Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: QR/sqDr2otm9kDh9XMn6VuwNSIObnIxB9hn29xBLZEw=
Subject key identifier: B6:92:15:5E:61:6D:04:D7:04:C8:A9:F4:A2:BF:88:91:AE:E3:D8:62
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 01967F0F3853B1F9485EE4A5B494DB83797E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 01:00:25 +0000
Manifest this update: Tue 29 Apr 2025 01:00:25 +0000
Manifest next update: Wed 30 Apr 2025 01:00:25 +0000
Files and hashes: 1: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: /Fd0sVkHygtGAWla2G0LQYh/VoZca64kWVBAfEuW/WM=)
2: rK5X9NIdICE6HWbuHlM4yM6Jalc.roa (hash: YWhqfMgJTLRIqRYZxrF87FaDlWD+zYLSsh2PkoyKjDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:38:53:b1:f9:48:5e:e4:a5:b4:94:db:83:79:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Apr 29 01:00:25 2025 GMT
Not After : Apr 30 01:00:25 2025 GMT
Subject: CN=b692155e616d04d704c8a9f4a2bf8891aee3d862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:58:e1:16:4d:1c:3c:18:47:11:e6:bd:90:
7f:97:88:73:bd:81:6f:f5:46:9d:63:0e:e2:c5:d2:
1b:11:32:7a:4d:12:ef:01:4f:0e:d4:ac:d1:8b:c2:
ed:08:67:4a:18:0e:92:68:63:ad:c8:cf:ba:c3:05:
74:43:29:f9:0a:80:4f:1e:e1:6e:45:55:64:8b:bc:
15:1e:51:dd:f0:37:6a:da:de:6f:16:a8:2d:59:72:
09:29:0d:6c:c8:ee:5c:9d:8f:38:9e:a5:e7:43:bf:
be:11:24:87:d6:e5:50:7b:14:49:7d:b3:e8:2f:07:
b1:38:c7:74:2a:3e:2f:cf:2e:84:02:d0:d0:0c:95:
95:4e:65:3c:dd:5a:a2:45:98:5b:15:84:1c:ab:68:
19:07:6d:c0:1c:5e:83:92:57:59:26:68:6f:95:14:
51:22:d1:1e:41:b9:5b:99:fd:51:d0:c3:74:5f:00:
bf:ba:ce:1b:b6:15:e3:f7:01:07:0a:c1:9f:58:aa:
2e:fa:87:57:0e:a1:b6:e0:32:95:8d:bc:19:d1:68:
fa:04:89:40:c5:a5:72:d3:eb:12:2c:b8:cc:c0:51:
6b:b0:9a:0e:2a:9b:b7:40:d2:d0:cd:1e:78:d8:ca:
13:a3:70:54:91:11:29:16:fa:c5:06:d4:3b:00:87:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:92:15:5E:61:6D:04:D7:04:C8:A9:F4:A2:BF:88:91:AE:E3:D8:62
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a5:b5:7f:7c:72:cf:f7:07:6a:1f:cc:7a:17:a4:62:62:31:
ed:e8:54:fb:c2:bf:6c:a5:46:94:a6:66:ef:6c:29:19:e5:1c:
69:c0:5f:0a:00:f7:27:29:ce:3b:25:86:02:d0:e9:fa:e7:5d:
f1:7c:45:05:95:38:d3:f1:66:be:69:46:8d:37:39:93:f8:ef:
59:f7:55:8e:90:4b:db:3c:a0:1e:f8:be:e8:2d:9f:05:66:97:
47:33:86:81:e8:42:18:be:d8:ae:1c:2d:9c:3c:0a:7b:6a:70:
fd:19:46:ab:f6:1d:88:19:54:6a:3f:67:2e:07:93:14:2b:2e:
5f:7f:7f:21:5a:c2:1e:a6:28:2a:38:7a:7a:af:0c:93:de:48:
31:57:fa:30:8b:f0:3e:39:f9:75:95:85:7a:38:00:4e:04:fd:
40:50:2b:74:8c:ee:b8:d4:68:6b:d8:ec:18:59:63:68:62:34:
76:ea:d4:37:f2:a9:aa:9d:cf:06:9f:3f:ba:a0:4c:85:9b:17:
9d:f8:6c:12:ce:95:b8:cf:66:b0:6d:df:30:13:9d:81:fe:84:
fa:0b:a4:1a:04:47:35:94:78:69:2f:4c:1f:89:c3:ef:51:c9:
9f:52:2c:53:7b:c8:db:67:f2:65:5e:25:9e:bb:4b:60:64:35:
bd:71:fd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:18:46 2025 by rpki-client