Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/L-QXNib0YCZA6NTpa1ShoJar54s.mft
File: L-QXNib0YCZA6NTpa1ShoJar54s.mft (raw, json)
Hash identifier: aNrEw7MSnTDR0QYP1QtTNDb3r59BXP5kgoKF8ENCOgg=
Subject key identifier: B6:6C:BC:50:4B:CD:31:FE:A4:3C:44:E0:B6:B0:6D:6C:10:95:B4:AB
Authority key identifier: 2F:E4:17:36:26:F4:60:26:40:E8:D4:E9:6B:54:A1:A0:96:AB:E7:8B
Certificate issuer: /CN=2fe4173626f4602640e8d4e96b54a1a096abe78b
Certificate serial: 01965BDE6B0C516A1795C905E648280730B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-QXNib0YCZA6NTpa1ShoJar54s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/L-QXNib0YCZA6NTpa1ShoJar54s.mft
Manifest number: 0FEF
Signing time: Tue 22 Apr 2025 05:00:25 +0000
Manifest this update: Tue 22 Apr 2025 05:00:25 +0000
Manifest next update: Wed 23 Apr 2025 05:00:25 +0000
Files and hashes: 1: 8PzBSdujNIrE9ZxwXkq7Jh0bBAs.roa (hash: 4Awpnumk+tPfHQxPVq+VsOA860hCJdP+GfTQ/2K+zcA=)
2: L-QXNib0YCZA6NTpa1ShoJar54s.crl (hash: Sqsa6sdqwOxvAiFnDsq4juFiPZtHbBLax9XDbAtwfu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/L-QXNib0YCZA6NTpa1ShoJar54s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/L-QXNib0YCZA6NTpa1ShoJar54s.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-QXNib0YCZA6NTpa1ShoJar54s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:6b:0c:51:6a:17:95:c9:05:e6:48:28:07:30:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe4173626f4602640e8d4e96b54a1a096abe78b
Validity
Not Before: Apr 22 05:00:25 2025 GMT
Not After : Apr 23 05:00:25 2025 GMT
Subject: CN=b66cbc504bcd31fea43c44e0b6b06d6c1095b4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:d2:d5:59:94:98:8c:f4:c9:57:4b:ba:68:
c6:c8:18:0f:4a:3a:1e:e1:cd:94:ab:50:20:5d:8b:
46:27:9d:b1:30:d2:3b:29:fd:e8:ce:0e:14:bf:a1:
77:35:47:41:1f:d5:52:81:13:fb:d3:d7:a1:96:f5:
7b:ac:59:13:d8:0d:e2:57:cc:64:6e:82:71:16:3a:
1b:ac:99:99:d6:38:e9:e2:99:82:e4:ef:4e:de:13:
b2:ac:f8:82:89:83:73:0d:76:c6:f7:04:88:69:11:
a3:c6:64:6a:6f:85:e1:d3:54:f5:7c:6a:f4:90:76:
e4:ed:ed:45:5c:6d:82:6f:6f:35:05:37:46:dd:c0:
f6:00:11:f5:1f:2a:ab:35:17:8c:49:fa:eb:a1:ce:
ef:c1:be:25:65:c2:12:49:ee:60:60:a8:59:cd:1c:
64:b2:65:d0:e8:19:ca:5f:f7:73:c1:1d:32:57:07:
83:ff:6c:a5:a0:cc:50:6b:fa:f4:3e:40:5f:64:c5:
79:ee:53:0e:2a:b7:64:30:1e:68:5d:7f:6c:01:55:
4b:f4:9a:95:7a:14:2f:d7:79:7d:a1:0f:13:0c:cd:
b2:6a:9e:0f:6b:b0:a1:94:4b:cc:c1:91:a3:31:b0:
fd:3b:e8:19:b6:ae:cd:ec:c5:f0:31:af:74:31:c1:
a4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6C:BC:50:4B:CD:31:FE:A4:3C:44:E0:B6:B0:6D:6C:10:95:B4:AB
X509v3 Authority Key Identifier:
keyid:2F:E4:17:36:26:F4:60:26:40:E8:D4:E9:6B:54:A1:A0:96:AB:E7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-QXNib0YCZA6NTpa1ShoJar54s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/L-QXNib0YCZA6NTpa1ShoJar54s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a4cd0d-af14-49c3-9481-35479c54dcbd/1/L-QXNib0YCZA6NTpa1ShoJar54s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f3:70:65:88:3e:9c:fc:f9:5c:6c:7b:74:81:12:4d:f1:ff:
03:0e:39:d9:f6:46:0f:10:ff:24:a4:3f:55:31:0d:0b:1f:ff:
a1:47:75:12:72:dd:66:4b:49:57:ed:2b:7a:83:c9:f8:be:5b:
f8:0d:18:87:bb:dd:93:b3:4e:ca:de:5d:63:46:36:98:cf:92:
d0:88:e3:e8:c2:75:60:24:17:8b:3b:6e:14:f0:31:3d:94:cf:
ac:19:c0:f9:55:50:59:7b:4c:ed:28:c5:c6:a4:d0:e9:05:ca:
31:c8:6f:81:4a:82:8f:4f:91:5a:4f:de:8b:23:f6:58:1f:b8:
b3:e8:8b:ea:b4:62:c9:82:e2:5f:9f:f7:33:ad:bb:32:3b:af:
0e:58:e3:ef:33:f4:89:cc:33:61:cd:f3:d7:c7:4c:f6:1f:c3:
22:a3:a1:3f:ff:ce:2f:dd:61:06:7e:01:51:f9:d8:56:2d:aa:
55:64:5d:77:27:3d:b0:90:71:19:c3:93:23:9a:7e:2f:cf:d9:
16:88:be:4b:12:c3:42:75:1f:52:2c:61:2b:a7:07:e5:2b:cb:
23:e4:7b:b5:3d:6b:2e:fc:e1:7e:f1:c4:f7:5e:8b:07:01:1e:
88:5b:55:a6:87:10:3a:71:db:8c:1b:05:87:cb:e7:e3:a4:e2:
0a:90:ce:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:37:34 2025 by rpki-client