Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
File: lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json)
Hash identifier: UNZnzdJMWqq00nNE91YwZCdkjGBJE5JJo/KAWwWhXh0=
Subject key identifier: 69:32:C1:95:CF:63:8E:F4:74:88:0B:B5:40:62:A1:7A:53:A5:55:07
Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
Certificate issuer: /CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Certificate serial: 019678682CADE6709910C9F21A2844A06773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
Manifest number: C8
Signing time: Sun 27 Apr 2025 18:00:15 +0000
Manifest this update: Sun 27 Apr 2025 18:00:15 +0000
Manifest next update: Mon 28 Apr 2025 18:00:15 +0000
Files and hashes: 1: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: +NTrPeAtDHDf2J5OZ0+neE9bDWRuEtIv5KJNaR/3jqI=)
2: t16PzAlvWekYsP-M8rbE-GQqrKw.roa (hash: 3vnPnuhk/OI+4T9XrhuO16OQVY7hpcxK0i/qFVmYQP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:2c:ad:e6:70:99:10:c9:f2:1a:28:44:a0:67:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Validity
Not Before: Apr 27 18:00:15 2025 GMT
Not After : Apr 28 18:00:15 2025 GMT
Subject: CN=6932c195cf638ef474880bb54062a17a53a55507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:fc:f1:e5:bf:0b:7f:5a:2b:ca:25:fb:84:
ee:58:df:bf:7d:a2:af:29:85:67:10:90:99:a1:ae:
75:0a:9e:aa:49:86:43:f5:d8:5e:d7:05:5e:b0:3e:
8a:b0:38:5a:7d:85:ba:02:a8:90:8c:86:02:25:29:
09:39:b3:02:46:f7:ff:7a:b1:02:a6:97:ae:68:a6:
6d:a2:6b:93:9b:fd:2b:3a:32:56:91:74:aa:b9:01:
d1:b9:4e:57:82:a4:76:37:dc:b4:5c:51:d5:45:17:
4f:86:54:f9:b4:93:34:d9:be:36:be:3c:1c:8c:21:
ef:8b:6c:c9:b9:28:81:2f:38:fa:64:cd:b2:60:6b:
3b:5c:e2:2a:40:2f:bc:59:5e:54:83:70:b0:b1:68:
b1:74:c5:3f:e7:a3:87:9a:50:9c:6c:7a:31:e5:95:
75:cd:19:cd:65:09:0f:1e:09:a2:90:ad:79:a7:99:
4a:69:7b:63:c5:15:0c:f2:2d:03:07:41:5b:98:9f:
f2:ba:2f:27:5d:14:ef:62:26:1e:95:e6:45:07:94:
98:7a:52:95:0d:c0:4d:e5:52:a5:72:82:d8:9c:b2:
81:ff:2c:9b:b1:bd:88:5b:1f:b1:c5:20:0e:78:60:
9a:2f:7e:26:f5:c9:a0:bb:fe:1b:a6:5a:68:11:5b:
34:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:32:C1:95:CF:63:8E:F4:74:88:0B:B5:40:62:A1:7A:53:A5:55:07
X509v3 Authority Key Identifier:
keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:49:08:9e:7a:81:ea:8c:35:a2:c5:96:31:91:b4:f5:c5:60:
51:e9:4d:1b:f1:cd:22:08:99:46:25:52:cf:5b:87:aa:09:51:
59:d6:c8:12:22:70:64:3c:38:03:7f:bf:11:9e:ba:92:c5:d3:
ed:84:fc:4a:91:45:d5:c1:e9:32:6f:3a:6b:ac:4d:88:13:c4:
ff:b6:ae:6b:a2:54:1d:97:39:29:f7:09:02:d0:b2:74:5c:97:
b9:b7:bc:02:4d:59:f7:df:06:3b:46:70:9c:31:5a:2d:d0:08:
25:c0:73:34:8f:b4:d5:73:7e:5c:42:d9:7d:a7:0f:73:8d:2f:
55:ab:98:96:2f:e2:89:d9:d4:a3:0a:b0:26:f5:20:3e:54:27:
39:b6:6f:c3:bf:3b:4d:be:23:eb:a9:92:82:1e:57:ad:35:bf:
d8:d2:81:d0:52:4a:9b:8c:df:17:a4:89:37:12:13:49:44:f4:
49:61:d8:91:66:da:2f:c8:44:b7:11:2d:fb:da:21:58:d2:03:
21:94:25:ef:04:67:c1:41:3a:b1:bc:52:15:c3:ae:15:12:a1:
ca:22:f2:74:e6:47:c7:5b:a7:63:8a:bc:49:db:a6:21:ec:56:
63:7c:8c:e5:16:ae:e2:ef:73:b5:9c:c8:13:92:23:f5:8c:c1:
74:ef:71:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:13:02 2025 by rpki-client