Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
File: lIlI8N1eL7CpArl5ypxcGkT5j6E.mft (raw, json)
Hash identifier: uRzORceKNxzmwKlfFxVjDSsNYNT1BP1Kvt7CVLkjHg0=
Subject key identifier: 7A:DA:9A:E8:4A:BC:47:79:3E:F4:3F:25:90:BE:65:54:53:07:0E:5C
Authority key identifier: 94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
Certificate issuer: /CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Certificate serial: 01968322FA5DB920C745AF3AB0715F351C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
Manifest number: 11A4
Signing time: Tue 29 Apr 2025 20:00:29 +0000
Manifest this update: Tue 29 Apr 2025 20:00:29 +0000
Manifest next update: Wed 30 Apr 2025 20:00:29 +0000
Files and hashes: 1: PqIFggzIk_ANiqqFNJr1_Xaymmc.roa (hash: EhtNg//JemmQlKzA50IitdtWxLjPUBVE2aJwJpTUs+g=)
2: lIlI8N1eL7CpArl5ypxcGkT5j6E.crl (hash: FyUjoxABpSp0hp8IJ+WBt2EHCIv0bfHKp+ngGuVBOes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:22:fa:5d:b9:20:c7:45:af:3a:b0:71:5f:35:1c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Validity
Not Before: Apr 29 20:00:29 2025 GMT
Not After : Apr 30 20:00:29 2025 GMT
Subject: CN=7ada9ae84abc47793ef43f2590be655453070e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:13:f4:d0:1b:90:d0:80:b7:af:d2:b2:62:
ca:c3:ef:11:9b:c3:4a:f5:f0:0f:5d:1e:2a:93:8b:
07:02:fc:10:47:86:0a:c8:c4:aa:fc:89:09:df:17:
28:c6:d9:b0:b9:cf:74:25:8f:6e:17:11:c8:c8:90:
0e:9e:67:d0:98:86:e6:de:18:ad:36:10:1c:77:3a:
34:11:3e:b9:96:a4:c2:23:05:5a:9e:b6:ef:7b:64:
aa:b9:3c:22:92:2c:f5:24:5a:34:ee:57:06:0e:e1:
9d:fe:f9:32:30:bd:39:f4:6c:1d:b0:76:de:5e:9d:
a5:26:51:01:6c:31:3f:15:fd:7a:bc:b9:7b:12:4f:
b2:4e:b3:12:6b:f8:5b:80:58:fe:30:c6:bc:ba:de:
12:60:dd:4a:7c:59:79:ae:53:0c:c4:a7:72:90:77:
ee:e9:a2:59:b6:6a:51:1d:40:95:c8:0d:8b:27:c0:
b3:33:1a:ee:cc:9d:ba:10:12:f1:72:73:05:7d:96:
df:c8:45:93:58:01:f9:61:2a:71:8c:9e:78:42:ef:
ea:62:ce:fc:52:69:99:41:3a:7e:9e:6c:74:87:33:
65:ab:f9:2c:22:a3:41:06:c8:37:a7:b5:6b:07:78:
9c:e4:b2:8c:69:42:ff:42:c3:13:6a:b4:a9:e8:ab:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DA:9A:E8:4A:BC:47:79:3E:F4:3F:25:90:BE:65:54:53:07:0E:5C
X509v3 Authority Key Identifier:
keyid:94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:78:15:65:23:25:1e:8a:37:a5:a8:3a:1e:f9:40:1c:d7:60:
27:64:d2:f6:d8:88:3c:2e:46:7a:98:46:34:db:26:d4:a2:7a:
1e:06:6d:ab:d4:2e:4f:55:e5:e4:36:ce:9d:32:8a:9c:9b:39:
46:f6:c8:d0:99:43:57:03:51:b5:ac:01:2f:cd:5a:07:7c:07:
ba:3e:af:61:1d:e3:77:51:e5:8c:e3:93:03:0f:02:5e:42:92:
16:95:d6:6e:63:85:5e:75:9c:d1:aa:54:a3:2c:d6:30:e1:36:
b1:52:88:53:b0:9a:31:dd:4a:d3:dd:a3:ef:cf:91:d0:61:ee:
8c:c1:98:10:19:77:5f:fa:ca:f4:df:cb:13:57:99:b6:61:24:
7d:5d:77:75:5f:19:30:4c:40:30:14:bf:57:38:a0:a5:92:77:
3f:b5:1a:bf:86:f6:35:8e:99:9e:42:73:03:5d:39:36:12:28:
40:a3:72:52:b1:0d:a6:40:a6:26:97:d8:09:e9:4c:4c:47:66:
bb:78:ba:76:8d:e2:43:eb:2d:85:c0:66:4c:80:db:1a:23:e3:
76:71:e7:8b:7c:84:0d:db:c9:91:b3:31:4a:88:22:35:49:64:
bc:08:27:2c:f6:ee:7f:24:4a:24:94:45:d7:ca:5b:d0:54:b4:
9d:1c:0b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:04:31 2025 by rpki-client