Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
File: l2umIpxFnXaV01KbEgfiwpsIQrE.mft (raw, json)
Hash identifier: 7txlIxccEnOkzrmtZ8HlF3Oa+SVsRwHda4ZdibDU/no=
Subject key identifier: 78:9F:96:A7:85:61:E7:98:0F:57:44:BF:6C:96:25:7A:C1:81:18:EE
Authority key identifier: 97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
Certificate issuer: /CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Certificate serial: 01964D7EA121829662E903EF0F925C41EFF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 10:01:06 +0000
Manifest this update: Sat 19 Apr 2025 10:01:06 +0000
Manifest next update: Sun 20 Apr 2025 10:01:06 +0000
Files and hashes: 1: 8i_tvPtWf70i2EmSEMpvUHFIlh0.roa (hash: 5i+xKeAIrkPv9y5KV9LM5WC3PSC5H7SyU1nhMQB9nho=)
2: l2umIpxFnXaV01KbEgfiwpsIQrE.crl (hash: tkpw6c4UlaWWnkIMuyYxlhh7DtozU6jyIXj5k/vPaJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:a1:21:82:96:62:e9:03:ef:0f:92:5c:41:ef:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Validity
Not Before: Apr 19 10:01:06 2025 GMT
Not After : Apr 20 10:01:06 2025 GMT
Subject: CN=789f96a78561e7980f5744bf6c96257ac18118ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:73:e7:72:a5:e4:e3:0f:67:02:00:b4:77:
07:be:34:0b:93:28:df:10:f2:b3:3d:e7:90:20:25:
d4:28:fe:3d:44:20:9e:9a:e5:59:48:11:0e:17:8c:
4a:b5:67:eb:11:e5:09:1a:57:56:e1:0d:8e:05:02:
26:07:bb:e6:ee:e7:a1:09:d0:d6:1a:e1:18:46:9a:
91:eb:14:a8:5d:8f:05:3d:b1:60:7e:c8:bb:69:6c:
7c:02:25:e3:5b:42:33:22:8c:1f:f0:08:2c:9c:c0:
df:fa:29:92:03:16:58:4b:cc:ec:a4:21:50:29:15:
e4:46:7e:da:2f:3c:c9:15:00:23:20:b8:76:9a:7b:
bc:f9:33:9f:d9:cc:c7:93:95:c3:77:ac:4f:3f:f2:
2e:89:fc:18:a6:68:33:dc:43:96:b5:17:f5:83:d3:
d3:f1:24:7e:d4:de:3b:16:c6:d1:c5:7d:7f:df:7c:
43:a2:88:2d:d8:d3:d4:9d:d7:ae:c6:ee:47:f9:58:
09:a6:36:2c:45:64:58:7f:9c:70:83:46:48:c1:8a:
1a:60:c5:ff:28:d3:c6:73:78:51:e0:bf:1d:06:cc:
ad:18:10:ce:93:65:60:b3:1b:2e:cc:41:d7:e7:ae:
e3:4f:1b:12:bf:f7:47:91:4d:8b:b6:9c:a4:43:0d:
73:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9F:96:A7:85:61:E7:98:0F:57:44:BF:6C:96:25:7A:C1:81:18:EE
X509v3 Authority Key Identifier:
keyid:97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b7:2a:16:85:fe:8d:05:4e:c1:28:22:51:29:64:d9:f0:fc:
7e:e9:a4:8c:3f:c9:bb:55:f2:24:78:82:f8:e3:fd:a9:c9:44:
0c:35:be:94:cf:7d:b7:11:62:56:6e:00:55:2f:c9:34:54:24:
18:08:2b:73:8c:ff:ff:8d:ca:d5:f9:8a:93:6c:94:fd:ad:0e:
22:28:e5:ef:98:a1:02:43:d0:48:56:84:5c:a1:3d:bc:f1:c8:
50:ed:ce:d1:98:b0:55:f9:b6:56:14:5b:10:f4:9a:e2:68:9e:
ae:37:57:3f:b0:23:6b:a7:0f:de:ec:6a:3c:4c:1e:68:4b:c6:
58:9b:84:ef:92:55:9b:a5:f3:a1:dd:de:44:a9:f1:8a:6b:df:
13:b3:51:43:c8:2b:4d:75:a4:b6:ee:7a:08:89:d0:b3:ae:10:
d6:d6:33:b0:26:67:ed:93:d9:1f:7b:27:eb:31:8a:05:d3:a7:
a7:79:b1:75:3d:29:79:57:29:52:8f:d1:2f:f7:9c:8a:33:81:
50:66:e1:9b:81:cc:a5:f9:96:6e:52:66:92:9e:68:d4:2e:b5:
aa:11:e3:e8:15:ca:54:71:4d:e8:3d:fb:5f:34:6d:8c:12:78:
47:c0:8d:ed:5f:18:64:4d:7d:43:6d:b9:49:a3:ea:f2:f8:7c:
93:32:a1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:22:55 2025 by rpki-client