Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier: +wY+mRY34cz5WHqgN8DCf64O4MJrsI3EWbuqN7tGwaE=
Subject key identifier: 8B:8A:6A:36:23:D9:C2:12:0C:CC:BC:CD:DD:B9:FC:C1:46:AF:79:63
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial: 019676B0B3FA235ABCAF59C32FFC6DA0341B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number: 0443
Signing time: Sun 27 Apr 2025 10:00:14 +0000
Manifest this update: Sun 27 Apr 2025 10:00:14 +0000
Manifest next update: Mon 28 Apr 2025 10:00:14 +0000
Files and hashes: 1: KVI3XedSS3nRQY078sbR6ptPKy0.roa (hash: qBfhwooNDQvXG7IohPemvhH6YU7EvDDYNTu49at8Abg=)
2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: sIk7r66QhYSMhwu5aLccid+bsAgs8aclTzOWSsBx+Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:b3:fa:23:5a:bc:af:59:c3:2f:fc:6d:a0:34:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Validity
Not Before: Apr 27 10:00:14 2025 GMT
Not After : Apr 28 10:00:14 2025 GMT
Subject: CN=8b8a6a3623d9c2120cccbccdddb9fcc146af7963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:47:f9:e7:34:80:50:b2:0b:46:95:2c:9f:86:
76:08:55:ea:22:a6:eb:ea:25:d0:b3:18:b9:e0:f3:
23:23:18:be:93:02:b6:63:ba:19:ea:b9:76:af:8a:
7e:b8:6a:c7:21:c7:0f:e7:6e:1f:c8:16:50:30:d5:
9e:8b:54:99:42:81:8a:e5:77:8b:26:12:ea:d2:76:
47:fe:38:e3:7b:23:22:41:df:00:4d:c4:11:0e:de:
78:ac:41:cb:a4:43:c2:e9:b6:7a:65:fb:79:b6:3f:
51:ac:8b:d6:af:7c:e5:0b:1e:38:57:4f:77:3d:37:
56:b3:3d:40:8d:a4:4e:2c:76:e8:72:bd:c5:2b:94:
04:db:3a:e6:ef:2a:4c:ea:7f:7e:e2:d9:3b:3b:9d:
bb:06:94:4f:73:9c:db:af:f4:88:91:de:13:1c:fb:
7c:05:39:1a:af:d7:c8:f2:05:f1:a6:41:7b:3d:63:
a7:cb:58:f2:01:40:55:9b:ef:97:48:13:b3:f4:cd:
95:2f:08:58:ea:7e:f9:76:d4:16:44:3d:5d:0a:08:
fc:83:5f:e3:1d:07:57:04:92:f8:81:8b:dc:bc:4f:
10:30:ae:1c:75:83:cd:48:62:ae:3b:09:17:ce:b3:
1a:dd:2c:3e:10:7b:bd:20:ec:a6:0d:16:01:ee:2b:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8A:6A:36:23:D9:C2:12:0C:CC:BC:CD:DD:B9:FC:C1:46:AF:79:63
X509v3 Authority Key Identifier:
keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:73:57:df:e3:5b:30:73:d5:24:9a:41:9f:37:99:72:71:38:
35:ab:37:40:9d:4f:83:9a:4f:f1:25:43:7b:9e:c6:5a:0c:2d:
18:97:11:b4:c2:31:b2:7f:86:86:67:20:02:cc:40:51:d9:68:
25:2c:ca:e8:60:02:02:cc:9b:aa:0b:4e:84:be:d7:11:c1:e8:
70:c1:a8:63:9a:27:3c:35:b0:b1:de:96:24:c7:9c:4c:ff:16:
7f:aa:e9:e8:90:60:67:64:3b:75:ad:fd:44:e0:85:5d:cd:da:
5d:25:3b:0f:61:85:06:71:21:b0:3a:05:ec:f1:ad:24:cb:b2:
11:64:d1:2f:a5:f2:b3:09:1b:07:a2:77:f6:b8:e6:ee:13:71:
12:da:85:a9:61:33:8f:ec:db:21:3e:95:63:75:60:03:22:9c:
72:ab:6d:13:ec:f6:7b:ce:ea:75:28:b6:22:a3:7e:d7:26:94:
ad:24:0a:82:33:c5:4f:5b:bf:0c:a3:b4:87:15:80:5b:6f:0e:
78:ee:70:54:b4:28:50:6e:38:b2:fc:7c:d0:ea:09:58:a6:f4:
7a:96:72:e6:e4:5b:eb:36:09:32:c9:a9:8b:85:7b:e7:8b:3a:
55:4f:38:5d:76:e8:35:8e:28:7c:b7:57:b0:56:12:9c:89:5f:
ad:21:3e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:43:53 2025 by rpki-client