Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier: a7eGHpouilUcrAvztwxU+FpUU17ofz5Vhok4KE4Fr5M=
Subject key identifier: 52:F8:C7:90:92:98:A7:47:99:2D:82:F0:A3:0A:2D:CD:E4:2A:BB:26
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial: 01967642CF1BBD80F930A3BEAC778B7688CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number: 0BF0
Signing time: Sun 27 Apr 2025 08:00:11 +0000
Manifest this update: Sun 27 Apr 2025 08:00:11 +0000
Manifest next update: Mon 28 Apr 2025 08:00:11 +0000
Files and hashes: 1: Sf5t6YxNuVy_QmmCDlAJFdLydbs.roa (hash: 84pXBKdWUeBM3XRDHyhAVZXwwfPh9reL6aBdIjVrlKs=)
2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: TTp/BSPQpPP216W2K5q0RObmtu875bmlfqcn2P4v6do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:cf:1b:bd:80:f9:30:a3:be:ac:77:8b:76:88:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Validity
Not Before: Apr 27 08:00:11 2025 GMT
Not After : Apr 28 08:00:11 2025 GMT
Subject: CN=52f8c7909298a747992d82f0a30a2dcde42abb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:51:b2:c0:e0:e6:00:7f:aa:40:cd:5b:8c:59:
a6:28:60:f5:6a:6c:f0:a4:f2:f4:5b:f3:85:2a:91:
9c:62:24:32:7d:24:7c:86:6f:76:21:2c:89:ba:c9:
c8:3d:5a:b7:6c:2f:0b:06:99:ec:36:45:22:3e:f3:
ff:22:6f:22:24:09:44:d9:57:6b:3d:04:e0:de:f3:
a7:94:a4:ce:c8:05:2f:ed:25:42:9b:6b:4d:69:51:
91:25:d8:ba:1f:d7:2b:2f:4b:4b:5b:59:6a:14:5a:
16:07:d6:14:0a:8f:22:4a:4a:4c:8c:28:15:90:1b:
4e:ab:4a:67:ee:2a:fe:0e:9d:27:01:2e:6f:96:35:
b4:81:b0:8c:7c:6a:d0:8f:29:93:db:04:05:2d:33:
b0:da:42:6a:90:1a:f7:0d:16:72:51:f6:bc:b1:ac:
e8:fb:b6:bd:a2:5f:4f:cf:84:e7:6d:5e:3c:94:b5:
49:e5:f9:64:8c:04:cd:79:90:2b:47:2c:bd:73:91:
7a:d2:e7:5d:c3:e0:52:90:26:46:cd:e4:06:11:bb:
b8:e5:de:03:f8:28:ad:80:24:dd:7a:ea:35:6d:1d:
36:2f:fe:dc:06:53:24:01:b5:ca:28:3d:35:26:73:
46:d7:cf:ca:77:b5:a3:ba:b1:af:04:ab:51:ca:41:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F8:C7:90:92:98:A7:47:99:2D:82:F0:A3:0A:2D:CD:E4:2A:BB:26
X509v3 Authority Key Identifier:
keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e2:48:0b:e0:86:ec:54:04:9a:7b:81:65:19:54:61:af:4d:
0c:23:c1:50:0d:9c:43:76:cc:55:00:2e:df:7c:e5:c0:f3:24:
89:05:e8:23:59:10:e2:ec:ee:23:09:cf:92:e4:83:07:51:e3:
1e:17:6c:f5:f7:77:35:f2:15:d3:3a:62:3b:18:54:54:3e:e9:
f2:4c:de:69:14:9d:c4:61:e7:d7:e7:59:3b:13:94:77:f9:cc:
bd:ca:88:a1:b4:92:fc:26:34:1d:42:fa:7d:d9:c8:4d:87:c4:
a4:87:a4:4a:7e:5b:5a:5b:34:b2:90:b3:cf:6a:88:06:fe:6e:
d1:91:62:0f:1f:2d:84:3f:1c:44:7e:b4:2d:fc:af:38:ce:57:
6b:5b:a9:89:c6:00:7a:96:68:e0:7a:f6:84:62:02:66:68:2d:
47:16:d0:ad:ff:06:54:f4:c2:53:37:00:1e:ed:27:ad:b0:ea:
8f:f1:79:65:cb:64:2f:5c:27:7a:79:9f:aa:ee:b9:e3:5d:b8:
38:6c:46:93:0c:fb:4b:67:e0:93:10:2e:b7:b5:86:5d:2e:7b:
4e:a3:99:f5:ff:27:86:66:7a:b1:26:7f:81:96:b4:9f:99:d4:
e3:00:50:d3:bf:02:dc:03:d8:e6:a1:e5:a9:a0:b2:cd:7c:a1:
e7:61:18:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:13:30 2025 by rpki-client