Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
File: L8plksD-NPq-_MQ3GSh7hE1HygM.mft (raw, json)
Hash identifier: 6et4mxwJshJc0i3OcXgaFnOKEb4cV8NFcPi4yIeMT84=
Subject key identifier: C0:F8:FF:C7:41:F0:94:B9:2A:8F:5F:B6:BF:FB:1A:0C:F2:14:5B:9C
Authority key identifier: 2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
Certificate issuer: /CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Certificate serial: 01965B038187E31FAE982ADAE3DEFC911B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 01:01:18 +0000
Manifest this update: Tue 22 Apr 2025 01:01:18 +0000
Manifest next update: Wed 23 Apr 2025 01:01:18 +0000
Files and hashes: 1: Ii6Eihe3uHllmAF3w-e0EbIsuEY.roa (hash: AaLyOgaPOF0EjSeS5+fNuZIHrJ04ogADIw6xzspYUTk=)
2: L8plksD-NPq-_MQ3GSh7hE1HygM.crl (hash: 41oBucokPzUQN1nQBYHyTj8uy85wTZtW6dQRktx/oeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:81:87:e3:1f:ae:98:2a:da:e3:de:fc:91:1b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fca6592c0fe34fabefcc43719287b844d47ca03
Validity
Not Before: Apr 22 01:01:18 2025 GMT
Not After : Apr 23 01:01:18 2025 GMT
Subject: CN=c0f8ffc741f094b92a8f5fb6bffb1a0cf2145b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1b:47:3a:53:91:8c:a4:60:58:4c:b8:4f:0c:
49:52:4b:b6:f3:43:6f:9f:35:25:c8:97:8a:b2:ea:
7d:9f:da:33:ec:42:05:5b:1e:46:32:af:c6:f5:6b:
7c:15:a2:81:ad:f2:6f:7b:4c:c5:da:a8:cd:7d:15:
b4:80:0e:79:84:12:a8:6c:1b:a3:5b:7a:39:df:c8:
a8:d6:81:4f:ce:56:52:b5:66:32:fb:bc:9a:91:9a:
a7:a4:5e:54:67:60:a9:5b:08:38:3b:3b:c4:a6:85:
07:b1:b2:9a:25:27:fa:3d:e4:9e:9f:97:18:d4:90:
5a:a0:ac:19:4c:16:aa:c1:a5:6e:ea:cd:bc:b5:b7:
a3:22:91:3c:3e:47:73:af:ab:05:6d:bf:3e:37:c9:
1d:8a:09:68:44:45:58:c7:24:59:19:b4:6d:04:85:
4f:b1:5f:4e:ed:44:6d:66:fd:6b:71:a1:29:94:b8:
78:5b:25:f0:c9:5e:43:1d:73:9d:74:19:16:6c:e7:
7b:96:36:29:44:1e:df:ab:68:98:ca:0b:b1:48:ba:
65:93:85:0d:61:35:61:04:90:91:a7:ab:aa:37:93:
ba:c7:39:c2:3a:30:e1:d4:86:d3:f5:02:99:5b:23:
ae:f4:c3:91:ca:97:06:76:c6:bb:25:11:f5:74:5d:
58:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F8:FF:C7:41:F0:94:B9:2A:8F:5F:B6:BF:FB:1A:0C:F2:14:5B:9C
X509v3 Authority Key Identifier:
keyid:2F:CA:65:92:C0:FE:34:FA:BE:FC:C4:37:19:28:7B:84:4D:47:CA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8plksD-NPq-_MQ3GSh7hE1HygM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7bf689-82fc-4816-8ece-1ecd9918b3a6/1/L8plksD-NPq-_MQ3GSh7hE1HygM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:92:0b:53:b6:7f:1e:bf:a6:82:c6:02:b9:ac:b9:a6:d5:2a:
89:4d:bf:a1:eb:85:a7:02:01:a5:cb:28:cd:2e:ee:77:12:7f:
d5:ae:bb:c6:ce:90:81:9d:d6:31:3d:33:64:9c:f3:c0:ef:a4:
06:de:39:69:3a:1b:50:cf:e3:4f:ca:52:24:4e:05:e7:61:50:
81:09:5c:ef:7b:6e:87:52:8b:4b:ba:a9:74:b2:d6:73:93:72:
5e:79:ee:33:87:78:3c:19:97:60:4c:06:98:da:c3:56:3d:6c:
9e:ec:ff:34:18:03:d9:9d:bd:96:a0:e6:84:25:1a:15:ed:d6:
b1:bd:c1:53:29:cf:31:78:63:7a:34:93:22:62:0d:94:f3:6b:
a5:4b:41:ff:f4:13:3d:a9:67:1d:05:c3:15:89:64:9f:cc:73:
a6:c1:c2:5b:ce:a3:12:db:48:4f:fb:6d:d9:3a:4a:24:73:ab:
de:4b:0b:8c:6d:a6:bc:02:ad:2d:c5:96:c5:19:65:1e:e0:bc:
ea:e2:fa:ff:f7:8f:0b:8b:84:98:b5:bd:bc:a7:90:c3:87:95:
c9:53:3c:8a:2c:83:fb:d7:58:c0:14:c6:a4:bb:d2:ee:36:a8:
9d:1d:fd:8d:87:f9:91:30:a5:b2:b3:2d:13:7d:f4:41:be:1b:
9e:c4:ec:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:32 2025 by rpki-client