Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
File: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft (raw, json)
Hash identifier: n8Fo1O1VONhvkRFIgCUld+0Ky5J/I7a0uYc7h3jkdXo=
Subject key identifier: F7:61:21:B5:C8:3F:AE:12:44:21:19:00:43:EE:B4:4D:01:4E:E0:4E
Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
Certificate issuer: /CN=d0baab9bd8c69d07b6501147543df74270a33a21
Certificate serial: 0196914C2D0B7C2A92B10CE736713B07FFCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
Manifest number: 151E
Signing time: Fri 02 May 2025 14:00:10 +0000
Manifest this update: Fri 02 May 2025 14:00:10 +0000
Manifest next update: Sat 03 May 2025 14:00:10 +0000
Files and hashes: 1: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl (hash: snOMW4u0ceo2JEoIjANp1LADwXwd9RAERrL/3fgJJyM=)
2: juIbMy-ZOag5FvgvGV0o5yTeEN8.roa (hash: +hUGE34YMtW1+houvKxGq1sllVhVFyMUSU1KkXLa0fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:4c:2d:0b:7c:2a:92:b1:0c:e7:36:71:3b:07:ff:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21
Validity
Not Before: May 2 14:00:10 2025 GMT
Not After : May 3 14:00:10 2025 GMT
Subject: CN=f76121b5c83fae124421190043eeb44d014ee04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:16:cc:98:c9:4b:af:fc:2e:cc:3d:48:20:
04:21:ff:d3:1a:97:c6:d9:3d:47:01:26:2f:a1:c4:
5b:17:80:38:0f:4e:f6:30:82:09:43:7b:bd:25:84:
c8:68:1a:7d:26:b2:46:2f:7e:a0:ca:c4:49:70:65:
fe:72:ae:74:6e:1e:52:be:17:b2:87:7b:0b:35:f4:
2d:fb:54:7b:8b:68:e7:73:12:c1:36:3f:44:0c:3b:
63:d2:ee:48:d9:2c:dc:ab:9f:24:4e:ed:ef:45:62:
6d:87:47:1f:92:db:ab:a2:66:7d:f5:42:f3:e8:d1:
c1:4d:bd:02:34:f9:ac:bb:ef:cc:64:9d:12:58:d0:
ac:b0:17:23:34:ab:15:74:de:25:83:cc:30:d1:2c:
87:b3:4c:46:7f:a2:c1:bd:dd:5d:7d:cf:6f:53:f2:
60:5b:83:1a:b7:0e:20:7a:27:ba:0a:0f:32:ae:2b:
6c:a1:c6:76:41:80:90:ac:e4:d1:cf:46:99:21:d7:
f3:85:b5:13:90:fd:2c:0d:7a:9d:10:aa:ab:92:eb:
b7:7e:d3:9e:3c:ea:8f:bf:2e:4b:a8:97:af:48:43:
82:11:cd:ea:db:f2:ff:30:2e:04:17:6e:30:be:6e:
2b:81:62:91:95:9e:06:a5:13:ec:ba:45:83:4d:fb:
b3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:61:21:B5:C8:3F:AE:12:44:21:19:00:43:EE:B4:4D:01:4E:E0:4E
X509v3 Authority Key Identifier:
keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a5:63:03:b4:1a:96:63:18:5b:7e:1f:bb:1e:c9:a7:7f:90:
16:0b:c8:be:a8:ef:17:17:de:c4:e4:26:cc:ba:6d:2b:fe:56:
f0:c9:58:04:fe:66:68:91:01:b7:6f:8f:3e:ce:3b:2c:c2:82:
58:4e:9a:ee:31:66:cc:30:ed:59:43:09:f1:b5:c2:32:20:1d:
3c:ce:fb:06:df:b0:3d:53:82:19:35:60:09:a2:c9:ab:a0:cb:
67:24:b2:13:17:94:52:8f:7a:08:f4:9f:e7:28:90:7a:dc:6b:
63:1b:6b:0f:3b:0f:03:06:cd:81:8f:87:13:b0:48:70:84:2a:
ed:34:a3:c9:de:30:4f:52:03:ed:4b:59:96:df:f0:d8:b3:e4:
91:b5:53:57:05:40:08:30:fc:9e:84:10:48:4f:d7:98:76:6d:
13:0e:14:b2:c9:6b:0b:af:d3:5c:87:8a:38:36:eb:02:ac:95:
d9:3a:f9:28:d1:b0:90:7d:75:24:61:bc:2f:af:bf:a0:a6:96:
67:f7:99:db:c2:6a:d2:2e:ab:d6:83:08:56:11:9d:5e:f1:fd:
c8:0e:c4:20:6e:2c:6e:fa:e3:bf:36:2b:ca:c6:09:75:9a:71:
7a:cc:fe:f4:a4:cd:48:4d:b7:d9:cb:33:fe:07:e8:f1:5f:1c:
0e:14:60:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:16:06 2025 by rpki-client