Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.mft
File: lYj7Sw-weytS4w2SGYmPKM-8mi0.mft (raw, json)
Hash identifier: KV2qqJxClY23P7MnVY4hrdg06RH2OkbJA7uOevfcL44=
Subject key identifier: E6:12:B1:E6:10:C2:32:74:1F:89:9A:8B:50:38:3A:B1:09:33:F5:EF
Authority key identifier: 95:88:FB:4B:0F:B0:7B:2B:52:E3:0D:92:19:89:8F:28:CF:BC:9A:2D
Certificate issuer: /CN=9588fb4b0fb07b2b52e30d9219898f28cfbc9a2d
Certificate serial: 019653EE5E883BB2F39EFE0433D29A879745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYj7Sw-weytS4w2SGYmPKM-8mi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.mft
Manifest number: 127A
Signing time: Sun 20 Apr 2025 16:00:52 +0000
Manifest this update: Sun 20 Apr 2025 16:00:52 +0000
Manifest next update: Mon 21 Apr 2025 16:00:52 +0000
Files and hashes: 1: cpaYv-AQ-t9zhgKKXsvKBzFcSaQ.roa (hash: QH8X2hDISDdQVFPt9W1N705nATkeCHCrQhlKJMRWx8A=)
2: lYj7Sw-weytS4w2SGYmPKM-8mi0.crl (hash: LuCBWfgWrc7Jc0JSFMd6Vt9G4IZCSwnJoCnimyGumKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYj7Sw-weytS4w2SGYmPKM-8mi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:5e:88:3b:b2:f3:9e:fe:04:33:d2:9a:87:97:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588fb4b0fb07b2b52e30d9219898f28cfbc9a2d
Validity
Not Before: Apr 20 16:00:52 2025 GMT
Not After : Apr 21 16:00:52 2025 GMT
Subject: CN=e612b1e610c232741f899a8b50383ab10933f5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:46:54:93:57:9e:a4:c3:68:4a:cf:ae:c4:4f:
92:2f:fb:d7:9a:e2:5a:b1:20:92:da:2b:5e:dd:2e:
85:db:66:09:e2:6b:b7:b1:72:db:16:4f:82:d5:c5:
a2:bd:11:7e:e1:2e:73:0b:2c:25:73:1c:32:c2:ab:
18:9f:ec:6f:23:e3:6f:ec:48:cf:65:d4:a1:4e:ab:
23:4d:12:c5:3e:6e:af:c3:53:39:8e:37:d4:70:9b:
e4:c3:31:08:89:ba:45:54:0f:7c:02:53:72:59:55:
3c:6b:83:1a:c5:74:bb:cd:c3:cd:91:e0:c3:eb:f3:
46:18:e3:7c:61:32:cc:df:4b:da:23:29:9c:e9:63:
75:b8:b5:eb:7b:37:c0:21:2d:8d:ad:53:d9:3d:82:
9c:fe:1d:1f:75:2b:b7:87:27:83:4d:df:a6:d3:2e:
b2:ed:c7:80:9c:a6:92:64:7d:77:01:1e:1d:56:ae:
08:6d:40:8f:a7:9a:b5:fd:ed:7f:77:73:41:55:25:
f6:a3:4b:30:e5:53:bc:c1:42:f1:82:64:30:b1:6b:
0f:c9:b4:b7:45:aa:b1:a1:ef:72:7f:43:18:1e:b4:
a2:ec:78:c4:53:96:57:cc:39:99:a2:3e:d5:cd:b3:
15:56:69:79:67:ac:82:73:1f:dd:98:c8:fb:64:1c:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:12:B1:E6:10:C2:32:74:1F:89:9A:8B:50:38:3A:B1:09:33:F5:EF
X509v3 Authority Key Identifier:
keyid:95:88:FB:4B:0F:B0:7B:2B:52:E3:0D:92:19:89:8F:28:CF:BC:9A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYj7Sw-weytS4w2SGYmPKM-8mi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:17:fc:41:ca:e7:11:16:bb:30:f4:ac:15:6b:0d:34:a3:62:
ca:0e:79:13:78:0c:7f:e1:f2:37:ec:e1:1d:00:ed:b2:33:35:
03:8b:de:65:ff:c0:13:0a:80:ef:f5:c8:fb:ab:c8:9d:75:cd:
23:5a:79:01:73:1a:31:c3:82:e4:5d:2f:a1:76:35:bc:b1:00:
2b:0b:ab:e1:e0:6e:a2:76:c3:d4:9d:b6:98:66:b8:d7:cd:3c:
a2:22:73:16:1c:2a:34:08:a8:02:d3:0b:63:1f:cf:c4:5b:f2:
6b:01:09:27:20:86:f6:29:81:cc:3a:a1:60:81:08:28:2a:a6:
5e:a9:b2:bb:76:90:65:c6:b4:de:f2:41:41:15:7b:cc:14:ed:
36:00:85:aa:02:36:6b:91:d9:36:88:63:97:88:47:2a:b9:01:
e3:d0:cd:c4:6a:1f:da:b7:16:32:05:0e:61:dc:54:78:dd:24:
93:c5:af:4f:32:6e:eb:ca:80:bd:bc:e0:d2:a4:08:79:b0:8b:
34:ca:0a:56:9c:c6:c5:a1:3b:35:ec:ae:7d:f8:a4:b3:d2:f2:
2f:81:78:61:12:34:34:8a:0f:fe:6b:d5:2a:f4:4a:51:4f:a0:
d9:7b:c0:1d:4b:e3:f6:9d:ca:3f:b0:7d:55:6b:0a:ef:2c:10:
07:b8:51:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:26:32 2025 by rpki-client