Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
File: lEethLhLrsR9ViHi91Yj8-rxOWA.mft (raw, json)
Hash identifier: qHAmEKDVSIh4o+6+B6QjXIWkwYTQwhYfEvw9sMAQBbM=
Subject key identifier: D3:25:08:47:9A:B5:7F:1B:76:FC:EB:1C:98:03:12:65:A2:49:94:C1
Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
Certificate issuer: /CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Certificate serial: 01967ED8762EF2783B272B74232D74DEF545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
Manifest number: EC
Signing time: Tue 29 Apr 2025 00:00:37 +0000
Manifest this update: Tue 29 Apr 2025 00:00:37 +0000
Manifest next update: Wed 30 Apr 2025 00:00:37 +0000
Files and hashes: 1: OvZQb1hcjOkIMnQrBwzGm-WLCpQ.roa (hash: AP7pBk7gh//un0koiUryrNu346ceJkk+whaQUXPWQDs=)
2: UWt_XRc9JV9FMCdsAcTPRdiOUNo.roa (hash: cl2cUuSvySYimCpyWJxO/6NE4GT3NHF6FS5npGysPcU=)
3: lEethLhLrsR9ViHi91Yj8-rxOWA.crl (hash: JuJlp0xErJs68TZ2xHlv9zjOqd16gzci7dTddo4sJBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:76:2e:f2:78:3b:27:2b:74:23:2d:74:de:f5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Validity
Not Before: Apr 29 00:00:37 2025 GMT
Not After : Apr 30 00:00:37 2025 GMT
Subject: CN=d32508479ab57f1b76fceb1c98031265a24994c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:e2:65:6c:36:c3:40:40:8c:f2:db:b7:6a:
66:8f:8a:69:16:70:ba:3d:21:de:05:b1:1f:44:80:
33:bc:cb:2e:9d:9f:c2:fb:12:fc:56:6b:f0:8f:91:
50:90:0a:f9:c6:88:70:7f:7e:6b:9c:93:3c:0f:c2:
b1:ac:bd:2b:e8:04:71:0a:71:a7:9a:df:9a:27:e8:
d8:9b:0f:ae:e7:b3:3b:6b:68:41:09:88:da:14:6a:
c5:7a:0e:9d:9c:5e:a2:ad:6e:d8:d1:8f:31:91:b4:
1b:3b:f0:8f:85:a1:ca:8b:81:dd:c6:53:5b:99:4a:
e0:dc:c9:88:0b:a2:2a:75:44:db:ee:9f:5c:8d:1b:
74:ca:84:c5:18:c2:bb:e2:c4:28:02:8e:a8:5b:6c:
39:1e:3a:65:6e:1b:e1:83:5f:25:e2:ac:ac:32:c7:
51:17:37:75:d2:cf:00:64:5e:25:60:49:64:b2:09:
0e:50:16:dc:50:9f:62:6c:70:d9:72:2e:f0:78:b8:
32:d6:3e:bd:bb:63:bb:d0:78:47:71:64:e4:9f:e6:
a9:20:cf:c4:d2:fc:9f:40:c7:f5:0f:d9:65:9d:07:
67:61:fe:1b:62:9a:81:4a:ac:dc:3a:5a:f3:90:bb:
f6:bf:88:d4:ae:10:65:ac:06:ca:cd:76:0b:9c:67:
c6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:25:08:47:9A:B5:7F:1B:76:FC:EB:1C:98:03:12:65:A2:49:94:C1
X509v3 Authority Key Identifier:
keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9e:b0:ff:9f:69:69:8c:ef:ff:94:65:13:68:1a:34:13:87:
e4:a9:69:f5:53:6a:5e:f2:82:d7:fa:a0:7b:84:dd:a5:e6:8b:
84:83:c1:cd:96:3b:77:2e:0c:d2:6a:a2:ea:d8:b1:64:7f:80:
d2:fc:a7:3d:4f:6f:c9:47:b4:7b:da:09:c7:4a:04:dc:20:8e:
04:e3:39:a9:1b:97:5e:57:d6:26:c1:db:2d:7d:63:3a:0b:d2:
5b:98:67:b1:de:18:49:c8:89:e3:a9:0e:2a:78:e8:e3:9d:ff:
d2:6d:52:4b:39:ff:2a:0b:51:d1:71:f4:d4:c8:b6:6d:11:0e:
7f:68:21:a9:7b:0a:44:aa:a9:6b:9e:22:c6:63:31:62:1b:ad:
12:14:0e:9e:c3:f7:15:30:13:bb:3d:01:02:61:33:44:bb:76:
f9:cb:c2:f7:7f:4b:ac:84:6c:d6:c3:2f:d0:bf:c7:04:f4:e1:
14:95:2f:00:2b:fa:1a:e1:81:2a:a5:b6:bf:09:74:39:8a:18:
bf:88:0a:49:8e:0d:13:94:45:13:19:b1:9a:40:8d:73:e4:18:
d5:61:35:a8:ce:c5:f4:d3:60:f8:37:5b:db:7f:20:f2:4b:34:
d5:59:f4:a2:82:6c:2c:04:67:92:bf:c3:7a:80:f6:7c:52:c0:
13:08:b2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:16:13 2025 by rpki-client