Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
File: llRz1oVy6iI4vdh1r6cloEBd5IM.mft (raw, json)
Hash identifier: 3uvVcw5RFjcJUkP8fCExtYaEstIq09sHkE6+jjUQ0UU=
Subject key identifier: 35:E8:A4:EE:A0:76:ED:8C:29:57:FB:41:6E:19:98:19:2D:33:39:1D
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Certificate issuer: /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial: 019656B865E505EB085FA55386942F0AFCBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 05:00:47 +0000
Manifest this update: Mon 21 Apr 2025 05:00:47 +0000
Manifest next update: Tue 22 Apr 2025 05:00:47 +0000
Files and hashes: 1: 83Gu0dtJuFZBe-loHFuPr5SJG_w.roa (hash: l+GbA3n02i+93pQcKbKkJrx1sOkT1XRYSXqoN31in0w=)
2: llRz1oVy6iI4vdh1r6cloEBd5IM.crl (hash: caXczmLDqbc7318J/iErcD5dcOVUD1u+dD7aWfA4tN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:65:e5:05:eb:08:5f:a5:53:86:94:2f:0a:fc:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
Validity
Not Before: Apr 21 05:00:47 2025 GMT
Not After : Apr 22 05:00:47 2025 GMT
Subject: CN=35e8a4eea076ed8c2957fb416e1998192d33391d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8f:46:dd:a6:93:fd:4d:05:59:c4:22:41:67:
b2:b5:7d:ce:15:83:d8:16:e4:07:59:4b:1c:c9:1e:
72:8a:50:af:9a:44:23:44:d3:d7:e4:ed:95:42:41:
b0:b9:ed:27:fe:5a:fc:8d:6a:a5:fd:fe:58:06:bf:
06:6e:e3:11:55:f6:4b:1e:e9:e2:c2:b6:d4:f4:a4:
bb:aa:58:dc:3a:e8:48:65:6f:49:2b:64:1d:4e:7e:
3f:af:e9:67:d2:48:0d:e9:60:96:8f:9c:d4:08:df:
d9:bb:57:e2:38:03:9a:59:7f:d5:e6:43:ed:be:09:
eb:0d:44:91:83:bd:29:10:78:1b:3c:d3:3c:73:9c:
fc:7b:7d:63:28:31:12:e5:1e:9e:08:22:74:8c:07:
07:ba:c8:13:e8:eb:1b:de:97:65:c3:8a:94:2e:b4:
6d:1a:f5:f3:05:14:9d:0f:77:31:3b:2c:a3:e8:51:
68:f3:3b:d6:3c:ab:12:c9:a3:7a:aa:47:be:b0:14:
a4:33:9f:af:0d:3c:47:0b:c0:0b:69:8e:b0:92:7c:
08:58:46:ae:dd:1a:c1:81:ce:20:84:f8:3f:3c:31:
99:01:0e:03:a4:1d:fd:e0:d1:e5:11:fa:8a:7d:f8:
55:68:a0:61:94:c8:b4:48:a6:a8:de:eb:92:bf:b9:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E8:A4:EE:A0:76:ED:8C:29:57:FB:41:6E:19:98:19:2D:33:39:1D
X509v3 Authority Key Identifier:
keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ef:3f:b3:29:fa:47:f0:cc:4c:ab:d2:21:88:70:be:9c:b9:
77:d7:98:12:9f:51:71:f6:27:da:9a:3d:5f:47:30:2a:e5:23:
22:5b:d0:90:54:4a:ad:3b:b1:1f:a6:8c:1b:f9:4f:09:01:4c:
81:63:ca:dd:5d:64:cf:ed:03:98:90:e8:46:11:5f:8d:7a:97:
71:f8:10:35:a3:c4:7c:81:c5:92:f7:56:40:cd:15:26:f1:c7:
2d:57:1d:b6:4a:e3:15:45:44:b7:fe:77:09:3e:dc:8c:69:85:
3c:b6:9a:83:28:1b:4f:22:38:9a:b2:f7:39:e7:a8:a3:79:5b:
ca:f4:35:68:e3:1d:f0:0d:77:f7:21:ef:09:8b:cd:9e:e1:2c:
d4:4d:0b:9c:41:e6:22:a7:22:aa:67:47:fc:53:0b:02:b2:8b:
ce:d5:7c:2f:a5:73:40:39:da:45:e8:8a:ec:be:0a:8b:cb:64:
cd:d3:86:96:0e:7d:65:76:e8:89:76:c1:7e:67:69:2e:60:6b:
21:02:33:64:67:9f:81:40:a9:39:e1:a7:e5:87:96:a2:c9:ee:
60:9f:06:3c:64:43:ad:b3:98:47:18:88:f0:41:e5:96:b9:0a:
97:14:26:5c:ea:d6:96:10:26:d4:50:a6:97:2a:f9:be:73:a2:
a0:f1:15:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:41 2025 by rpki-client