Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
File: l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft (raw, json)
Hash identifier: QaHUUjRrNJfhRnEsYOxJrNjfpxX7n9K5ZcZEy51oyiQ=
Subject key identifier: 98:5A:15:4A:AD:82:08:FC:82:47:8B:EE:AC:46:F0:2D:88:B3:E4:35
Authority key identifier: 97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
Certificate issuer: /CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Certificate serial: 01965A5DFCB80214D698E9F6A47D9919DBB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
Manifest number: 12F7
Signing time: Mon 21 Apr 2025 22:00:31 +0000
Manifest this update: Mon 21 Apr 2025 22:00:31 +0000
Manifest next update: Tue 22 Apr 2025 22:00:31 +0000
Files and hashes: 1: GYwl8BFvRYxoWPkgG0LFX5Kh3wY.roa (hash: po/DPr4lC/jP6El38brtzMkXAB3zwNPviTVID9wQBCU=)
2: l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl (hash: yF9O2orGu0aJ+P7x5Jf/gB/20yj5iQ3bG/eWmaJxxd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5d:fc:b8:02:14:d6:98:e9:f6:a4:7d:99:19:db:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Validity
Not Before: Apr 21 22:00:31 2025 GMT
Not After : Apr 22 22:00:31 2025 GMT
Subject: CN=985a154aad8208fc82478beeac46f02d88b3e435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:24:c4:1a:ee:98:17:28:d7:5a:bf:e0:cf:
55:a5:37:7e:b6:26:d3:a5:a8:20:38:a9:a2:5c:2c:
91:5d:c7:2e:e0:e4:b6:c0:89:73:01:6b:4f:09:1a:
47:8f:fb:ff:bc:96:a7:97:40:34:91:bd:9f:38:6d:
c4:ac:97:bb:ed:9e:21:91:ab:7b:11:fa:4c:e3:67:
84:68:3c:84:be:05:e1:7b:59:a0:1c:f9:8e:1e:f2:
4b:ec:4f:92:70:34:28:d5:28:f4:cb:d6:d5:94:4c:
d3:f9:09:1e:ef:0d:5b:d1:d7:ac:ef:3f:34:1c:6d:
08:d6:72:9e:76:bc:6b:15:69:bf:2e:eb:2c:f8:00:
5e:03:4b:ce:5b:14:cb:60:89:c6:4e:4e:a6:3f:52:
aa:2d:34:08:05:d1:08:77:b3:2c:b1:87:db:85:46:
97:3a:16:ac:4b:1d:f8:19:86:46:02:78:03:29:33:
c2:38:47:c0:81:a6:ae:d9:39:47:2d:59:1b:8d:3c:
3a:60:57:be:14:0c:02:41:8f:7a:aa:f0:ea:c6:d3:
f6:9f:d2:5b:03:3c:8c:1a:7a:02:6e:a2:79:44:84:
53:a6:d9:f7:1e:6a:2c:a1:03:e2:3e:ea:df:43:66:
6c:08:16:82:a5:db:7a:bc:0e:ae:49:6e:24:b0:7b:
2e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5A:15:4A:AD:82:08:FC:82:47:8B:EE:AC:46:F0:2D:88:B3:E4:35
X509v3 Authority Key Identifier:
keyid:97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a5:0b:06:fc:2c:13:fd:d6:8e:e3:b7:bf:dd:eb:57:47:b1:
23:ff:33:be:65:1b:fe:56:70:9f:59:37:69:b1:f4:07:90:46:
29:85:22:f2:eb:07:66:c4:0e:f0:5a:0b:c6:bc:38:55:e9:08:
86:6f:ee:9b:be:8f:54:af:39:be:0c:bd:55:7a:4c:08:f7:29:
8d:ef:fb:ff:bc:49:1b:1a:e6:63:d6:cf:17:fa:49:5d:ef:06:
3c:ff:d1:d9:a8:55:39:7e:fe:ed:f3:51:62:8a:76:79:84:62:
ea:3a:79:56:b9:b5:e7:fd:ef:95:dc:56:29:f6:fb:2d:86:e6:
b3:23:b8:52:0d:24:90:d1:55:a9:d4:08:6d:d2:4e:32:ad:40:
af:ca:02:9b:d2:38:88:6e:52:c1:aa:c6:de:86:1a:de:6c:90:
51:50:9d:8e:4c:08:79:a2:6e:bf:31:d6:d3:b7:c2:93:cb:25:
bb:c4:49:f2:bc:4c:63:04:fe:c7:6b:6f:a0:8a:d5:09:3e:da:
c7:dd:5b:d8:ef:a3:f5:24:46:2c:c2:7f:8c:72:a1:05:53:9a:
ed:9e:1e:f2:aa:85:85:0a:d9:e2:c0:55:1d:95:8e:d0:b5:b4:
a6:82:e3:8e:9f:bb:ba:67:4c:64:96:a9:22:95:51:95:c1:dc:
21:b8:18:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:55 2025 by rpki-client