Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
File: l2lJAzf2c8ZOORJK6JgbA05QEno.mft (raw, json)
Hash identifier: nvEisSp8KN6elD/7c9cujF67dHpMiwQOYJ2GXBhL1uc=
Subject key identifier: B4:89:AC:0D:80:A6:96:8F:D6:09:67:14:54:0E:EE:48:18:84:1C:4A
Authority key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
Certificate issuer: /CN=9769490337f673c64e39124ae8981b034e50127a
Certificate serial: 0196545BFE4FD7A4D22067C89882EA332121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 18:00:37 +0000
Manifest this update: Sun 20 Apr 2025 18:00:37 +0000
Manifest next update: Mon 21 Apr 2025 18:00:37 +0000
Files and hashes: 1: l2lJAzf2c8ZOORJK6JgbA05QEno.crl (hash: GKiNXCA7w65ow5AcZl+mqbZvloVmXKkyk12DpkL+1tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:fe:4f:d7:a4:d2:20:67:c8:98:82:ea:33:21:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9769490337f673c64e39124ae8981b034e50127a
Validity
Not Before: Apr 20 18:00:37 2025 GMT
Not After : Apr 21 18:00:37 2025 GMT
Subject: CN=b489ac0d80a6968fd6096714540eee4818841c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:86:3d:20:ec:38:e5:ed:5d:b9:04:ce:79:
f7:73:f8:84:f9:5b:5a:91:bc:e2:ee:a6:87:b7:98:
32:fd:ac:d6:6b:d1:9a:e2:96:53:7a:e5:3d:4d:59:
98:fc:39:b2:06:d5:26:a2:1b:11:a4:30:16:df:a7:
79:65:f7:3b:3d:66:5b:01:9a:e1:89:0c:41:f8:95:
d4:cb:75:4f:3f:d4:44:f9:18:e4:e6:13:ab:22:35:
0f:2d:7f:fc:63:62:c5:0f:5b:a9:8d:2a:46:c2:75:
21:5f:85:f7:8e:b1:ad:8c:6a:e1:58:07:56:f0:31:
d7:18:30:2a:24:45:1c:1b:0c:ff:23:ca:b7:be:bb:
33:08:7f:7f:ee:86:66:4f:96:07:de:45:34:a6:72:
01:e8:5b:61:20:63:8b:6b:7d:89:9c:97:ef:35:38:
77:52:39:da:79:cb:f3:2d:c2:77:61:db:4d:a8:23:
7c:c1:f2:33:11:9b:f0:8e:3d:d5:a7:0f:d1:12:cb:
3c:a0:9c:d4:d1:34:79:4a:80:1e:54:5e:c8:20:54:
57:51:1d:d4:20:99:ea:d2:21:ae:37:2b:c4:74:22:
01:8d:7c:1e:ea:6b:ec:80:6f:02:c3:60:13:27:fe:
ec:91:aa:a5:6e:5a:ed:ca:ce:28:b2:4f:72:5b:27:
22:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:89:AC:0D:80:A6:96:8F:D6:09:67:14:54:0E:EE:48:18:84:1C:4A
X509v3 Authority Key Identifier:
keyid:97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:9a:ec:00:35:ae:a6:72:86:a9:91:33:7a:1b:94:a5:a1:d2:
12:5d:7b:9a:4b:4b:12:78:fc:5b:8e:e8:af:b9:90:3a:7b:5d:
a2:23:83:4f:c5:9d:db:80:e0:39:77:22:04:13:28:cb:28:70:
61:f4:07:80:67:d4:a6:1a:74:ef:58:6c:97:68:8f:9b:85:87:
57:40:79:fa:1a:1a:c9:7e:36:d9:7e:f7:8a:8a:0c:c6:ec:d0:
fe:2a:f2:cb:f0:24:94:24:a4:de:d2:9e:e4:f4:c7:ae:8b:2e:
66:ed:e6:16:7c:43:78:a2:62:77:bc:9a:7a:11:f0:cf:95:f2:
eb:0e:b0:4a:ac:5d:3c:30:f3:8b:1b:b6:24:41:7c:56:b8:7c:
02:9d:eb:e2:cb:60:92:18:af:5f:b6:02:86:33:02:1e:c5:43:
ae:47:9c:2d:ae:39:a9:85:b0:94:7d:15:75:96:78:50:55:e7:
39:32:11:26:9a:e9:65:06:92:87:15:6a:4d:27:86:01:a6:1d:
63:05:01:36:36:18:4e:24:25:2a:a1:59:02:41:b4:ba:2c:64:
13:94:ae:2a:db:fa:8e:77:ef:b5:dc:83:ec:a8:fc:3e:75:b1:
a1:1a:71:db:25:e5:97:7b:62:27:24:0c:60:05:ee:19:d1:d2:
2c:3d:29:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:57 2025 by rpki-client