Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: j1FnEXeL85DNqK8A0tUzAUqrhEpki6C1yO3b/+/ndPM=
Subject key identifier: E2:5B:B3:1E:74:D1:03:23:22:3D:A3:CC:15:A8:23:3C:D4:C7:E3:6B
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 019672D460301DB536D6D5C596ACAC52C3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 150E
Signing time: Sat 26 Apr 2025 16:00:42 +0000
Manifest this update: Sat 26 Apr 2025 16:00:42 +0000
Manifest next update: Sun 27 Apr 2025 16:00:42 +0000
Files and hashes: 1: 5A1rFRWiaoMZrd1W-j1DOiNHcxg.roa (hash: V+WxsJZcqfyEzzmw0OXvgqJRZOf8o70VUJRyRrh0lh8=)
2: dwjCitSclr7fGwprU9bQVIbfmCg.roa (hash: p2lC46dhETK6ft6AVZYruiB24S2hxZ7wuf8RUwFJV9o=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: +Wek1G61plZDGogdtmy7PXs4ukVrnv0cOCbAp5srCR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:60:30:1d:b5:36:d6:d5:c5:96:ac:ac:52:c3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: Apr 26 16:00:42 2025 GMT
Not After : Apr 27 16:00:42 2025 GMT
Subject: CN=e25bb31e74d10323223da3cc15a8233cd4c7e36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:59:8c:ed:6e:50:2a:36:6b:9e:0c:b2:b9:
f6:da:65:01:2e:54:c5:e7:0e:1b:a6:94:74:a5:f2:
8d:75:06:f4:34:0f:72:e3:cf:c7:2f:e5:14:98:62:
9d:95:35:7a:99:ff:eb:e1:41:24:64:9b:ed:32:ae:
b3:35:75:32:07:43:5c:fc:80:28:0a:16:29:87:25:
46:24:22:ac:a8:f5:21:63:59:6a:00:3e:0d:19:1c:
0e:8d:77:16:04:29:5d:d1:2a:94:88:f7:7b:b4:c5:
2d:b2:47:c3:44:de:bd:e0:6f:42:03:3c:4e:12:ab:
46:21:f3:72:71:ab:3f:17:53:61:ac:04:fc:ca:35:
0d:27:c6:c1:39:8c:f6:d7:8d:31:f9:c1:96:d2:4b:
39:9b:18:77:8f:10:8d:11:28:44:7c:dc:94:e0:bf:
a2:ba:5f:74:06:c5:a0:42:ef:a3:1c:ab:a4:14:41:
0e:9c:9d:83:39:8b:f7:33:7e:fb:99:8e:ea:53:bb:
c2:44:6f:5a:7e:e2:d0:ec:9e:f8:84:d0:0e:45:37:
05:73:53:11:15:ac:fb:0f:a4:cb:b1:41:df:c6:95:
43:80:3d:4b:b6:be:e3:39:b4:cf:3e:2f:3b:ab:37:
39:eb:42:da:de:0a:28:cf:95:d7:bd:6c:7e:79:88:
06:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5B:B3:1E:74:D1:03:23:22:3D:A3:CC:15:A8:23:3C:D4:C7:E3:6B
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e5:8b:5e:f9:4d:c6:23:84:7d:18:fc:f7:0f:5f:76:93:da:
81:eb:31:0c:57:41:6f:f7:a7:ce:20:37:e8:59:97:24:46:02:
d4:f2:82:c4:e4:89:d7:84:64:a9:62:47:ac:d2:16:13:37:85:
c5:7a:b9:a2:5f:03:5b:74:88:f6:6b:26:81:69:0b:70:37:b3:
d1:8e:d7:aa:26:02:ee:7c:f5:45:2e:56:a0:7b:64:22:68:c7:
e9:40:50:dd:05:29:4f:1e:d9:7e:12:2a:a7:7a:ed:36:2f:22:
1e:5f:92:c4:46:67:a2:cb:4b:e6:a0:4c:a2:37:53:41:7f:53:
4b:55:5c:d0:ea:4a:22:0e:b7:74:53:88:66:98:3e:4e:b8:44:
c9:f1:66:c6:df:3a:15:6f:b8:16:fb:88:c1:73:56:d4:3f:b5:
8b:f2:2b:80:de:91:2f:3f:51:df:83:3b:b6:79:17:fa:31:1f:
88:10:c9:ed:ce:a5:ff:24:94:57:c9:8d:8e:56:ab:73:a1:c5:
7d:b7:9c:c7:cc:9f:cc:d7:fe:cb:95:0d:b6:44:e3:0e:c2:34:
26:d8:76:10:29:75:f6:55:af:00:a3:9c:4c:da:db:50:5a:d2:
c3:fe:1e:05:3f:f1:60:80:f0:47:30:17:b0:6e:26:ff:a9:ce:
70:50:8d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:03:02 2025 by rpki-client