Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json)
Hash identifier: f0h8TxR6J6fBY/CxT44ck+7X0ubyIm1AcuYLUq2NPJc=
Subject key identifier: 52:71:47:87:71:76:85:21:F9:9A:BC:28:24:09:84:C7:91:40:2A:03
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial: 0196797B51519197AE1E060DB28BF930ABF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
Manifest number: 04F6
Signing time: Sun 27 Apr 2025 23:00:46 +0000
Manifest this update: Sun 27 Apr 2025 23:00:46 +0000
Manifest next update: Mon 28 Apr 2025 23:00:46 +0000
Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: ujiL21kAkxeJOeaDxGtZ8Jd+m6OAO25Bjro1FG9g6So=)
2: S8Gv615Ih2EECVB1a2b3J3u_PZw.roa (hash: QLn7xaZ0/yy3B92jWZmiyfhzxbYSpkw1Q0HqcssnojQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:51:51:91:97:ae:1e:06:0d:b2:8b:f9:30:ab:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Validity
Not Before: Apr 27 23:00:46 2025 GMT
Not After : Apr 28 23:00:46 2025 GMT
Subject: CN=5271478771768521f99abc28240984c791402a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:b2:bf:92:1a:bd:01:34:66:2e:ee:fb:8f:
25:fd:e1:dd:04:d7:f5:97:ea:ce:67:3c:d6:f6:29:
81:cc:8a:43:df:44:1f:bf:84:1a:00:19:d7:73:e4:
32:74:a3:56:7d:26:a3:a2:83:41:45:ef:0c:08:07:
c8:d7:5a:56:96:22:1a:33:af:54:9e:39:7f:43:92:
29:f6:90:b3:9b:63:5d:64:76:46:54:f6:d1:fa:fd:
42:ec:fa:d8:56:f9:b7:9e:23:7b:ab:da:17:3e:e2:
d5:df:7a:b7:6e:aa:ea:54:be:5f:07:d9:6d:45:8a:
38:19:b3:82:f4:94:a5:db:e3:c5:4a:69:41:de:90:
ba:4e:c4:be:e6:05:fb:84:5f:b5:bd:58:5b:06:bb:
95:3e:53:73:6d:a0:c0:ec:c7:1d:37:35:f0:97:75:
03:15:8d:dd:6e:37:0f:d9:6f:59:03:bc:98:8e:a6:
b1:ca:72:1c:a0:5b:e0:cb:9f:aa:a2:0f:b3:9f:35:
48:9a:bf:a4:d3:5f:88:9c:56:02:8e:bf:12:18:ed:
55:5f:98:b9:a2:16:1e:2f:fd:8b:94:81:c2:17:a4:
2c:65:23:fd:c5:40:21:08:c5:57:d8:d5:9d:1e:2b:
5a:c2:6e:a5:05:52:b0:a1:ea:21:d4:97:43:31:03:
8f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:71:47:87:71:76:85:21:F9:9A:BC:28:24:09:84:C7:91:40:2A:03
X509v3 Authority Key Identifier:
keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:43:fb:a7:4a:9c:e5:96:a9:1d:ef:a0:1e:0d:39:d6:69:c1:
d9:87:d4:c5:1e:9e:30:17:a4:42:a5:2b:e6:a1:e2:2a:97:1e:
96:f0:72:ff:32:67:a3:c5:30:d6:e8:33:18:8c:58:d1:04:31:
b5:06:1b:dd:b2:73:0d:39:a9:60:92:42:9a:db:48:05:38:19:
d6:c5:d6:c2:0d:b9:b6:37:b3:7a:01:24:ec:4e:34:ed:52:fe:
cc:19:93:b2:a2:72:1a:3d:4d:60:82:c7:26:ec:cd:da:08:92:
a0:94:f5:f7:46:62:8b:0c:69:b4:cf:98:09:7b:be:a7:61:72:
38:71:85:92:27:d5:d9:e1:d6:f5:7d:95:1b:ab:b1:19:d1:1e:
11:da:54:de:ff:39:1b:74:a9:60:3e:2b:8c:51:9a:82:84:60:
df:b3:c7:ec:6d:95:e2:a2:0b:8f:46:c1:e9:be:de:27:d7:93:
77:7c:cc:9c:e7:e9:1f:08:dd:ba:3c:30:fe:0e:b8:ff:5d:9f:
8b:55:32:bd:0b:3f:ab:6f:2d:f5:5c:e9:c8:79:98:ed:b7:dc:
48:44:08:5e:12:b5:93:49:a6:d2:50:36:32:3f:54:f7:fc:90:
a8:b7:1f:bf:98:51:1e:f9:b7:cd:6a:76:9e:96:cc:2f:63:fb:
e5:72:91:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:17:36 2025 by rpki-client