Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
File: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json)
Hash identifier: sN1fZQ69qDyGcaQlqtigEa4F/m//cglBsXTcvhjQ49Q=
Subject key identifier: 93:E7:4D:76:F8:79:1D:A0:0C:0A:0E:58:B9:F3:AF:4D:63:5F:2B:AE
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial: 019657947A56C5FD2B76CDAB92449B7E9AC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
Manifest number: 0F
Signing time: Mon 21 Apr 2025 09:01:10 +0000
Manifest this update: Mon 21 Apr 2025 09:01:10 +0000
Manifest next update: Tue 22 Apr 2025 09:01:10 +0000
Files and hashes: 1: em3GdHNEQBbHlpzmuunEE4q_ZI8.roa (hash: BpM0Qjg2QGSEKls9rFeKoRK4EoSJgveIU1F9DuDBB0E=)
2: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: jYovPEJy/M59FdjhbE1c7eBgKgGRrqQsMyihnESBGpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:7a:56:c5:fd:2b:76:cd:ab:92:44:9b:7e:9a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
Validity
Not Before: Apr 21 09:01:10 2025 GMT
Not After : Apr 22 09:01:10 2025 GMT
Subject: CN=93e74d76f8791da00c0a0e58b9f3af4d635f2bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:86:07:20:e9:07:bc:fe:57:01:4a:d4:89:b0:
c5:86:aa:cc:57:fe:71:69:75:04:6c:d4:58:1d:ef:
14:a9:a6:23:03:26:44:0b:0a:f2:cd:99:3d:c6:dc:
80:cc:af:88:17:84:e3:b3:84:22:12:3b:ed:8a:05:
89:9c:80:2e:47:77:5f:e7:5f:c3:85:14:96:79:42:
ff:2f:0e:3d:8f:f0:51:e6:53:91:9f:b6:8e:01:33:
c8:e2:8c:d7:44:e4:83:a7:1c:88:ff:43:df:be:de:
7a:c1:42:64:9e:cf:ec:0a:a0:ad:54:d4:e2:99:60:
fd:8c:d6:a5:f7:59:a7:9c:a7:f3:66:b8:b2:81:63:
54:71:a1:98:34:9a:47:8a:52:62:6a:95:2b:c2:6f:
b2:4f:2a:1d:ec:78:d8:a0:4f:06:35:d8:23:c0:16:
44:85:1d:22:34:63:14:a4:bb:06:c7:71:e6:5a:b3:
7f:f9:c4:2a:4b:b3:16:d0:ce:b9:38:99:ac:d5:d7:
ae:48:1c:c9:b3:a9:5e:41:d9:4b:c9:d9:fc:4b:2c:
ed:6f:05:1c:7b:9a:f0:8a:d8:a4:8c:ba:44:51:6c:
fc:23:e0:96:f4:80:1a:03:ef:82:44:6c:96:41:33:
fb:95:cd:e1:93:1b:2a:7d:85:33:51:b4:64:15:9b:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E7:4D:76:F8:79:1D:A0:0C:0A:0E:58:B9:F3:AF:4D:63:5F:2B:AE
X509v3 Authority Key Identifier:
keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:10:60:7a:f9:ff:8e:e2:bf:ad:36:58:bb:88:2c:51:d4:0e:
23:ba:eb:b7:25:0e:30:8e:24:b7:c8:97:e6:92:17:20:80:ef:
dc:d5:5f:6b:e0:7e:66:04:de:df:4d:1c:cd:38:8f:2e:18:46:
8d:f8:17:d3:e9:32:f7:44:67:ad:50:53:6a:ea:98:73:63:97:
42:dc:59:88:98:12:80:ed:65:4c:2b:a9:73:81:b0:b9:a9:85:
18:ed:1f:9c:b6:26:fe:90:d8:76:92:02:db:18:81:a0:0c:b1:
72:00:84:b8:69:12:c3:dc:71:4d:8c:d6:e8:09:d3:2c:77:db:
9d:79:9b:ff:5c:81:c4:75:d6:c0:08:28:3d:ee:77:de:2a:66:
8c:25:98:92:ea:95:15:5e:a3:52:6a:15:c5:46:aa:df:28:9e:
9d:0e:86:d6:75:d1:7c:65:eb:39:cb:50:df:c7:cd:36:85:22:
3d:a8:7d:5b:68:74:e3:15:3e:c3:65:70:a9:27:53:df:ef:b3:
ad:1b:ce:69:59:e9:56:2e:cf:bb:cd:6c:43:4d:64:0a:55:43:
01:29:cb:33:cc:c1:11:2a:0a:f5:aa:d5:c5:98:f3:ea:3e:be:
bd:02:01:44:fe:cd:62:6b:77:c6:96:d3:4c:1b:3f:70:ea:e7:
5f:78:57:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:30 2025 by rpki-client