Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
File: l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft (raw, json)
Hash identifier: 9oCs8adIbzVvoAdl3ov/GX5ydfgRSI4TqXhlMezRMD8=
Subject key identifier: 1A:EE:AA:98:7D:AD:4E:41:E4:B4:F4:8A:73:19:12:7D:96:E4:2C:D2
Authority key identifier: 97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
Certificate issuer: /CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Certificate serial: 01965538125770B385A2C57C6DC5E8092710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 22:00:59 +0000
Manifest this update: Sun 20 Apr 2025 22:00:59 +0000
Manifest next update: Mon 21 Apr 2025 22:00:59 +0000
Files and hashes: 1: YVg_2iB1D0i_33LG7yJEAknUwCM.roa (hash: LAKKZLtOPGoM/C7ZDpXW5Qjmcc0Ag72bwBoz/cyOViA=)
2: l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl (hash: o4n/wjFlxJLGOW/9kGW8WbN3hU4sfvrc8V3jXQMyL/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:12:57:70:b3:85:a2:c5:7c:6d:c5:e8:09:27:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Validity
Not Before: Apr 20 22:00:59 2025 GMT
Not After : Apr 21 22:00:59 2025 GMT
Subject: CN=1aeeaa987dad4e41e4b4f48a7319127d96e42cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:ac:51:a6:42:15:2b:5d:e8:6d:e2:85:8e:
5c:f2:da:5d:01:42:d1:af:ec:2a:96:fe:bd:b3:92:
89:24:77:0d:2d:de:5d:e4:48:27:b2:b6:a7:f5:aa:
26:d3:1f:54:8a:34:e7:62:68:0d:9f:1a:46:e1:57:
b2:28:c2:d7:be:7b:85:3d:be:4f:97:1c:c5:a8:ad:
c5:eb:86:8a:49:f9:d0:e4:b4:31:1f:e0:dd:50:ac:
5a:4b:d6:8a:e3:d1:0d:1f:9d:81:96:74:54:31:1d:
21:ae:4c:48:18:c4:5b:a2:bc:37:b4:6f:9c:db:47:
61:f3:ab:b7:53:f1:a4:38:e0:cc:f2:4d:a5:51:26:
92:79:f7:fd:2b:1a:ea:78:b4:19:1b:dd:00:d5:97:
df:a8:3d:6c:da:bf:21:05:00:90:d1:af:67:36:42:
1d:6e:65:68:8d:ff:18:e1:9a:1e:7b:2e:ae:e0:f8:
69:9b:fa:b5:05:8d:6f:ba:0a:1a:af:07:72:69:3c:
76:24:1c:64:7c:39:1e:0e:9a:46:e9:49:08:91:92:
ff:58:67:13:0a:a0:cd:09:34:eb:57:7a:43:63:ac:
93:d2:37:7e:3e:3b:72:74:a7:cd:3e:94:44:be:d7:
fe:ab:c0:c7:59:2f:55:d5:78:6d:02:88:f5:70:08:
46:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EE:AA:98:7D:AD:4E:41:E4:B4:F4:8A:73:19:12:7D:96:E4:2C:D2
X509v3 Authority Key Identifier:
keyid:97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b7:27:e5:d8:01:4c:c8:14:37:a6:e2:86:fb:24:79:cc:ac:
33:08:de:3c:2a:a6:f2:9a:2c:1f:e1:ca:58:98:9e:b7:2a:0f:
d8:2d:79:b9:04:e3:b0:6c:9e:54:68:b6:a1:01:43:87:b9:e5:
97:f5:53:8a:2a:b9:69:0c:e0:e6:0b:4a:c3:eb:44:ba:37:00:
bb:cb:a9:73:1d:c2:32:e3:27:bb:14:71:02:7d:19:1c:6c:fb:
25:82:15:57:a9:99:50:c0:68:de:6e:7d:b4:26:cd:2b:11:42:
ab:dd:8e:fb:03:9b:da:2e:9d:a4:67:76:71:5f:4e:35:77:0f:
4a:8f:b7:38:64:30:77:f4:ea:b3:df:46:2f:7c:f7:9d:cd:37:
c2:db:79:b4:fe:da:74:f0:6f:18:57:8c:f4:af:e0:2d:58:9c:
bb:4f:41:16:40:9b:a9:84:08:08:ac:b6:d8:d5:e0:ed:b5:f8:
5a:25:80:d8:4a:4b:ba:55:5e:ba:1f:8d:2b:e9:b6:82:91:18:
72:26:37:89:05:58:a0:a9:85:43:9b:c1:a6:ef:43:db:f8:c8:
29:ea:40:b4:0c:fe:96:14:a9:9c:df:89:b3:46:12:d9:bf:a4:
a5:8b:a0:6c:cc:49:0b:41:05:9b:2e:ae:b7:b4:20:25:ac:ff:
33:7f:fa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:00:46 2025 by rpki-client