Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: cZK3xv+CVxOfod+DBlcgT8YQKFGURK1zLNqyet0uljY=
Subject key identifier: 2C:91:2A:D0:8E:A5:64:14:3F:02:2F:4E:D6:26:EB:F1:A2:F6:8F:D1
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 01967BA078929D22E7DD37A137846D8E1A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 09:00:36 +0000
Manifest this update: Mon 28 Apr 2025 09:00:36 +0000
Manifest next update: Tue 29 Apr 2025 09:00:36 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: Nl7DBSwwVj11Zl4afXEQJZ91PlEqn8NaOqRjZQCk7wY=)
2: m61Skl38qNd_z8iy_icAt6gZ-a0.roa (hash: agPnne36nNKEttk3MarLpGi1Y49vXcfn+4zgZdtH3ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:78:92:9d:22:e7:dd:37:a1:37:84:6d:8e:1a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Apr 28 09:00:36 2025 GMT
Not After : Apr 29 09:00:36 2025 GMT
Subject: CN=2c912ad08ea564143f022f4ed626ebf1a2f68fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:ff:f7:b8:41:5c:0f:5b:9f:75:0e:2e:32:
ad:06:68:0b:f9:d2:ab:36:61:67:19:ba:46:a9:0b:
24:81:f6:52:94:ce:66:a7:7d:d8:88:e6:bc:74:9e:
a2:73:88:b9:b1:72:98:bc:e2:58:be:6a:ee:5e:3f:
6d:1a:53:4b:f7:9f:7f:a6:53:c4:da:63:80:10:21:
34:61:bb:5d:12:2c:f8:f9:99:70:9c:bf:86:a7:b9:
68:89:48:c1:1e:ad:93:7f:d5:8f:70:25:a3:3b:4a:
4e:39:31:d3:4f:76:2d:f2:c9:5b:7c:2b:9e:2e:e8:
e1:c1:c0:83:1a:d5:35:71:e5:60:d0:14:11:13:15:
88:d4:55:bc:50:56:ef:88:c7:2f:02:5a:f1:6b:04:
10:08:89:b2:fa:90:47:f6:78:31:90:d2:6e:ad:d7:
6c:2f:a9:a9:46:92:e9:86:32:17:41:d9:2f:0b:d9:
80:16:f2:85:a0:cc:1d:ff:e9:6e:c2:12:c8:55:76:
c8:6c:aa:7e:f0:a5:dc:9c:eb:04:b4:60:1f:c2:4a:
a0:1c:28:53:c3:fe:b3:ed:1a:75:54:ef:b2:17:5f:
02:4c:1f:47:f7:6c:e6:c3:e8:8c:6f:f9:40:a5:a2:
5e:32:1b:30:d9:4f:66:63:6f:76:5f:f6:34:a1:32:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:91:2A:D0:8E:A5:64:14:3F:02:2F:4E:D6:26:EB:F1:A2:F6:8F:D1
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2b:41:2f:8d:32:38:17:ac:d6:2b:49:a7:a4:37:c1:29:c3:
5c:a2:02:78:f0:91:94:69:95:49:66:95:c9:e5:58:bf:ea:74:
11:a4:f9:50:0a:a9:76:2e:61:92:8a:94:53:b2:be:26:42:27:
0c:24:e6:17:2a:94:ef:9a:19:e0:3a:a1:6f:f1:a4:66:df:71:
d2:d4:f3:13:44:85:f9:c1:86:92:0f:57:7c:08:6e:e6:0c:d5:
a5:98:ca:a5:33:bf:b2:40:b3:82:bc:0e:6e:8e:b0:68:67:70:
84:09:7f:8d:f3:d6:9f:0a:97:69:70:54:24:9d:d6:62:24:3b:
a8:da:a6:4c:b2:62:6c:77:54:b0:ad:0e:10:9a:c3:ac:da:47:
6a:a3:f5:20:8c:09:5d:e0:d1:55:c3:99:35:59:ba:77:0f:01:
9d:76:ec:db:96:ca:a7:a5:a1:4f:46:b3:e5:b9:37:b5:28:38:
e1:dd:64:0d:a6:44:dd:e0:1a:6e:98:57:b7:25:8e:03:ba:2a:
08:c9:a2:b2:d8:18:1b:8d:b7:51:9c:0a:d2:62:17:cd:1f:b5:
91:c9:f7:28:de:c4:22:ba:ba:a3:dd:04:9f:f2:10:f2:9e:38:
e7:80:81:8f:65:86:cc:f4:fa:b2:fb:df:71:5f:55:94:55:b3:
1c:7f:3a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:31:55 2025 by rpki-client