Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
File: le0bk9O85ravzekCC4AWe4XGj1s.mft (raw, json)
Hash identifier: nk8PRNZlvusJan8cgrSMvy/dOrJc17dSaFS++eGT9e4=
Subject key identifier: 57:D5:31:9C:E6:12:3F:81:8C:BD:92:0D:D8:9A:8B:7F:FE:55:CC:BC
Authority key identifier: 95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
Certificate issuer: /CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Certificate serial: 01965B39A7DA1D548A3BED72E15539A830EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
Manifest number: 0DEC
Signing time: Tue 22 Apr 2025 02:00:27 +0000
Manifest this update: Tue 22 Apr 2025 02:00:27 +0000
Manifest next update: Wed 23 Apr 2025 02:00:27 +0000
Files and hashes: 1: le0bk9O85ravzekCC4AWe4XGj1s.crl (hash: yeeP/6Q5mhGm9E87vmzeiJuwfuCGZkxlmqJbSU7OjZI=)
2: sNS8MkZUJtaz5-wbK4r3uIbXR9Y.roa (hash: OLvJxCHm6G2oyD8b+AkUkXYjm6Gprq3IbMPbqUHNmeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:39:a7:da:1d:54:8a:3b:ed:72:e1:55:39:a8:30:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Validity
Not Before: Apr 22 02:00:27 2025 GMT
Not After : Apr 23 02:00:27 2025 GMT
Subject: CN=57d5319ce6123f818cbd920dd89a8b7ffe55ccbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:0c:6b:94:47:c5:13:57:eb:fd:94:c1:94:
8e:8c:38:32:c4:5f:74:d4:cf:2b:4b:74:6a:82:f3:
b0:eb:fe:15:ca:59:a4:1c:5b:5e:51:ff:28:ca:e0:
11:43:fd:f5:4e:07:6e:4a:0f:00:19:1f:2b:6e:71:
35:6d:49:67:99:5a:ce:16:5f:e2:dd:1a:2a:3e:4c:
97:b8:64:ef:6b:ab:66:d5:7a:cd:b6:d4:0d:e5:37:
b2:1e:b1:e1:95:89:f2:33:68:d9:78:3c:50:79:46:
a0:63:31:5f:1f:3d:94:d5:63:6d:2e:1e:b4:a5:fe:
54:c0:5f:50:e5:04:21:da:10:06:70:5a:cd:56:1a:
fd:ae:37:d4:e8:1e:18:2e:4e:9d:c5:d8:ff:72:fe:
5b:bc:4c:37:a5:a1:a2:84:d0:f2:94:9f:39:71:5b:
d5:83:6c:5f:18:25:dd:a8:fe:37:f7:28:66:e9:21:
d6:16:5b:5d:37:2b:f6:3f:6f:71:32:46:2c:5a:e7:
3d:06:28:14:24:f1:18:1f:15:bb:24:32:e7:1e:2c:
36:97:c0:c1:59:f7:b0:cd:d0:c4:9e:7e:55:d9:c5:
fc:14:ec:24:00:98:35:ea:ad:b0:24:55:e7:5c:cf:
51:9c:f4:7f:e5:5f:71:11:0b:b5:cc:32:14:ad:d0:
4a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D5:31:9C:E6:12:3F:81:8C:BD:92:0D:D8:9A:8B:7F:FE:55:CC:BC
X509v3 Authority Key Identifier:
keyid:95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:42:56:24:87:38:20:f4:74:8d:3d:95:cf:e9:cd:93:50:81:
be:40:ff:f4:1c:0b:4d:37:89:fb:7d:9f:22:e3:2a:90:f9:4b:
f2:dd:ef:33:06:61:24:a5:50:5d:04:79:b6:5c:c3:33:9c:92:
d7:67:65:94:01:26:be:17:50:38:14:56:a1:3f:33:ef:2d:d8:
0e:2d:89:a2:5f:0b:45:6e:1d:51:77:96:74:36:47:e0:d8:d8:
a9:5e:85:a9:3c:75:6d:1d:11:f2:07:1a:9c:6f:3a:e7:39:80:
3c:63:a9:16:ba:e6:55:54:74:73:55:fd:01:c5:dc:56:0f:16:
2b:17:64:7a:d4:cb:21:26:b4:cf:f6:6e:4e:b2:7f:ff:88:88:
5b:a1:48:98:1d:2f:5e:a5:44:2a:03:33:74:60:95:06:38:d6:
e9:06:9d:3b:51:87:d6:10:09:ba:b1:d4:95:27:21:e7:c6:ef:
75:34:14:0b:b3:e4:4e:1f:5f:e1:8a:35:b3:f9:91:2e:0a:0d:
0f:3e:2d:96:a4:3e:8b:36:85:08:fe:f1:5f:b4:95:23:19:b8:
33:a6:b3:0a:2f:f8:38:c5:1c:23:d4:da:b6:ab:85:9d:6f:5f:
c4:fb:05:3b:be:b9:a1:30:ac:81:e5:c0:a8:43:3a:25:29:ae:
c6:c9:57:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:31:05 2025 by rpki-client