Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: zYg0hPTI7QGDBfHG8rvffe5ud9sn545ZCBPXn5Tm0HY=
Subject key identifier: 0B:21:B2:B7:44:D7:EF:40:2B:4E:AD:59:B7:EF:9A:EC:AD:AE:A7:46
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 01967B696D32EFC32B476E3CE4615AFE400A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 151F
Signing time: Mon 28 Apr 2025 08:00:28 +0000
Manifest this update: Mon 28 Apr 2025 08:00:28 +0000
Manifest next update: Tue 29 Apr 2025 08:00:28 +0000
Files and hashes: 1: 6M8HqKSI22ar6eaAcnn8ev1P9AQ.roa (hash: nVlGdB/dQUdpvwsW+Z7Kxz9y2rH9JWzBWwfpv9z8khM=)
2: PKCcLn7gw6Ub1teeDxDVaIyuinc.roa (hash: XdK6goNbx5CXhLqA/axUAjiyoFFcbKjnqngpuHtnyls=)
3: dN1vRCcHRSnbvQADNvtYm9Gw-TM.roa (hash: D+OiPGlBYkixwnt9NBRJj4rRA3Pw0fqCQSZtwrK+kFU=)
4: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: iLJRkLJDF5to79u6Xcls4/IqLUBM0XcIqINHH72HzIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:6d:32:ef:c3:2b:47:6e:3c:e4:61:5a:fe:40:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Apr 28 08:00:28 2025 GMT
Not After : Apr 29 08:00:28 2025 GMT
Subject: CN=0b21b2b744d7ef402b4ead59b7ef9aecadaea746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:79:47:f7:4a:49:18:59:e9:2c:79:e8:eb:08:
cc:b4:cb:03:f1:a2:b9:aa:f2:1f:06:64:04:92:d2:
24:da:8d:13:de:53:e3:b7:a9:d9:33:fe:e6:b5:38:
04:53:3d:10:49:cd:99:a6:fe:1b:bd:88:09:24:f0:
24:c6:9d:2f:e6:c3:39:9e:63:b1:22:fb:34:77:9d:
9a:de:a5:c5:0d:52:fa:54:e3:ff:9b:9a:bc:e9:a3:
45:46:e4:af:e9:0f:82:39:f0:bf:1d:ec:e4:06:f8:
2f:54:da:85:b8:57:f4:9b:aa:72:7e:35:4d:e0:f7:
50:f6:d0:37:43:3d:2f:32:83:c8:be:a2:85:f3:86:
31:c2:74:b4:80:d4:ad:e3:47:9a:b7:ff:5c:1e:26:
cc:5e:d5:02:fe:d5:1c:4c:74:91:a8:3b:64:6d:c5:
71:44:b9:b6:ed:fb:a2:ef:c1:be:35:e1:98:52:f3:
79:5c:55:f1:58:78:8b:69:1c:5b:dc:b1:a6:e9:a9:
30:4d:52:4e:4a:a2:88:a4:9d:fe:89:e1:e5:4b:a0:
95:1e:66:7a:0f:77:43:1a:1c:b3:f4:fc:80:c2:a0:
f4:5c:a0:d4:29:c3:55:2f:8a:6f:72:c2:a8:28:31:
64:37:47:4e:3b:26:a0:0f:93:53:4a:42:2f:8d:c8:
8b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:21:B2:B7:44:D7:EF:40:2B:4E:AD:59:B7:EF:9A:EC:AD:AE:A7:46
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:47:52:54:3b:c4:88:1f:fb:89:ad:97:73:ac:9c:55:43:47:
8d:00:2b:d2:e7:a4:63:2e:39:0a:f5:c3:dc:d6:84:bc:ae:31:
18:fe:65:16:ae:a8:71:ab:4b:6a:69:5c:67:8b:5b:fd:93:d0:
b5:ca:63:8a:bf:8a:f2:16:d6:db:6c:9a:c0:6a:4e:56:14:1b:
20:94:2b:b0:d6:2a:ee:79:48:b2:ea:c1:a4:f1:7b:cf:b9:2b:
48:a6:a4:b5:99:52:95:06:13:dc:3d:e7:59:71:31:09:d5:32:
86:d3:b7:12:d7:6d:b1:87:37:cb:df:e9:27:9a:41:b7:cd:96:
d8:fd:ec:78:a8:e3:0b:55:af:a2:20:26:53:6d:19:4b:99:97:
cf:c5:9b:70:b3:f8:c2:21:11:90:75:fb:0c:b1:50:88:b6:80:
2b:5c:0a:12:2d:90:a4:7d:de:ec:bc:86:b2:19:60:ef:58:7c:
a6:e4:62:a1:a3:0d:e7:84:32:74:3a:26:99:36:da:42:a7:5a:
08:7f:4f:5a:92:4e:9f:2c:dd:a0:74:d5:ec:9e:3e:ea:98:17:
00:e9:9b:1a:73:e3:d2:0a:09:34:cc:9d:71:67:7d:32:87:9f:
f7:7e:98:be:20:30:6c:fd:b7:f6:b3:96:91:49:43:e3:4b:65:
50:24:36:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:47:46 2025 by rpki-client