Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
File: lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft (raw, json)
Hash identifier: 6/KQhKWk/g6lRVaUmZAx1zXdIIakcaRRhyv3dx46rNI=
Subject key identifier: 85:EF:5F:AD:03:68:07:38:AB:AD:AD:D2:71:BB:BA:86:C6:89:25:84
Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
Certificate issuer: /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Certificate serial: 0196846C5DF8C68E1E66ED8C23A80231496E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
Manifest number: 1515
Signing time: Wed 30 Apr 2025 02:00:16 +0000
Manifest this update: Wed 30 Apr 2025 02:00:16 +0000
Manifest next update: Thu 01 May 2025 02:00:16 +0000
Files and hashes: 1: GjUJtXzmRKM2Vtkil_fh95z7NdM.roa (hash: NJXWhpjg7woXcdhVu/ucxszei5ss2Dto0kjEgZT65S0=)
2: lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl (hash: dfO1BJ6FvWF8PaOvzlXkSGcEjflbKEL8UUvwaOZfEo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:5d:f8:c6:8e:1e:66:ed:8c:23:a8:02:31:49:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Validity
Not Before: Apr 30 02:00:16 2025 GMT
Not After : May 1 02:00:16 2025 GMT
Subject: CN=85ef5fad03680738abadadd271bbba86c6892584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:e2:3b:dc:55:55:61:85:93:b9:da:c8:a7:
e9:9a:c5:50:b4:52:46:10:41:6c:37:40:6b:2c:d4:
47:00:6e:9c:08:0a:7d:4b:a1:6d:a4:58:0f:0c:39:
cb:46:8c:fc:df:3f:50:56:c5:e6:3b:2b:be:a6:db:
b6:35:b3:90:78:b4:03:48:65:55:d0:29:2e:8e:d7:
4d:f1:cd:70:c1:49:b5:70:b5:fa:73:e6:8e:1a:61:
79:d7:43:fa:51:b7:f8:18:be:82:d9:ff:29:2d:54:
e7:1d:f7:a9:0f:1d:d0:c3:1a:03:4d:3c:37:64:47:
42:55:97:5a:6e:0e:23:ca:b0:05:17:eb:47:9d:76:
f5:88:e9:7e:1f:3c:5f:ee:c9:84:b3:55:31:52:ac:
a4:97:f0:b2:66:55:b9:a4:ac:4a:44:7e:5c:f4:0b:
e2:47:ac:3d:ee:d4:a2:52:5e:8f:5c:95:d2:5a:f3:
93:0e:79:21:d4:71:77:87:10:a1:36:23:86:b7:b6:
a7:cc:70:63:ed:1e:a8:b5:b7:39:03:25:14:6c:96:
58:6c:fb:14:fb:c7:93:63:27:7d:b5:f8:db:a6:d8:
05:7f:d2:b3:ee:09:07:60:03:ef:6f:b1:a5:01:71:
4d:e7:5f:91:f6:f6:0e:4c:86:c6:9b:5b:83:d8:e4:
8d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EF:5F:AD:03:68:07:38:AB:AD:AD:D2:71:BB:BA:86:C6:89:25:84
X509v3 Authority Key Identifier:
keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6b:74:59:e8:fb:6a:29:2c:da:3c:55:7a:a1:9a:03:dd:50:
99:21:c5:14:16:35:6e:c7:c8:6f:f4:84:84:70:bc:50:cc:12:
22:2b:cc:62:23:ee:b7:09:31:80:56:92:d7:ca:a7:69:58:47:
35:6f:42:08:b8:ef:61:e1:2c:05:5e:6a:4a:e7:2a:e5:a0:49:
a2:06:82:9c:16:fa:07:93:b5:3b:86:d7:12:a3:e0:b7:6a:09:
a0:ba:14:59:77:53:74:86:fb:d0:21:98:7e:1e:e2:11:b9:8d:
2b:f7:33:32:2a:33:d7:ca:d0:93:07:71:fa:67:f3:23:e1:28:
24:d3:11:2e:ba:56:1e:52:e2:a5:0a:47:48:f4:81:87:fa:a3:
f6:b6:db:4d:93:62:d8:72:02:4a:7f:92:c2:51:b3:87:79:71:
18:e6:4a:c5:e1:78:43:0f:f9:65:9b:f7:54:17:8f:67:ad:e2:
4f:ec:34:6c:0a:4a:60:31:e6:24:d2:c3:76:35:5b:13:14:b6:
40:13:dd:be:50:52:07:0d:77:bc:16:96:64:9d:c6:7f:45:e4:
61:8c:ef:bd:3c:75:c8:e0:3f:d6:c3:2f:2a:2d:e8:8c:ea:28:
5b:28:3e:ee:63:d1:52:14:00:75:aa:a7:56:6a:a4:9e:d4:84:
36:23:73:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:01:41 2025 by rpki-client