Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
File: l-pUHBI_qpwO3HKfgp6Vn9KS430.mft (raw, json)
Hash identifier: 3LI3oaC56SZH4UP3Ltqlmc+7fLzfRefLLHFm7Xmfux4=
Subject key identifier: 59:96:E2:90:F3:37:3B:9B:27:65:45:FB:21:EC:53:2A:EF:81:58:90
Authority key identifier: 97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
Certificate issuer: /CN=97ea541c123faa9c0edc729f829e959fd292e37d
Certificate serial: 0196722F64A87BE2F7500FAB3F9B9CBDF1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
Manifest number: 14F4
Signing time: Sat 26 Apr 2025 13:00:30 +0000
Manifest this update: Sat 26 Apr 2025 13:00:30 +0000
Manifest next update: Sun 27 Apr 2025 13:00:30 +0000
Files and hashes: 1: bPQ6drZl2bvCnNM6nPyxMRTSEJI.roa (hash: YBLRIxZCgJpQTrl+i/fNwIe/l7A9rjWl745CEpyQQSM=)
2: e1TiDU9jaf-uoPC0Zx430pu1ZCM.roa (hash: q9+5javB419O6YOtfogsv7MMuuP4veMEe8DcM87O1NY=)
3: l-pUHBI_qpwO3HKfgp6Vn9KS430.crl (hash: peAbLY8Z+ocRfQw2EhGjCH2Ko8S7sEAinIrUaFCn0WE=)
4: lwTz-Iu-xRGiJCEKiYy6AXyhWVU.roa (hash: 9/KJ7UCtpwvfH6BEI/aqGtWMMZWRIfxm0UW7cHmVOtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:2f:64:a8:7b:e2:f7:50:0f:ab:3f:9b:9c:bd:f1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ea541c123faa9c0edc729f829e959fd292e37d
Validity
Not Before: Apr 26 13:00:30 2025 GMT
Not After : Apr 27 13:00:30 2025 GMT
Subject: CN=5996e290f3373b9b276545fb21ec532aef815890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:21:50:30:13:70:89:24:1e:72:b2:6c:e9:
1a:13:20:fd:c5:57:2c:a4:c2:cb:17:a7:bc:68:6e:
89:45:39:57:cf:bc:82:83:86:d8:f5:75:54:48:d1:
d7:54:5d:d2:38:2c:24:77:65:cb:a6:3b:3a:d3:92:
78:f0:83:77:52:18:9a:82:cb:17:3f:88:b3:a3:92:
18:ba:c5:9d:ba:c0:20:dc:eb:44:b2:24:91:d6:21:
bc:31:51:b3:ba:5a:67:d4:de:d3:77:56:f7:9d:85:
f6:b8:f9:74:9c:b8:63:73:30:11:75:ca:96:40:2d:
4d:8d:12:26:63:d0:b3:12:d8:63:9a:13:8c:a8:fe:
92:23:8d:1f:04:83:81:56:f0:d7:3e:e5:08:04:9a:
37:1e:e3:da:2e:a0:2f:c6:59:7c:fe:b4:ed:ef:85:
74:96:18:f6:8a:23:82:cd:46:0b:da:0c:40:a5:24:
34:ae:05:93:7e:88:c3:58:a7:b7:58:4d:a0:96:6d:
e0:1f:b9:08:92:f9:2d:ec:33:ef:70:50:b1:3b:92:
9f:25:ff:0f:7c:f6:85:26:f5:df:47:93:6f:8d:08:
3e:dc:ed:79:57:8d:8b:02:d8:1f:a9:99:b9:75:01:
1c:ca:0c:40:bf:58:21:ad:74:e3:4d:cc:e5:c7:ea:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:96:E2:90:F3:37:3B:9B:27:65:45:FB:21:EC:53:2A:EF:81:58:90
X509v3 Authority Key Identifier:
keyid:97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:be:02:5e:3a:51:7b:eb:a1:af:53:05:ec:26:54:16:06:5e:
ee:70:a3:5e:68:3e:0e:68:f4:80:22:5d:05:12:6a:2e:b4:5f:
33:1c:77:3a:1d:dd:35:7a:cf:25:f2:44:68:c7:78:c5:44:62:
bb:89:6e:d8:d6:ca:8e:e0:02:bd:a7:ed:d4:9f:af:fa:73:91:
c1:41:06:92:12:7c:8a:60:09:78:8a:d5:73:2c:39:c4:23:10:
b4:9f:ca:14:cc:74:3b:fd:bb:fb:79:aa:81:fa:9f:29:e7:42:
0b:ee:17:03:fa:4d:b1:a5:fc:0b:dd:38:76:31:1b:a2:03:96:
dc:34:81:4e:fd:64:e0:e9:f9:06:bb:14:31:75:8b:0e:0e:a5:
49:8a:7e:8b:1d:f3:7b:f9:42:52:5d:2b:c1:70:fb:ff:54:43:
6c:35:2c:52:72:ab:2d:ed:a3:8e:d7:c3:2b:ab:79:0a:de:df:
6a:b5:b4:62:01:ff:85:d9:97:7b:6b:71:20:42:10:19:41:ee:
94:37:ac:99:a5:8e:05:db:ca:b5:47:c5:f7:b2:64:10:0a:92:
dc:1e:7a:6b:85:5a:b7:0c:08:3f:42:56:6d:e2:a1:d4:55:bc:
4d:57:56:03:a5:a6:18:b4:b5:ef:3f:00:30:48:3c:3b:c0:d8:
da:ae:66:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:10:49 2025 by rpki-client