Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: yEvtXaYq7LR8093fukOAE1lWN2LegNtIWehaBd9xx/4=
Subject key identifier: FE:00:88:D8:6E:1B:FD:89:5C:A9:AD:1A:CF:47:58:93:B3:2E:0C:FE
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 0196748C0E55E67ACD5EAF3BE17336D7FF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 149E
Signing time: Sun 27 Apr 2025 00:00:57 +0000
Manifest this update: Sun 27 Apr 2025 00:00:57 +0000
Manifest next update: Mon 28 Apr 2025 00:00:57 +0000
Files and hashes: 1: Kvab69Fm55apwC6CNn_puTpqnco.roa (hash: SXQsTZgWdcQi8ndza2+PpabIjMyNvdIkKjFoA2OkVbo=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: cxVuhNED3+/cxdVnFy1jeczww7tjJb/57XzBh3IIIXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:0e:55:e6:7a:cd:5e:af:3b:e1:73:36:d7:ff:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Apr 27 00:00:57 2025 GMT
Not After : Apr 28 00:00:57 2025 GMT
Subject: CN=fe0088d86e1bfd895ca9ad1acf475893b32e0cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:e1:c1:8c:e8:37:d6:d5:12:7f:bc:a5:7d:
ef:e3:72:6f:e8:56:e7:49:59:c8:b8:75:55:b1:1d:
ae:92:22:4e:8e:9f:cb:a8:d4:57:5a:f5:63:b9:aa:
f8:cb:ad:d0:b1:a7:e2:97:1c:8f:9a:d0:f9:ae:33:
93:a2:40:51:5e:45:9d:ab:e1:5b:6b:95:25:19:95:
fe:85:0d:35:7c:1c:df:c8:45:13:cb:fb:3c:21:6b:
73:d6:76:53:b7:74:05:d6:bf:ca:47:93:d9:6f:5f:
af:9b:a2:3e:89:08:dd:f8:39:c3:bb:10:aa:4c:63:
e4:a5:30:2e:b9:71:8f:f8:16:70:69:1f:a3:d6:66:
0d:62:c2:ff:9b:15:cf:5b:f6:64:c9:a9:00:7c:69:
1a:a8:ad:7d:82:67:25:91:3d:4e:09:8b:95:4e:23:
32:76:99:bd:9e:fc:a9:19:b0:de:27:5a:9c:05:f6:
f5:87:9d:28:05:24:fd:ef:48:0c:42:63:0d:59:9d:
81:e0:f8:5c:56:6d:54:3d:d0:37:37:03:3c:8e:50:
8b:80:fb:3b:1b:61:08:92:29:ff:4c:40:b5:a1:71:
56:7c:8c:ea:f0:e9:21:fd:c0:e7:c6:be:0f:b0:e5:
92:0d:8c:5e:f4:4b:c1:19:d3:a5:3b:51:48:ff:b9:
27:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:00:88:D8:6E:1B:FD:89:5C:A9:AD:1A:CF:47:58:93:B3:2E:0C:FE
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0b:f5:de:ad:b7:c6:91:72:2a:29:42:53:e5:98:25:7c:6b:
09:21:91:cb:53:97:64:a2:f4:70:cd:ce:92:9a:68:4d:bb:91:
d3:06:d5:b8:3b:e2:14:73:42:7c:fb:f7:cb:ba:d8:73:7a:8e:
ad:08:4c:00:be:f8:45:0d:ec:4f:c8:c5:a4:56:1b:ca:b8:53:
61:75:a4:8d:2c:7b:85:b1:21:b6:cf:1e:10:d6:06:ae:ae:af:
c1:2a:f2:f9:3f:14:03:06:1c:49:43:60:b6:c7:ea:cb:a1:25:
7a:fa:df:4a:36:77:fc:13:9d:10:4e:00:5e:69:26:01:70:64:
9b:b3:4e:f8:1b:39:56:1e:0d:1d:64:93:14:4f:e7:36:34:f8:
46:9f:8c:f7:d6:fc:a3:d5:59:15:72:14:41:5f:49:7b:49:f1:
92:bd:cb:fc:e6:d9:3c:67:d6:f3:5b:b6:45:26:87:21:a7:50:
c9:9c:20:ce:76:39:57:64:11:83:f4:d7:03:11:39:13:18:5f:
fc:f7:99:29:b1:77:ea:5a:2b:d9:74:c3:ee:92:53:9e:f9:0a:
c3:09:65:b0:91:0a:81:24:61:5e:ac:90:9f:87:9d:7b:2c:51:
49:94:06:70:fe:34:69:00:91:48:f8:68:d9:09:5b:a7:7e:91:
32:27:d2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:36:24 2025 by rpki-client