Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
File: lRibFY2NYBG6X5YlLTAmanDT4GY.mft (raw, json)
Hash identifier: Yub4BLWfa31bIB9xXw64HniCQj++CjO4iSIpqBWz5zE=
Subject key identifier: AB:EA:47:6C:F4:F0:67:14:FD:1B:F9:FB:3A:49:13:98:F8:67:FB:24
Authority key identifier: 95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
Certificate issuer: /CN=95189b158d8d6011ba5f96252d30266a70d3e066
Certificate serial: 0196767A94A35899CC7666038BE0273E2E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 09:01:06 +0000
Manifest this update: Sun 27 Apr 2025 09:01:06 +0000
Manifest next update: Mon 28 Apr 2025 09:01:06 +0000
Files and hashes: 1: alfL1bRTQjOY-E2KjHP8N4Ulue0.roa (hash: ybSj2AdhAA+9tbRInXwXzkVBfMf3WHllqssGw6/wFUI=)
2: lRibFY2NYBG6X5YlLTAmanDT4GY.crl (hash: JokiMuFJYEPuE6esfVuPisgd0n4xgJ1zLTpnTl4mC7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:94:a3:58:99:cc:76:66:03:8b:e0:27:3e:2e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95189b158d8d6011ba5f96252d30266a70d3e066
Validity
Not Before: Apr 27 09:01:06 2025 GMT
Not After : Apr 28 09:01:06 2025 GMT
Subject: CN=abea476cf4f06714fd1bf9fb3a491398f867fb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:23:d6:78:62:4a:0a:fa:21:67:d8:39:c0:
8e:61:d2:b0:71:16:53:5b:a1:46:00:bd:0a:d2:7e:
2e:ee:52:de:e0:ff:79:3b:1f:38:15:6b:5b:53:78:
eb:aa:70:da:fa:ac:fb:65:8d:3c:37:1c:fa:ce:c4:
57:43:ad:fb:00:13:58:51:99:4e:47:37:ba:82:79:
54:f4:b7:76:1d:42:ee:c4:1b:6f:14:49:8d:fd:2e:
3d:8b:23:97:f9:4a:3e:7d:42:8c:3e:1c:6a:6d:4a:
cd:58:45:6a:90:b3:c8:a1:87:70:75:6c:ec:e2:69:
06:12:18:bc:6f:b3:75:33:f8:5a:fb:5f:68:e4:94:
38:d8:12:c9:a2:a4:79:8e:b5:a2:09:de:df:00:40:
3b:2c:63:23:50:81:77:84:8b:11:a3:60:4e:6d:a8:
a5:ce:32:c9:d4:47:ce:76:4f:d0:2e:b7:8b:7d:5e:
f5:84:f0:3d:d0:3a:a8:7b:5f:fb:f1:24:c3:74:e3:
21:ee:b9:35:76:ea:b6:3c:14:ac:df:b6:9e:37:52:
b0:3e:d0:f1:f6:c1:b4:57:84:fe:6f:14:7b:76:d9:
f5:ee:11:4b:a3:ae:e7:3c:85:ff:69:05:fa:80:ef:
b1:0c:75:d5:b5:f7:70:db:81:57:d5:66:22:3a:66:
39:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EA:47:6C:F4:F0:67:14:FD:1B:F9:FB:3A:49:13:98:F8:67:FB:24
X509v3 Authority Key Identifier:
keyid:95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:35:22:e0:34:23:c8:65:08:48:b7:29:d0:27:e8:b4:99:51:
cb:29:3c:50:4e:81:c9:42:82:d1:78:a3:5a:35:7e:5c:0f:00:
47:02:ab:f1:5c:b8:56:56:38:67:57:b6:5e:58:72:7a:f0:93:
50:48:52:d1:c6:f4:fd:e3:d9:2f:0b:da:32:fb:7e:9a:34:22:
6a:70:be:e5:5d:40:b2:d8:9b:14:40:fb:7d:4b:a2:bb:64:5c:
1c:25:c4:d1:38:0c:39:de:32:61:17:8d:50:de:8d:c3:8f:7e:
40:32:d7:8a:1e:45:62:60:81:9c:a9:82:9a:48:6b:3e:3e:8b:
e6:2c:b4:0d:8b:a1:b4:40:06:99:a0:3a:37:9c:17:8b:03:83:
23:8a:0d:ee:94:df:3c:17:dc:4b:93:8c:c7:57:d6:9b:04:97:
22:d9:22:d2:db:96:2c:5d:5b:8b:19:1f:b8:dd:94:38:7b:12:
06:e3:05:5b:4f:d1:a6:84:88:2a:1f:61:f4:75:72:b1:9b:e7:
b4:04:45:42:18:0a:d9:a5:47:bb:f9:44:69:c5:27:74:b2:76:
45:5b:54:d6:62:ec:8e:ff:e5:fc:02:83:50:9a:f8:3c:1b:06:
9f:dd:3a:3f:7f:71:6d:bf:02:e9:c2:86:9a:42:b3:bc:16:c9:
ea:da:56:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:09 2025 by rpki-client