Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: jBmdIpsE+TEbkk65Xq4Ms/UQix0kigEAySJa8xfIoSg=
Subject key identifier: 6D:D3:68:32:B1:31:6B:50:84:67:AC:54:56:11:E9:46:55:C2:EB:8F
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 0196730B51901ABAF98A2E4227C67926CAFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 0DC3
Signing time: Sat 26 Apr 2025 17:00:43 +0000
Manifest this update: Sat 26 Apr 2025 17:00:43 +0000
Manifest next update: Sun 27 Apr 2025 17:00:43 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: /wGI0HotsEXnsOPtQiXSSzXxoDwftx59JV7VSOXn83I=)
2: aVM2JRPGoP421g9oSUNGjf9qD-0.roa (hash: 42F126y1V8CdYKNFngkqVCoN/zI9pVlEuybIcm6uoWA=)
3: vIU4Yywm4_gH0qTtuVvYBbqi0Vk.roa (hash: 7tRCC811YWihlT+yYcIFOXhADjHxLL/OK1DaYCuI4jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0b:51:90:1a:ba:f9:8a:2e:42:27:c6:79:26:ca:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Apr 26 17:00:43 2025 GMT
Not After : Apr 27 17:00:43 2025 GMT
Subject: CN=6dd36832b1316b508467ac545611e94655c2eb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:52:8c:8e:7d:93:c4:7e:cf:43:38:31:7c:
09:b9:8b:70:1b:87:05:d4:e3:74:dd:7b:9b:ee:2b:
77:61:d7:ac:d2:b9:cc:17:44:22:8f:4c:09:25:bd:
cc:8e:de:ad:1c:1a:2d:e7:f0:b3:ad:5d:2d:54:9b:
b0:2f:68:54:22:78:e8:42:c7:08:b2:e0:d9:53:5e:
1d:28:6c:e8:f9:0a:10:1b:64:6d:78:75:ee:f1:72:
b0:05:d4:ab:58:9b:0e:a5:36:c8:61:f4:85:18:49:
d5:56:68:92:ab:8e:ee:0a:08:a0:f0:cb:b6:a1:25:
6a:77:bd:5d:f0:cf:b9:ef:5e:fc:9f:25:48:08:a7:
d4:c9:3c:57:92:7c:54:8d:fa:ad:59:31:59:d6:c8:
88:a2:89:51:b9:9f:bf:b0:ef:c9:33:77:68:db:c2:
fb:7d:6a:22:16:67:a5:6c:b9:78:c0:20:aa:d2:cf:
6d:4a:3b:fe:f4:bf:95:db:f1:f1:84:4b:ac:9e:75:
f4:6a:4f:77:f9:10:6f:6a:2d:bb:26:a8:07:eb:c7:
99:9d:61:87:d9:d7:1d:da:9d:a2:c4:cb:c3:c3:de:
5b:70:ed:8a:98:4e:3e:a4:56:a7:b6:ae:b5:82:0f:
5c:07:ca:3c:1d:e9:1a:93:04:b8:83:4f:63:31:ee:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D3:68:32:B1:31:6B:50:84:67:AC:54:56:11:E9:46:55:C2:EB:8F
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:96:5d:5f:8f:a1:e7:82:40:18:f5:31:8c:fa:49:98:f2:32:
74:b5:47:69:b6:41:de:93:1b:a0:63:b9:7e:44:e9:25:38:2b:
c8:31:42:1f:1f:0a:02:6f:e8:73:ab:ab:3b:93:c0:64:fb:ee:
cc:f2:b0:d3:25:7b:21:32:0b:eb:c2:78:78:36:48:f7:f4:e6:
a6:1c:1c:39:ea:96:2c:78:4f:18:1f:de:80:42:f4:59:a9:49:
4e:79:d7:e0:98:f6:ba:dc:4d:18:43:e1:cd:70:47:67:ee:f5:
0a:92:9a:67:f2:59:a3:35:bd:c4:6f:cd:b3:37:48:dc:03:31:
29:cc:cb:00:21:3c:bb:d9:cb:6f:4d:62:61:d4:5a:48:b5:65:
8b:98:d1:6e:30:a1:81:18:46:35:26:55:73:f9:d2:00:dc:f1:
6f:81:18:29:49:86:8a:93:66:7d:b4:76:2b:44:52:0e:71:f9:
55:7f:cf:e5:10:9a:7c:a4:74:6d:42:88:59:73:c9:e3:e5:e6:
fb:07:0e:bf:7b:c2:6e:8b:81:26:b2:dd:db:ec:2f:7a:f8:66:
1f:4d:e9:9c:b9:c6:cb:87:5e:81:24:65:d2:ae:c3:e1:15:6e:
bf:f8:8d:c7:15:72:e3:76:07:8f:bb:7e:f9:f8:e1:e5:06:eb:
df:e4:08:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:07:07 2025 by rpki-client