Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
File: ljKargKzZu0aAbUqwzq-dgWTqAY.mft (raw, json)
Hash identifier: WmAB3gUt41FkjGcRHuJo99myo3JNC7o5b6/oKCf3pRI=
Subject key identifier: F4:0C:81:AB:4F:9E:4B:1F:14:3B:BC:E8:63:19:76:C1:AD:87:AB:67
Authority key identifier: 96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
Certificate issuer: /CN=96329aae02b366ed1a01b52ac33abe760593a806
Certificate serial: 0196759E47B6DCA114E428B98CB2A73F4E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 05:00:29 +0000
Manifest this update: Sun 27 Apr 2025 05:00:29 +0000
Manifest next update: Mon 28 Apr 2025 05:00:29 +0000
Files and hashes: 1: 1-KZB79paRJTfTrr9kd-PkIHLHE.roa (hash: bYbdjY4cixBeOLb4k7GWSfLpufuJby7+JSTFYAw9Lj0=)
2: ljKargKzZu0aAbUqwzq-dgWTqAY.crl (hash: 6DS7FBq/BqBShlj5GKbbomO6RaXRNJSJchAejeK6ofI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:47:b6:dc:a1:14:e4:28:b9:8c:b2:a7:3f:4e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96329aae02b366ed1a01b52ac33abe760593a806
Validity
Not Before: Apr 27 05:00:29 2025 GMT
Not After : Apr 28 05:00:29 2025 GMT
Subject: CN=f40c81ab4f9e4b1f143bbce8631976c1ad87ab67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:37:2b:34:4e:1f:08:db:fe:79:11:e9:f3:
22:40:d9:6d:4b:63:cb:a3:0a:17:1a:5d:eb:2d:b0:
08:3b:a4:fd:79:d6:14:8b:95:86:17:26:70:31:02:
ee:1b:fb:21:3c:cb:85:c2:71:37:31:a2:b1:4f:6b:
aa:98:4a:9c:fd:84:72:23:73:4b:23:df:8e:0c:19:
14:da:fd:69:11:5d:a8:fc:5f:17:96:8a:d2:99:3b:
83:9e:d1:8c:4d:48:7c:ac:5b:ba:d8:3d:74:4b:83:
74:03:ea:12:3d:9f:8c:c5:1d:2d:0c:b2:77:78:fc:
b1:32:2d:b1:0b:b0:a6:ba:7f:4a:fd:dc:d8:32:e3:
96:c7:bb:9f:73:5a:a9:72:07:74:49:a2:b2:71:f9:
bd:89:00:08:58:fc:6a:1b:d8:84:c1:06:eb:a6:d8:
51:22:91:71:e1:cd:b8:0d:54:44:00:91:95:f6:9e:
a3:e6:78:56:6d:42:30:7a:5b:79:b3:ed:5e:67:64:
3e:72:ea:36:19:ff:be:f1:5d:1a:74:60:85:51:7e:
6a:be:9b:59:94:f6:60:f0:14:b3:4e:a4:ae:47:f6:
87:4a:bb:a7:c8:7e:ef:ad:32:42:95:9a:c1:81:56:
26:02:a7:f5:6a:f5:22:ad:86:9e:f9:9d:88:05:84:
f2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0C:81:AB:4F:9E:4B:1F:14:3B:BC:E8:63:19:76:C1:AD:87:AB:67
X509v3 Authority Key Identifier:
keyid:96:32:9A:AE:02:B3:66:ED:1A:01:B5:2A:C3:3A:BE:76:05:93:A8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljKargKzZu0aAbUqwzq-dgWTqAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/14bca5-9046-4876-8283-ae93def510c2/1/ljKargKzZu0aAbUqwzq-dgWTqAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ac:fc:fd:0c:3e:e4:f1:62:3b:5e:79:06:e0:ad:58:75:28:
7c:ad:ed:5f:b2:ab:47:ed:6f:91:bc:e8:ee:5d:8d:07:47:66:
c4:fa:83:12:5d:d2:ed:7a:15:81:61:ed:65:b8:5b:22:7a:e1:
45:d1:c4:ea:16:71:ac:e6:b6:60:e1:c7:3f:6f:e7:7e:75:47:
77:17:3c:06:d1:78:9d:7a:fe:58:12:bb:a0:74:40:6f:a6:0b:
3b:eb:fc:29:75:c1:1d:f0:db:f7:c9:b5:9f:43:30:cd:98:98:
bd:68:b5:24:8a:84:88:c3:8a:9d:96:95:23:fb:fd:a4:57:17:
76:af:83:b4:e1:69:72:6a:2e:be:2d:f0:97:89:b4:d7:fb:8f:
df:f8:b7:b5:4f:f1:6f:57:1b:9e:70:b8:14:b3:44:30:43:54:
88:50:be:a4:91:b4:13:fe:ad:1e:a0:03:f0:1a:46:f4:f8:84:
d5:60:e2:d2:2c:d9:ae:a3:57:47:26:c9:b6:d6:62:ca:3f:c8:
fd:e4:00:a8:54:93:6b:b3:27:49:10:8a:99:a2:0c:19:3b:35:
40:54:82:a2:bb:df:18:34:43:cf:27:b5:34:57:fe:4e:70:8f:
ed:0c:82:61:9d:02:0c:68:75:bd:2f:58:68:12:4f:d8:a7:41:
f3:1a:90:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:24:03 2025 by rpki-client