Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
File: lRZkUh1QOVkhL1WypZrsbSB7Cig.mft (raw, json)
Hash identifier: 3p/v44drVjyHqdvbFmH5pOX6CTyFsfggrtkQrt1yX7Q=
Subject key identifier: 5E:22:C0:07:7E:FC:A2:70:96:31:B7:3C:65:D6:CD:F0:A6:87:72:66
Authority key identifier: 95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
Certificate issuer: /CN=951664521d503959212f55b2a59aec6d207b0a28
Certificate serial: 0196786887DEFC722912E3986C47F0B961E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 18:00:38 +0000
Manifest this update: Sun 27 Apr 2025 18:00:38 +0000
Manifest next update: Mon 28 Apr 2025 18:00:38 +0000
Files and hashes: 1: IPg6gK3cvCBZgriElu-X9QULHhI.roa (hash: KfBBSFaoabvdCiHx1hEd3tUcsuSp0LUQmRosJtF9Y6s=)
2: lRZkUh1QOVkhL1WypZrsbSB7Cig.crl (hash: 5Q6Us0s06LkWs7vkTEe7FWodUcGsI+GGWXDzK0wkExs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:87:de:fc:72:29:12:e3:98:6c:47:f0:b9:61:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951664521d503959212f55b2a59aec6d207b0a28
Validity
Not Before: Apr 27 18:00:38 2025 GMT
Not After : Apr 28 18:00:38 2025 GMT
Subject: CN=5e22c0077efca2709631b73c65d6cdf0a6877266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:93:1b:44:1a:7d:aa:1a:69:7a:c6:35:65:
50:95:f3:db:9e:e1:81:7b:3f:c6:31:95:86:0d:4a:
5b:e8:2d:c0:3f:53:e0:e9:c3:82:95:48:ec:95:3c:
ff:f3:17:d1:63:bc:24:8c:95:1f:c7:0b:4f:99:8a:
c2:3c:9b:19:76:3b:f3:87:a3:70:4a:d7:bb:44:06:
10:91:db:7a:ed:3d:6c:31:23:4e:d7:df:e0:c8:dc:
4b:5b:aa:76:98:7b:ba:b1:aa:83:bf:a9:ce:64:db:
a8:cd:77:46:92:a7:35:4c:1f:9a:11:2e:55:60:45:
cd:a0:6c:b7:fb:94:78:47:59:3c:54:81:c1:88:ef:
39:af:af:7e:7f:c1:6a:c7:6e:3f:fd:a8:cc:6b:54:
17:a9:63:2b:23:5a:86:36:4f:1d:09:44:be:0d:53:
ea:92:80:53:71:d2:46:42:02:4a:7c:53:5c:df:d4:
b1:7b:cd:d7:22:9e:dd:3d:98:f2:59:46:10:0f:0d:
d9:ca:8f:eb:4e:70:39:83:dc:33:cb:3c:35:5b:77:
fc:15:09:30:10:5c:1c:e6:15:46:95:fc:c0:37:fe:
fb:78:08:1e:f4:c2:df:66:d4:6d:75:b9:1d:ad:5d:
82:3d:05:8e:84:66:91:52:e8:ad:ab:9e:1f:e0:a8:
4a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:22:C0:07:7E:FC:A2:70:96:31:B7:3C:65:D6:CD:F0:A6:87:72:66
X509v3 Authority Key Identifier:
keyid:95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7c:f8:10:5d:67:43:00:bf:b3:ec:50:69:e0:a7:87:39:d1:
68:d7:90:c6:d1:ca:93:f9:bd:00:c6:15:e8:6d:44:b6:ca:3f:
fe:1a:0c:14:4a:85:76:8e:f7:43:07:f7:1a:42:4a:81:6c:b3:
64:a4:56:da:6f:f4:7e:16:61:eb:87:0d:da:d8:5d:a2:43:ef:
18:8b:ef:b3:cc:95:89:e0:9d:1e:9f:54:d4:b2:48:bc:b5:97:
98:fd:75:3b:a4:26:21:fc:2d:50:94:34:1f:52:cf:26:7d:9e:
bf:94:4d:2d:a8:11:48:1a:0c:8b:37:87:a0:b1:09:26:07:80:
8c:ad:28:48:09:13:ef:ce:80:cd:c4:f0:a2:7a:d2:3f:68:fb:
f8:aa:85:cb:fe:f7:4f:a9:17:94:56:71:72:1f:6b:e8:3b:2d:
94:ba:f9:dc:04:8d:b2:d0:8a:9b:27:ef:66:3c:49:f8:b5:e0:
98:94:03:3d:e4:24:4f:76:bb:1b:94:b4:00:3d:a8:1e:58:dd:
6e:20:d3:36:b0:9c:62:35:09:03:8c:83:85:7d:4a:10:8a:5d:
df:ac:45:1b:1a:9d:2e:a2:91:45:fd:8f:cb:8e:e6:1b:63:2a:
25:a5:4b:c6:0c:ed:34:7e:03:9b:02:cb:32:fe:73:2d:d4:60:
26:85:d1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:05:13 2025 by rpki-client