Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
File: l8dX8vOyKQu8KNZfm98AFvYfE5c.mft (raw, json)
Hash identifier: ryGPHU6dTr6uPzA/JANBcRMt+tERjL0GMI3o96OPQI0=
Subject key identifier: 47:FE:0C:19:AE:9E:8A:4E:D8:94:AD:2F:77:11:BC:FF:DE:05:8F:03
Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Certificate issuer: /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Certificate serial: 01965725EFD5F3BD11E63A0D509A8BE9A439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
Manifest number: 14A7
Signing time: Mon 21 Apr 2025 07:00:26 +0000
Manifest this update: Mon 21 Apr 2025 07:00:26 +0000
Manifest next update: Tue 22 Apr 2025 07:00:26 +0000
Files and hashes: 1: jrvc6kmWjKHmuF_8SsZy0ZuPTP8.roa (hash: Z+xoWww5SsoPK3NcXFL/FecEhSX4cgiZ8Poe3txV32s=)
2: l8dX8vOyKQu8KNZfm98AFvYfE5c.crl (hash: 0YtNqZwQx8d8cq/LiCV7SiL7KwYL6tmrh48EthglssU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:25:ef:d5:f3:bd:11:e6:3a:0d:50:9a:8b:e9:a4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Validity
Not Before: Apr 21 07:00:26 2025 GMT
Not After : Apr 22 07:00:26 2025 GMT
Subject: CN=47fe0c19ae9e8a4ed894ad2f7711bcffde058f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:47:69:f7:27:54:f3:ac:02:49:69:2e:e4:
1d:c0:5d:d8:b9:0d:1c:f9:95:3c:66:58:ec:c6:47:
18:d8:1f:22:82:f9:f1:ba:c6:40:25:5d:02:3a:c0:
18:2f:da:97:3e:b9:eb:fb:46:51:66:13:e7:d2:99:
1b:d8:9a:a2:29:10:e0:e1:96:64:51:f4:7f:de:8f:
2c:ff:63:4c:6e:e0:3e:e3:7a:63:25:73:b2:83:bd:
62:8b:b0:b9:7b:45:bb:de:fd:6d:81:37:1a:ac:0a:
fe:c9:00:2d:eb:f2:9c:4d:d4:71:2b:04:5e:ea:8a:
c5:7f:64:7e:bb:68:26:97:88:95:d8:0b:4f:51:5c:
1a:49:45:1b:71:a0:ff:4c:19:83:5a:a3:d7:92:b9:
f2:24:f3:08:3d:6e:71:92:c6:29:75:c0:33:80:0f:
54:d2:7e:c2:d9:d6:4e:a6:f4:67:8a:7a:4d:06:0d:
a1:fe:9d:ee:c2:3e:93:a1:1e:ef:07:9a:0e:95:9e:
13:92:c4:c4:85:00:3b:27:af:93:c2:41:38:10:e3:
6f:8d:55:4e:78:bc:f7:e0:07:ba:14:3b:e1:09:70:
6d:de:8b:5e:c3:2d:31:ee:11:b1:18:9e:54:5f:52:
3c:46:82:66:3f:50:06:8c:1b:ab:21:b1:44:53:8f:
1e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FE:0C:19:AE:9E:8A:4E:D8:94:AD:2F:77:11:BC:FF:DE:05:8F:03
X509v3 Authority Key Identifier:
keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:3f:91:bc:a5:76:fe:4d:85:b5:62:5d:b4:44:db:7e:fe:6a:
50:b6:cd:9e:45:0c:02:39:d2:c5:8c:e8:a5:24:2f:ca:18:f6:
6b:17:31:f2:ef:df:da:e4:28:1a:a2:28:52:83:96:10:0e:42:
bf:cf:65:27:ad:7d:95:57:a6:a7:46:2b:7a:01:04:89:02:b0:
fe:27:36:c2:ee:54:cc:09:35:78:47:d2:d5:59:0c:47:51:ea:
92:95:e4:b2:ed:cb:23:f0:64:25:5e:b2:8c:90:3b:87:9e:0a:
29:72:97:81:42:9d:95:8d:8d:8d:e1:19:b6:92:b6:ef:46:f4:
23:a6:b6:e9:18:91:2f:c4:1c:36:4c:0e:df:67:3d:87:9d:34:
e1:e1:b9:e7:48:3c:a9:8f:87:c9:49:91:45:90:53:35:7f:4f:
7e:f8:59:8a:af:d0:b7:dd:b2:88:00:c7:fd:b1:46:24:98:7e:
31:e6:9f:ff:e8:4f:40:69:89:0e:ee:f4:8c:7e:1e:11:cc:57:
64:44:8a:4d:8e:a2:e2:c6:2a:df:4b:e8:ed:c1:22:fb:12:e9:
5d:ea:64:73:04:6d:c2:fa:a3:94:dc:34:4a:34:26:c6:f0:72:
9d:d6:c8:86:e4:98:54:f5:20:9e:4c:9a:65:f6:48:77:55:c4:
23:87:59:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:02 2025 by rpki-client