Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
File: l2U-VqlPj_3pS15PKKeeRffvDNw.mft (raw, json)
Hash identifier: Hm811rhw+VbxNsj6cjYiCQ/NqX+BJZ0thJhz2VmrXMM=
Subject key identifier: BA:FD:58:D3:1A:59:AF:D5:E9:28:23:CA:F1:33:9E:16:07:E9:29:23
Authority key identifier: 97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC
Certificate issuer: /CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc
Certificate serial: 019657269DF128FBD519D8E9F99EDEE46E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
Manifest number: 14E5
Signing time: Mon 21 Apr 2025 07:01:10 +0000
Manifest this update: Mon 21 Apr 2025 07:01:10 +0000
Manifest next update: Tue 22 Apr 2025 07:01:10 +0000
Files and hashes: 1: l2U-VqlPj_3pS15PKKeeRffvDNw.crl (hash: kcC5PSuS+h2CF65nbDFBZ4Fxn2eNcvthWWE9Cro8fsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:9d:f1:28:fb:d5:19:d8:e9:f9:9e:de:e4:6e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97653e56a94f8ffde94b5e4f28a79e45f7ef0cdc
Validity
Not Before: Apr 21 07:01:10 2025 GMT
Not After : Apr 22 07:01:10 2025 GMT
Subject: CN=bafd58d31a59afd5e92823caf1339e1607e92923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:85:dd:d1:29:de:c4:0b:d2:30:1c:88:d2:
94:8e:4d:82:a9:17:45:69:a6:01:35:8f:a1:9e:c4:
66:1a:08:86:06:b6:d2:c4:1d:16:ed:92:fe:db:70:
e8:98:f0:96:0d:91:62:f8:6b:96:96:69:0b:94:fa:
97:82:e8:4d:e0:e0:41:fd:15:14:1d:62:d3:51:8a:
a0:c8:61:57:7b:80:c8:98:53:4e:81:09:75:ca:87:
65:28:5f:86:70:c7:c2:93:b6:5d:04:3a:58:bd:3b:
97:57:64:c7:6f:6e:69:3d:fe:92:e7:fb:d7:e1:08:
6b:6d:d2:d9:9f:e3:f3:d4:2d:5b:b2:14:dc:e1:05:
cb:aa:d3:3a:79:c5:39:ad:96:85:77:ca:8f:ad:e6:
ca:59:a1:c9:ba:0a:69:12:30:0e:5c:cc:a4:0d:50:
a7:ac:6d:1d:4a:a2:72:db:5f:ec:5d:62:b6:da:4a:
88:a6:a7:ad:ab:01:7f:8e:71:c7:b5:a9:29:2d:53:
1e:38:1c:2a:89:d5:8a:b3:f2:65:54:6d:94:9e:bb:
76:a8:d7:1b:86:2b:70:f2:9e:c0:53:3e:12:6a:f8:
c3:a8:46:b3:8b:06:2d:7b:1e:3a:db:3c:dc:fd:98:
df:5b:1a:fc:1a:18:c2:68:cb:5e:62:41:39:ee:ec:
51:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FD:58:D3:1A:59:AF:D5:E9:28:23:CA:F1:33:9E:16:07:E9:29:23
X509v3 Authority Key Identifier:
keyid:97:65:3E:56:A9:4F:8F:FD:E9:4B:5E:4F:28:A7:9E:45:F7:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2U-VqlPj_3pS15PKKeeRffvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ce146-e07d-41d0-b127-28c89c51b4b0/1/l2U-VqlPj_3pS15PKKeeRffvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:41:05:0f:a5:63:94:bc:57:5a:c3:18:51:08:61:3d:5c:b1:
26:77:92:98:27:cd:6e:ce:25:b6:86:12:a0:5c:42:9d:df:ee:
51:12:4c:23:1c:63:df:c9:7a:bc:7c:d7:0e:17:63:26:cb:9c:
5f:75:df:32:44:53:be:c5:31:81:cc:71:70:00:3e:d9:4d:e1:
68:be:55:ad:42:85:c5:4e:2d:5d:89:28:81:fd:7a:f9:4c:14:
a0:16:91:53:36:44:45:b8:2d:81:da:f2:9f:77:09:92:da:41:
1d:a1:18:ec:e5:84:f7:2f:1a:c9:a8:8e:1f:f8:30:b6:7c:04:
a0:f8:62:de:27:6d:74:aa:be:6a:86:a1:23:89:c8:ea:1b:9f:
90:3d:4e:59:47:fc:05:67:98:c3:49:03:7b:f1:eb:2f:79:9d:
a6:8c:09:12:ca:ed:61:ba:b5:e5:61:40:9c:13:45:52:8f:22:
fd:4c:02:30:66:bd:35:1c:fe:7c:61:4a:b6:28:87:ce:ea:81:
e6:de:ac:2c:0d:74:03:7e:be:5e:ae:39:b8:9b:32:62:42:a8:
36:22:bd:43:76:71:99:cc:f1:7c:08:fb:29:f6:f7:09:73:22:
13:14:50:8b:eb:66:82:1b:33:28:43:8f:f4:3d:1f:41:0c:61:
31:09:d9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:51 2025 by rpki-client