Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
File: L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft (raw, json)
Hash identifier: 33T7kVrl34PjuxhZZO9p6tnV43URcjdHhnXJVktTBXo=
Subject key identifier: C1:51:D9:20:CE:E8:0E:42:26:F0:5F:20:51:24:08:98:33:6E:21:5B
Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
Certificate issuer: /CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Certificate serial: 0196767A07DE7DBE97954A6006374C1772A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
Manifest number: 04DD
Signing time: Sun 27 Apr 2025 09:00:30 +0000
Manifest this update: Sun 27 Apr 2025 09:00:30 +0000
Manifest next update: Mon 28 Apr 2025 09:00:30 +0000
Files and hashes: 1: L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl (hash: jH5HWVRnLhzYkZz6gyYvAKgojwufi1/TL2jQZievcCc=)
2: qznnQ-v33pCD5fJCMq_QfAFaVVY.roa (hash: 0VqZD7dxruPTKQ34pdbfgNvG+cfqa/rYpHKqqEaQD/s=)
3: sxWEI_lS1aXV-AY65QedUYFWKCk.roa (hash: ms1QHqqgoXo/meqTZa2TJKA2xu/idnTrM5+e1jr1amY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:07:de:7d:be:97:95:4a:60:06:37:4c:17:72:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Validity
Not Before: Apr 27 09:00:30 2025 GMT
Not After : Apr 28 09:00:30 2025 GMT
Subject: CN=c151d920cee80e4226f05f2051240898336e215b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:f9:87:57:ee:d8:66:3a:e6:c5:f7:87:b8:
0b:0f:fb:2b:da:6e:d1:88:01:b7:ab:59:c2:ff:15:
32:b2:f0:54:2c:c5:70:ad:69:57:60:09:a2:1d:f7:
68:f2:dd:41:07:85:37:c0:70:fc:a0:e5:57:41:29:
6e:00:86:4b:4b:d3:b9:e0:9b:db:be:0c:4e:a8:14:
05:87:94:f5:c0:f0:af:02:7d:48:ba:2c:45:8c:24:
c0:31:bc:ff:87:b5:02:98:53:52:83:09:5a:55:c6:
5f:10:14:48:c4:b1:a3:38:67:98:53:c8:9e:01:65:
26:62:06:23:c1:78:96:e1:60:06:0b:63:a4:26:5e:
e2:33:63:9b:28:fa:a3:4a:0b:a9:7a:e9:80:44:90:
ad:4f:55:50:67:e7:b7:50:e4:c3:0e:0d:71:be:0d:
a5:dc:f9:17:05:7c:f4:d2:31:1f:24:69:aa:d2:ff:
9f:40:69:78:0f:8a:2a:51:67:07:91:f4:0a:60:64:
bf:0f:90:a0:da:43:ed:7e:b5:34:c6:6d:78:12:4b:
1f:ab:12:40:52:22:28:f4:9c:d5:96:42:9a:0e:f3:
a2:91:ae:8a:21:83:12:bf:65:4b:e8:01:e4:e4:f3:
1f:12:ed:f1:fc:f3:46:0f:bf:af:d9:6f:3c:b2:08:
d1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:51:D9:20:CE:E8:0E:42:26:F0:5F:20:51:24:08:98:33:6E:21:5B
X509v3 Authority Key Identifier:
keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d9:b9:d9:85:b0:ef:31:7f:b0:0d:70:d6:82:53:25:b8:77:
9e:73:4a:c2:55:44:ac:1b:22:fe:df:28:00:ac:9c:7f:af:9d:
6a:48:9b:e9:37:ef:74:61:bb:cd:be:17:f7:c7:51:5f:24:71:
ca:9e:6f:a0:bf:61:64:12:5d:32:cd:53:1f:9c:57:9d:d0:b4:
4a:f7:e4:16:95:fb:71:bd:e9:ce:92:e4:38:c9:41:7f:68:0b:
3d:e6:cd:4b:6d:d8:9d:9e:09:83:48:d5:ee:ea:51:5a:df:24:
69:9f:cb:5a:6f:db:61:fe:39:59:67:d0:f3:3b:30:72:3a:3c:
06:da:39:49:71:26:49:bf:9a:d5:e5:dc:3f:2b:ea:8d:35:43:
fb:1b:54:3e:35:e8:db:ac:65:54:d0:6b:80:f9:e5:c4:fa:ac:
e5:2b:d4:39:9f:8d:09:21:c5:12:2b:e4:fb:6c:c6:e8:5b:fb:
73:bd:78:bc:78:63:92:0e:15:74:ae:95:a1:eb:d5:99:b0:95:
2a:d5:02:43:0f:47:32:05:5f:c2:35:81:00:db:af:99:24:f7:
d4:e0:70:3d:d4:da:19:e2:8d:59:81:b6:3b:5d:ff:8c:64:ba:
62:18:7b:b5:8c:fe:9d:a8:ad:f3:1e:e2:4d:0a:ee:0e:75:f6:
b8:10:ca:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:59:07 2025 by rpki-client