Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft
File: L6dldTzv6BbTiyUDeclXZqlvBtc.mft (raw, json)
Hash identifier: IURfli2MVjpoTeAA0rIQuflIkMDU8sSwUXcUeVtYN4s=
Subject key identifier: DC:34:48:EA:A6:7E:B0:09:44:5D:68:BA:BF:93:E0:B7:31:BB:31:AB
Authority key identifier: 2F:A7:65:75:3C:EF:E8:16:D3:8B:25:03:79:C9:57:66:A9:6F:06:D7
Certificate issuer: /CN=2fa765753cefe816d38b250379c95766a96f06d7
Certificate serial: 0196564A307C4D0C79BB1A151B268BCCF0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft
Manifest number: 1135
Signing time: Mon 21 Apr 2025 03:00:24 +0000
Manifest this update: Mon 21 Apr 2025 03:00:24 +0000
Manifest next update: Tue 22 Apr 2025 03:00:24 +0000
Files and hashes: 1: L6dldTzv6BbTiyUDeclXZqlvBtc.crl (hash: Asoxl5BJG7OmgZ7DCfQsL0sXgcWjQSIfSROwScVGmPc=)
2: Voo3pzf4LD_DIb5LDnvARIWMy1I.roa (hash: uawaflHMP9u/AC/5na8UCpQ318svPIstKaBGatZyWFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:30:7c:4d:0c:79:bb:1a:15:1b:26:8b:cc:f0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa765753cefe816d38b250379c95766a96f06d7
Validity
Not Before: Apr 21 03:00:24 2025 GMT
Not After : Apr 22 03:00:24 2025 GMT
Subject: CN=dc3448eaa67eb009445d68babf93e0b731bb31ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:21:1f:51:78:15:fe:5c:71:93:2b:e1:71:6f:
52:04:87:75:5d:4e:95:07:f4:0f:c4:e1:da:c0:9a:
11:d7:f7:ab:83:67:04:17:74:c9:8c:ce:2c:fe:19:
12:df:0b:cf:08:c9:92:e8:f7:bb:9d:dd:c8:d9:a0:
e1:23:8c:ac:c3:b8:aa:22:32:2b:81:fc:0f:e7:c1:
2f:07:79:09:ad:43:d6:f7:d2:59:03:c5:ea:81:a6:
13:99:a7:8b:f5:f5:d6:7e:ce:a9:44:c4:af:a2:87:
07:2a:77:3f:33:b3:6d:72:ec:8a:c2:14:f9:a8:0e:
84:a5:3c:a5:75:e8:83:bd:03:1e:2f:2c:ae:3c:6f:
9d:d1:a9:25:be:b1:c0:be:75:6f:d0:79:5c:df:a9:
fa:69:43:1c:ff:32:41:e2:20:a7:66:64:aa:a0:13:
a4:8d:12:12:4d:78:4f:08:35:a9:b7:13:cb:88:1a:
b4:b7:e7:b0:f8:fd:47:ab:3e:96:c6:2b:4f:20:07:
a2:6f:5b:c5:fe:26:e3:22:79:93:d3:23:5f:6e:d5:
ea:c6:69:51:a2:c8:6a:b9:a9:33:10:82:9c:51:db:
8c:7d:f5:dd:b7:18:55:e6:fc:8b:5e:1c:5e:b3:9f:
8e:de:4f:ea:f8:00:7d:83:a7:d8:df:8a:61:55:d5:
2a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:48:EA:A6:7E:B0:09:44:5D:68:BA:BF:93:E0:B7:31:BB:31:AB
X509v3 Authority Key Identifier:
keyid:2F:A7:65:75:3C:EF:E8:16:D3:8B:25:03:79:C9:57:66:A9:6F:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6dldTzv6BbTiyUDeclXZqlvBtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a6d77c-a10a-47ab-b552-1fc6646d1e77/1/L6dldTzv6BbTiyUDeclXZqlvBtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0c:e9:63:a0:2d:04:f3:43:64:c4:8c:88:b7:cf:bd:63:c3:
0a:7f:ea:59:67:79:8c:c6:e3:ab:29:18:a8:8c:fc:c7:d6:9f:
29:62:6a:dc:f9:cf:62:24:01:d5:d3:92:86:b1:d8:44:01:4b:
8f:ca:68:85:c2:59:4b:60:7a:8c:02:91:dc:38:8b:dd:94:0b:
58:86:a6:d9:89:ae:08:0e:0f:48:17:2b:49:95:79:23:b4:02:
df:83:71:a1:1b:1c:a9:8d:27:08:23:57:32:ee:e1:f7:22:0f:
ee:67:84:1b:9d:0c:29:6f:87:85:05:51:2d:b7:96:c4:62:44:
0e:aa:26:b2:22:e9:86:d7:23:32:ca:32:97:4e:56:b4:df:90:
68:b9:77:98:ff:d0:70:89:46:fe:c6:6d:01:94:8f:10:72:63:
30:b5:21:ec:d7:0c:0c:1b:ff:93:55:98:f0:22:cb:32:0b:1d:
a5:04:48:ea:4e:3d:83:e4:29:d8:7b:8a:84:a4:43:23:0e:59:
ff:21:57:9d:f0:84:af:d0:39:c1:ee:19:d4:65:8c:86:21:eb:
20:61:98:34:82:b8:b4:54:c4:42:a9:1f:9d:92:51:0f:30:a4:
a2:4f:dc:c9:55:a4:0c:3e:40:9d:f1:e1:0a:72:aa:28:e4:6f:
7f:bf:5b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:55 2025 by rpki-client