Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
File: lRTVqEAEnUQt83dEU5TfcZIBp3M.mft (raw, json)
Hash identifier: O/CHWn3kHF2WTyznsYqxIdWlIbbixiTiqDn5B4XoYdc=
Subject key identifier: C5:5B:75:D1:F8:EF:87:EF:C8:F4:42:2E:E3:92:E8:B4:D7:B5:A3:87
Authority key identifier: 95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73
Certificate issuer: /CN=9514d5a840049d442df377445394df719201a773
Certificate serial: 01967378FFF5C861045276DAAD6043566803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
Manifest number: 0354
Signing time: Sat 26 Apr 2025 19:00:31 +0000
Manifest this update: Sat 26 Apr 2025 19:00:31 +0000
Manifest next update: Sun 27 Apr 2025 19:00:31 +0000
Files and hashes: 1: h0vy9KP5l8xr8yJ-2ncCcO3rvZU.roa (hash: WW+DmP6TLxBJVPgyfFOFc50eb4JwhFwUi3K7+OUSV3A=)
2: lRTVqEAEnUQt83dEU5TfcZIBp3M.crl (hash: 2MtLnSguhfhuIwsphrSdqzfw4wTJH6mVTpxUTpJW9cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:78:ff:f5:c8:61:04:52:76:da:ad:60:43:56:68:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9514d5a840049d442df377445394df719201a773
Validity
Not Before: Apr 26 19:00:31 2025 GMT
Not After : Apr 27 19:00:31 2025 GMT
Subject: CN=c55b75d1f8ef87efc8f4422ee392e8b4d7b5a387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:41:89:62:82:49:19:df:f4:19:7a:42:2f:
33:9e:f9:0c:14:b7:64:6f:51:8c:aa:74:1b:fb:85:
1f:92:ab:d5:c4:55:6b:b9:63:c9:0b:6d:c4:9d:75:
e8:f2:30:ac:7d:a3:c3:24:35:a7:42:1f:14:d8:c7:
3d:38:f4:c3:d8:ab:48:63:9e:65:67:8a:6c:3d:7d:
d4:3c:25:7e:5d:b3:f7:c5:75:0f:f6:35:ec:b3:7f:
a8:1b:cc:26:7d:a2:f8:8d:20:f6:41:23:c8:ea:ce:
83:51:33:8a:10:98:26:df:87:c4:a0:12:a2:6c:fe:
98:b5:e0:61:fc:e5:0b:ff:24:24:67:49:56:8f:61:
ed:10:ff:84:b5:64:b9:d4:37:98:23:ca:fb:06:48:
46:bb:fa:27:39:8c:b9:16:25:33:9d:ee:7e:a5:6f:
a0:f5:99:af:31:cb:5a:3c:bb:8a:c7:5e:94:8b:2d:
88:c8:a7:56:f8:c9:34:38:b4:1f:7e:83:18:76:6f:
2b:52:ab:ef:22:bb:28:4c:6c:82:65:f5:76:67:4f:
d6:0a:51:bf:4b:65:da:16:33:45:8a:99:c9:db:ce:
4a:ce:31:f8:f4:d8:7a:de:5f:ae:b0:1d:15:d3:b2:
92:59:79:4b:25:84:d8:e3:ff:bb:28:6f:99:cb:41:
4d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5B:75:D1:F8:EF:87:EF:C8:F4:42:2E:E3:92:E8:B4:D7:B5:A3:87
X509v3 Authority Key Identifier:
keyid:95:14:D5:A8:40:04:9D:44:2D:F3:77:44:53:94:DF:71:92:01:A7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRTVqEAEnUQt83dEU5TfcZIBp3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81e242-e7d3-491f-ba65-57d15843f7f0/1/lRTVqEAEnUQt83dEU5TfcZIBp3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:70:1c:e5:0c:0a:3a:b8:61:87:4d:95:99:b2:0a:ec:51:8e:
43:f4:91:42:de:ff:ca:1b:1d:e8:af:79:89:fa:e7:58:2a:3b:
42:f6:1d:96:14:a5:d4:cf:dd:f6:27:3e:e0:e8:2b:f7:37:ad:
09:1e:ea:26:2f:91:e9:08:ad:c6:e5:a0:c9:1d:19:ce:67:1f:
4a:89:b4:b0:0c:88:4f:a4:45:3f:b4:d6:d6:10:ef:1a:25:0d:
d6:df:6e:24:0a:1f:92:ee:37:70:16:f5:a5:b3:6e:58:2c:64:
f2:f6:6d:90:6c:d8:60:2b:25:43:5a:60:8f:46:dc:b2:60:ec:
4d:26:b0:37:20:ca:19:34:d0:34:ac:e6:07:cb:55:10:43:e4:
a7:ce:3b:6a:57:2c:f4:fe:37:6c:b3:fd:c0:08:3b:7f:65:6a:
b9:f6:47:43:1f:b3:64:a1:73:87:b9:b1:ae:dd:a2:02:d2:ee:
1a:83:91:b4:ce:b3:99:db:e9:63:12:d4:86:af:e6:e8:a9:85:
27:5b:29:54:fc:d8:de:f6:b0:32:91:bf:1e:46:f0:37:65:f2:
e9:fc:76:14:de:50:13:4b:41:9b:0b:27:62:f6:52:0f:a8:9d:
1b:ef:2c:99:65:72:54:38:57:65:fb:40:70:de:d5:f1:6d:61:
c2:b9:13:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:03 2025 by rpki-client