Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
File: l15fSPU6jbnKYPqPGDfQfzGREE8.mft (raw, json)
Hash identifier: 2Z57m2PeyDi2KT2FraAUczWeRhOKzwIFMLRXY8hbRyo=
Subject key identifier: 5E:0B:92:58:A5:39:30:4F:D0:98:D1:BC:59:EC:E5:9D:E9:00:C4:54
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 019684DA43A0C68E177E35636B584C34A924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
Manifest number: 0194
Signing time: Wed 30 Apr 2025 04:00:18 +0000
Manifest this update: Wed 30 Apr 2025 04:00:18 +0000
Manifest next update: Thu 01 May 2025 04:00:18 +0000
Files and hashes: 1: VmXkaG5WzI9Vz_7xcXFAL06DAoc.roa (hash: uKPs/SrJH/MnTw4fYsxVa8cqGkMc8R9CKa5VOSutc0U=)
2: l15fSPU6jbnKYPqPGDfQfzGREE8.crl (hash: jZmdHck41fw+OK9DuhpZBvkn+6ActAYt2k1dMAVkb0k=)
3: t42bTlVzekO4_zka2dM08NYoS0o.roa (hash: k4lNjjF23Ae3Sbhg3LYDkwgC4ol0mKxgVNJCg94oeiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:43:a0:c6:8e:17:7e:35:63:6b:58:4c:34:a9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Apr 30 04:00:18 2025 GMT
Not After : May 1 04:00:18 2025 GMT
Subject: CN=5e0b9258a539304fd098d1bc59ece59de900c454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:71:a6:8a:9b:9c:d5:cf:71:e6:f0:4f:89:
bf:07:f2:8d:11:00:83:2f:20:1c:17:93:1f:14:d4:
ab:ab:96:f4:ef:85:8c:68:b1:16:0d:39:ae:e9:ba:
2e:82:21:af:0a:20:38:22:5b:fc:ca:30:bb:fd:ae:
be:0c:ab:01:de:88:73:d0:54:93:cd:e4:7a:d0:e6:
f6:2b:2a:1c:97:5a:46:94:dc:b0:82:4e:d0:32:07:
34:55:5c:da:76:f5:a1:84:2a:1f:59:e4:00:da:76:
08:9f:4e:dc:26:17:21:73:07:c6:14:c1:99:2e:f8:
7e:92:e2:f9:d4:91:0d:7c:ce:fe:41:0c:60:22:8b:
e4:2c:db:4a:13:1a:49:f8:66:21:7b:14:d5:c4:f4:
a3:8a:75:24:d7:14:1c:85:6f:6d:5c:e6:40:c7:06:
b4:3e:46:1d:87:2a:be:52:c4:06:e2:82:08:0f:87:
ca:67:a3:8f:12:14:f1:bd:48:96:b8:57:dd:49:82:
e0:87:17:6b:44:8f:16:0a:68:aa:7f:c1:70:a5:9f:
1b:07:85:78:55:d7:bc:2d:76:91:eb:32:f4:b6:81:
10:7a:51:86:54:6d:12:0c:a5:bd:67:c9:5d:90:d8:
32:f7:57:7d:d1:f2:a2:43:33:6d:2c:c8:b7:ba:12:
05:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0B:92:58:A5:39:30:4F:D0:98:D1:BC:59:EC:E5:9D:E9:00:C4:54
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:3f:e9:e1:e5:fc:77:27:10:9c:fb:b6:2e:c7:d1:43:49:36:
52:65:9e:50:88:91:46:5d:d3:7e:1d:ef:0f:a7:3d:8b:80:0b:
c0:35:9c:00:d7:90:3f:23:a8:30:ee:c6:01:ed:3f:75:70:bb:
84:e5:37:5a:ac:2e:e2:75:30:bf:28:e6:5b:2b:38:ff:99:84:
7d:46:b6:f9:3d:7b:92:ad:2e:ff:f2:af:1c:33:ae:49:62:1b:
1d:57:5a:1e:9f:c4:8c:53:51:01:7c:59:8b:fd:b5:71:1a:d1:
3e:28:6e:0d:76:45:9d:c3:bc:03:db:06:b7:66:05:e1:52:01:
53:03:07:83:b4:7f:d3:b6:73:48:f7:a6:52:22:2d:89:21:8c:
44:be:89:5d:f8:a1:5a:8e:d8:01:8a:94:30:e4:57:57:3b:eb:
df:95:f5:93:16:83:aa:0c:c6:ea:28:6f:98:e3:ce:c9:31:28:
b1:9b:9f:62:65:98:c2:80:a4:82:ac:b4:93:69:cf:37:d8:ff:
f3:b5:7c:a0:f4:85:7e:4c:f7:34:9c:d4:28:fc:52:ae:69:f4:
e0:69:01:c4:a9:23:1c:8d:25:52:40:d5:97:10:d4:80:f2:ef:
af:35:34:7e:03:c8:39:24:13:61:57:78:cd:8a:65:37:7d:cb:
33:66:62:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:11:10 2025 by rpki-client