pfkgsK+gz+5eULQ=
Subject key identifier: 08:ED:16:84:2C:66:79:A7:5B:A4:E8:F3:A1:1D:A6:C4:70:33:9D:B6
Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
Certificate issuer: /CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Certificate serial: 019686C9257152579986966420C49E49C6AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 13:00:51 +0000
Manifest this update: Wed 30 Apr 2025 13:00:51 +0000
Manifest next update: Thu 01 May 2025 13:00:51 +0000
Files and hashes: 1: L28Hzq0GpPgRVHYAusAvrwzAhMk.crl (hash: McrFq1qX0lCKclm81o/oqScCCMh0jbR38H/vZ3+uRv0=)
2: QqgdIg6hSu9l0qkAmT27rSaYEpI.roa (hash: Zj7N5jWJe1MnRgbFLlzVoeaeQcOnvfzk+fyv1HdeicI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c9:25:71:52:57:99:86:96:64:20:c4:9e:49:c6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Validity
Not Before: Apr 30 13:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=08ed16842c6679a75ba4e8f3a11da6c470339db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7a:15:8c:f9:05:ed:2f:b4:57:6a:e8:e6:a8:
4d:0f:2b:6a:fe:3d:c9:86:3e:52:2c:ac:a1:69:1b:
19:90:1f:fc:67:b4:c0:47:1e:7b:fa:13:87:15:ac:
d8:6f:cd:ac:c6:5a:05:10:fc:f6:2c:af:90:3e:c5:
2e:88:16:8e:37:f0:5b:9d:95:a6:f9:65:73:4a:a5:
e5:8a:20:cc:3b:dc:72:79:7e:d6:5a:6f:b9:17:6b:
1e:94:8a:59:73:0d:0d:48:c8:2d:db:87:71:e6:a5:
78:29:28:d4:36:57:cc:87:3f:68:7d:e6:27:05:97:
9e:84:dc:96:3e:9f:71:b3:15:bf:53:f3:b1:0d:72:
48:82:d5:55:c6:0f:a7:56:03:db:91:91:c8:71:8a:
d0:81:6c:29:e8:4a:7d:2f:9d:6e:2b:d6:c6:9f:bc:
43:2d:f8:ac:63:df:d9:89:6a:a8:04:50:b7:da:1b:
7d:30:23:da:10:8a:32:06:39:15:14:f2:14:6c:6e:
b8:a6:a3:f8:ab:0c:4a:6d:c1:1d:2e:bc:ca:f8:77:
1d:c7:86:cf:ef:85:9a:26:ae:5b:e6:68:c3:6b:5c:
45:45:40:c3:fb:c4:a7:18:ed:b5:75:8a:8b:e3:f6:
f4:84:8a:52:4d:d0:fc:13:f9:83:4d:a1:5b:7f:5b:
66:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:ED:16:84:2C:66:79:A7:5B:A4:E8:F3:A1:1D:A6:C4:70:33:9D:B6
X509v3 Authority Key Identifier:
keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2e:4c:ce:d4:82:12:7c:8d:41:b5:34:e5:28:57:cc:ce:cd:
31:b1:b7:e3:b5:eb:7c:2f:e4:d3:36:16:da:33:3e:02:5f:e5:
bf:4e:1c:1c:c0:89:33:6b:bc:26:b1:4d:4d:8e:78:cb:af:91:
1c:23:ca:64:f7:7f:70:40:12:b5:f7:dc:12:1c:c4:71:b3:86:
86:f6:46:3a:5f:c9:27:4a:31:37:d5:ed:6e:3d:00:13:d0:26:
a2:58:92:ae:9e:68:95:c4:de:bb:72:be:b9:e2:ed:d9:31:55:
c3:09:ee:5e:b0:82:53:d6:b8:5c:6e:8f:64:fa:20:32:54:7f:
89:23:6e:7e:50:24:5f:60:41:e9:50:1a:f9:5e:d3:29:37:28:
b8:ad:b3:b2:08:95:5a:32:1e:05:84:36:bd:f5:0d:fa:48:e3:
6a:59:67:59:61:02:5b:8b:f2:55:d9:e4:6f:b1:ad:c0:68:ca:
e7:28:a7:6f:ed:60:5c:6b:1f:eb:14:e3:31:20:36:dd:bf:ba:
9c:72:a5:31:ec:83:d3:10:fb:99:23:66:66:8b:9e:ea:1d:57:
8c:5c:05:6e:34:0a:70:20:09:96:87:ef:57:7e:08:e1:34:4c:
e3:78:71:fa:96:ca:f9:53:16:d1:45:eb:bb:65:9e:a2:e7:9a:
a9:8b:82:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:09:40 2025 by rpki-client