Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
File: _L5iN4u1gK9O1wv6NavIQJRdeAM.mft (raw, json)
Hash identifier: T9L1LOyt6S1xWjG8x8r2rVrNqn8KMvkhnSpxDPNRBSI=
Subject key identifier: 38:08:18:8C:A3:54:10:AF:03:6C:3B:E9:B3:93:CD:37:65:0F:07:41
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial: 01967755E6893DD00C810022D16516BFAA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
Manifest number: 0C62
Signing time: Sun 27 Apr 2025 13:00:40 +0000
Manifest this update: Sun 27 Apr 2025 13:00:40 +0000
Manifest next update: Mon 28 Apr 2025 13:00:40 +0000
Files and hashes: 1: QnsaffS-YNNtCHhHEhQ4OKBUBSo.roa (hash: jUwDngRPHw2N9VFfgK1oar/80VGpjjFHaEr/YKYFVpE=)
2: _L5iN4u1gK9O1wv6NavIQJRdeAM.crl (hash: r9aUlk5wcpCEbQMQuftoCOSeEzzyz0UEn9XfxbzeFVw=)
3: qNut__4tdZLk1BbU8qRMsO7FLqk.roa (hash: 7IpgvtFdow3hVZD4yaQg6efxiw2tuEtQLh9oReYtwg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:e6:89:3d:d0:0c:81:00:22:d1:65:16:bf:aa:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Validity
Not Before: Apr 27 13:00:40 2025 GMT
Not After : Apr 28 13:00:40 2025 GMT
Subject: CN=3808188ca35410af036c3be9b393cd37650f0741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:b3:2f:c9:87:28:08:86:63:f3:94:18:85:
83:d7:12:1a:85:49:70:0d:5a:dc:00:a4:f9:34:f6:
81:2c:c2:a8:84:8e:90:f6:ef:df:b9:0d:d6:bc:23:
ae:df:87:f9:cd:c6:af:65:a7:82:ac:27:54:b4:a5:
e6:bf:d6:fa:15:d6:25:9c:30:ea:59:47:c2:9b:5b:
35:61:0c:5f:cf:fa:73:76:1a:9b:47:83:7b:ba:04:
54:6a:a2:26:e2:dd:b0:1e:2c:5a:c8:b7:85:34:96:
42:fa:de:0b:83:27:bb:88:f6:4c:2b:00:61:dc:03:
51:3b:99:a3:01:08:83:73:ef:84:e0:df:f7:02:01:
7f:5a:13:8a:d8:fc:a0:d5:32:b1:82:28:53:1e:fa:
ac:c9:a0:42:43:14:3f:68:4e:29:1a:56:ed:6c:de:
0d:6b:22:0d:7f:7e:b9:c4:83:0b:bd:81:73:7d:fe:
5d:e0:ec:f5:b6:1a:dc:39:b6:28:e5:fb:27:9a:45:
74:df:b0:96:fd:6c:b3:09:ec:ed:9d:fa:2c:c6:91:
23:33:58:ca:7e:43:01:49:3a:b9:15:07:11:86:8c:
af:03:5f:40:00:5d:b6:2a:7a:ad:12:5e:ae:f7:e3:
db:75:ed:3c:54:70:c1:26:23:79:26:3c:39:6c:3f:
2e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:08:18:8C:A3:54:10:AF:03:6C:3B:E9:B3:93:CD:37:65:0F:07:41
X509v3 Authority Key Identifier:
keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:13:98:83:a8:3d:73:c2:67:38:31:d2:ee:38:c3:8d:d0:6e:
45:e0:ea:0d:64:13:02:1a:d4:c2:57:a3:12:3a:65:98:bd:7c:
d6:5b:8d:ae:84:af:d5:30:4a:1b:5d:41:ca:e7:20:1e:7f:07:
e5:bf:03:4f:f5:ab:a3:40:06:8c:18:e2:25:8b:08:aa:da:d5:
93:be:8c:ff:f6:78:53:dc:48:1d:8e:16:82:dd:97:54:e5:7a:
e8:8e:dc:23:97:cf:ac:a5:be:ff:3c:c8:ca:f0:c4:8c:9d:8c:
bc:bf:25:90:f2:1f:61:b3:00:dc:6f:71:a2:0d:80:18:a4:f6:
e8:e8:6d:fc:b1:72:ec:6c:66:df:d3:80:62:fa:28:b5:b7:93:
1b:c5:2c:e1:83:12:d8:1b:71:97:8a:ee:2d:48:1f:65:85:d8:
4f:e9:40:6e:ae:d5:b5:5b:d0:fd:63:d6:b1:1f:30:4f:a6:8c:
c8:f5:89:80:0b:3b:e0:06:f4:35:5e:e6:14:40:39:dd:03:d9:
58:a0:60:69:ac:39:ac:df:64:9c:3d:49:3d:61:2a:cd:9a:02:
ca:22:57:8d:13:a8:68:e9:ca:b3:78:8b:a7:1d:b0:da:65:f2:
ca:34:fc:4b:86:7b:5c:ae:31:0e:32:07:76:0d:38:81:6e:93:
68:67:36:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:10:55 2025 by rpki-client