Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
File: Li9t2XmfpOoIT9VJ1xDGiW364pE.mft (raw, json)
Hash identifier: 8EShSktn5ubG1AdRkv5ybgOh6Uax6/UueWDuWYcyllY=
Subject key identifier: CC:7A:E2:77:42:DF:65:7F:58:79:DC:D8:90:38:32:81:D2:EF:68:AA
Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
Certificate issuer: /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Certificate serial: 019659F08A2E1DF1F504F80D7C54BA22ACE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
Manifest number: 074D
Signing time: Mon 21 Apr 2025 20:00:58 +0000
Manifest this update: Mon 21 Apr 2025 20:00:58 +0000
Manifest next update: Tue 22 Apr 2025 20:00:58 +0000
Files and hashes: 1: 1KuevLKOXin1b0wgf0GWz0r6nwg.roa (hash: ASw2YdXHtzStc1C+SsPAtANeLSe13bWPdtXsO3TzYqc=)
2: Li9t2XmfpOoIT9VJ1xDGiW364pE.crl (hash: HhmDkhhQ6TleAnuJQcUg+N/4rq+2StlM0sVoj79LSHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:8a:2e:1d:f1:f5:04:f8:0d:7c:54:ba:22:ac:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Validity
Not Before: Apr 21 20:00:58 2025 GMT
Not After : Apr 22 20:00:58 2025 GMT
Subject: CN=cc7ae27742df657f5879dcd890383281d2ef68aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:7b:a6:1b:ef:8c:70:b0:a0:7b:01:22:ce:
31:2c:4b:82:cc:1f:71:b8:71:c4:d3:a8:40:bd:1d:
5b:b1:91:e4:be:40:1e:44:95:17:69:00:5a:56:a1:
4a:39:30:53:87:30:63:48:25:c9:90:d2:2d:7d:de:
f8:c2:55:54:f4:6b:73:b9:35:84:bd:c7:ef:97:09:
ce:72:04:79:23:3f:7d:2f:98:fd:fa:bd:db:19:e5:
2b:ce:5b:1a:97:c1:16:5f:f5:eb:55:20:ac:9a:6d:
11:44:47:54:c2:07:5d:e2:9d:16:55:ca:5b:a3:7f:
a0:4d:18:b9:36:99:ba:29:c6:69:c8:31:a4:de:7b:
7c:d1:78:f4:36:ac:d8:b1:3f:47:8b:08:c0:58:6f:
b3:7c:13:d2:96:00:da:08:5b:56:c2:b6:7b:37:d0:
16:d2:07:0f:c0:6c:45:d5:b0:59:0c:a1:58:ed:bf:
4e:36:e1:9a:6d:39:76:c8:2a:ae:16:b9:36:20:8c:
5c:f1:e9:d4:3d:96:64:a7:de:e3:ec:87:5e:4e:72:
09:39:2a:1a:60:ab:8b:7d:f9:d4:16:36:ed:f0:dd:
79:9a:bf:be:0b:d2:f4:d0:18:e3:f2:f4:fc:aa:4d:
4a:30:b8:f5:29:55:8f:28:af:2d:0c:b4:cd:d0:65:
33:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7A:E2:77:42:DF:65:7F:58:79:DC:D8:90:38:32:81:D2:EF:68:AA
X509v3 Authority Key Identifier:
keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:20:cf:18:36:de:fd:b9:98:89:bf:a4:62:d8:c8:03:d8:ef:
5b:5d:31:67:99:17:21:15:4a:84:bc:3f:3a:e6:4f:cc:2d:00:
bb:93:d9:a9:7c:87:83:d3:f4:05:b5:ce:9f:b4:08:a1:1f:b7:
08:83:42:45:de:d7:e2:3b:a3:66:65:0f:44:e8:d6:55:fb:91:
0a:0e:04:18:5a:79:9e:da:c2:32:ea:53:5b:40:0a:e2:53:90:
5b:14:10:48:b9:b9:65:e1:0b:d7:15:cd:77:ca:d0:d2:f7:60:
32:26:9f:7b:43:cc:4d:76:4c:fd:2b:fe:69:22:d9:d7:35:2f:
13:a9:a4:8b:8f:09:17:f6:25:8b:b7:44:c0:df:a0:6a:81:bb:
79:21:28:0e:dd:4a:64:ec:13:f4:01:8c:e7:3c:77:cc:f5:9e:
6f:63:96:46:a1:09:e7:8d:4b:e0:f2:b7:f1:4d:9a:2a:e3:60:
60:36:a9:93:4c:61:30:4b:f0:a0:af:9a:21:6c:4e:18:af:ab:
89:3f:e5:e8:8c:77:0e:ea:b9:4b:b4:90:6f:64:d9:af:cf:0b:
30:83:13:6f:cd:ae:49:66:ba:a6:06:69:15:39:b1:2a:54:e2:
10:ea:bf:64:5b:9e:9d:11:a4:55:45:d1:6a:c4:5d:b5:4b:ab:
cf:c7:ad:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:49:49 2025 by rpki-client