Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: 9LJE+g1jayQ/21PuCa/7zpS643nL02ZNcmSKpiuxl6M=
Subject key identifier: 5A:0E:97:64:9D:F4:3A:BF:E3:F3:90:96:A2:56:84:FB:73:58:C6:3C
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 01967A1FEA7EB3757C6D3E0B2F3ACE2F71FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 150F
Signing time: Mon 28 Apr 2025 02:00:33 +0000
Manifest this update: Mon 28 Apr 2025 02:00:33 +0000
Manifest next update: Tue 29 Apr 2025 02:00:33 +0000
Files and hashes: 1: jNKVMMdFoTlq407WSxJG2wl397A.roa (hash: f7XfjeV34Q2856LzefHFdP3T+Gd6ci7hnd1cgyUQwpI=)
2: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: OcgGjx3bvFbxYq4C8ayfHCpFKxYMvwg9vUkrbVwpy9w=)
3: myck32eboJtl7s_ieX37W3eHO5I.roa (hash: lbaHeA4mwtN12nrUCJbm8VTH7h5JMLbryEGQgqFX+UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:ea:7e:b3:75:7c:6d:3e:0b:2f:3a:ce:2f:71:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Apr 28 02:00:33 2025 GMT
Not After : Apr 29 02:00:33 2025 GMT
Subject: CN=5a0e97649df43abfe3f39096a25684fb7358c63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:15:74:08:a1:43:31:a6:a7:b0:54:2b:48:
b4:4f:f8:5d:82:23:d9:f8:d0:ce:f9:53:56:ae:8a:
1e:66:f6:4d:23:4a:52:7e:76:70:51:ef:74:0d:c7:
d4:74:c7:b6:0f:87:47:97:1f:6d:a8:77:14:fa:6f:
c5:bb:7e:57:65:c7:5f:b3:7c:d4:5a:82:1a:49:a4:
a5:50:24:3a:fa:74:11:a0:2b:11:35:ac:35:7a:4f:
1e:15:b7:fa:ef:8e:c0:3d:4e:ae:86:ba:77:da:ef:
54:c7:e3:01:d9:4b:77:80:4e:c8:6b:78:87:6c:cd:
54:93:f8:81:59:ec:cc:16:9a:92:fb:6c:6b:1e:51:
4b:f1:87:07:4a:9d:f1:aa:f6:c7:4b:70:5a:ad:92:
5b:ae:55:81:96:c2:17:2c:31:a6:de:6c:8c:02:32:
ee:40:3f:8f:73:17:d7:f0:ff:e1:dd:76:0b:11:3a:
1d:b6:b3:f9:fd:d2:8b:d7:69:84:bf:c8:45:26:3a:
f7:b5:0d:d7:40:45:b5:34:a9:3a:e5:e4:5f:df:90:
8b:2f:ed:b8:25:45:d0:84:0a:1d:bc:00:28:b6:35:
70:45:e9:11:2b:50:8d:37:97:22:61:99:f7:fc:eb:
d4:a9:74:98:10:42:e7:98:f5:89:a6:d0:db:b4:25:
f6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0E:97:64:9D:F4:3A:BF:E3:F3:90:96:A2:56:84:FB:73:58:C6:3C
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:14:9f:25:69:31:b2:82:b1:27:b0:2b:0c:00:a9:e4:34:2c:
d9:2c:82:d1:e5:07:1e:45:0b:7b:d1:9b:da:75:66:16:6d:c6:
0b:98:38:3f:d9:8c:8d:50:16:cc:85:fd:c8:38:a0:5f:6c:43:
27:a1:f4:53:9f:a6:64:d6:13:a4:73:3a:5a:a3:47:35:4d:0b:
ec:f8:3e:f8:7c:1f:dd:e8:ce:af:88:89:41:6b:fe:27:28:c4:
2a:44:cf:36:15:2e:43:a4:19:6d:3c:f2:c5:91:bd:75:5d:11:
c2:64:b8:60:44:86:27:62:c1:4d:91:96:67:f3:1b:55:d3:b5:
5c:e8:39:5b:04:8a:49:79:9d:64:20:67:1d:70:f5:04:88:1b:
a7:99:9c:38:e0:70:4f:40:2a:7f:c5:ab:20:2f:07:e9:c1:ca:
fd:41:a5:04:bb:83:72:db:a5:85:e2:0b:cc:4d:b2:df:52:b0:
47:e4:5f:7d:96:a4:59:7f:ca:2a:57:12:52:7e:b5:13:2f:b2:
3c:fe:47:81:58:22:ec:d5:50:7f:f3:ae:4e:e6:fc:30:1a:13:
e4:98:c3:2f:e8:c5:92:54:b7:4a:17:9d:c7:dd:6a:d4:c3:bb:
cd:11:62:a4:87:fb:5a:9b:68:02:e8:16:c8:e0:8d:7a:9e:96:
50:2f:70:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:47:11 2025 by rpki-client