Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
File: l0417CGA2uvRvz3URAOp4L_LVso.mft (raw, json)
Hash identifier: GNrDgzorsVdUljD+gvsAWsx1On7k8Q6hkRHN89reyKI=
Subject key identifier: 9B:83:80:0D:F3:0E:B9:21:E2:4B:4E:FD:C0:58:51:8F:28:7A:27:83
Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Certificate serial: 019653EE3D23458D2786FE5FECA26D6C9DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
Manifest number: 0470
Signing time: Sun 20 Apr 2025 16:00:44 +0000
Manifest this update: Sun 20 Apr 2025 16:00:44 +0000
Manifest next update: Mon 21 Apr 2025 16:00:44 +0000
Files and hashes: 1: HxAtI9yKZCbpxH862uX_45QQRAI.roa (hash: 3h+38XAT5SiIVpNs8Lk+14nxc9RTgj1HBur0gfSR11E=)
2: d-gD_stjAzo445PqKWpkeuPKi48.roa (hash: N9NpLKhmhDQnk+b+LZB+ZZNehcKI5fvIIHeixBGutWI=)
3: l0417CGA2uvRvz3URAOp4L_LVso.crl (hash: ATjmkdWgteLiGCpolh8ETLXxUv4t1Hm7l+PqsJrV8C0=)
4: mEa-TLKrSv59f8M6kG19lj9ZNsk.roa (hash: B4NNTwi5q8vUiOtaP5idLpSIlDDRQuKnJ09MN8x4pKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:3d:23:45:8d:27:86:fe:5f:ec:a2:6d:6c:9d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Validity
Not Before: Apr 20 16:00:44 2025 GMT
Not After : Apr 21 16:00:44 2025 GMT
Subject: CN=9b83800df30eb921e24b4efdc058518f287a2783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fd:12:fb:98:92:89:30:c9:e1:99:ab:e9:4b:
db:1b:97:f0:8c:32:f1:74:0b:87:4a:96:9a:e7:1f:
b6:0c:e4:f0:af:db:68:e6:f4:a1:86:5c:d2:89:34:
bb:ec:06:db:90:fa:41:89:6d:8f:9f:9e:cf:a8:3d:
e3:fa:2b:20:36:92:18:df:82:1f:53:a2:5e:ce:ab:
97:2f:58:72:f3:7c:0d:44:ea:21:ae:78:d8:11:27:
75:cd:07:24:bc:12:3e:f0:e2:86:1e:ac:a3:94:3a:
4d:84:30:f5:e7:c7:6a:8c:fa:86:ef:75:82:02:fe:
a4:5e:44:51:e3:97:fb:4e:80:85:69:27:f2:97:8b:
3b:aa:05:e8:b6:7a:78:ec:a4:ad:fd:44:60:d1:91:
98:fd:d0:aa:b1:8b:b2:c0:55:ec:00:97:46:d4:92:
5d:0e:e0:2c:35:47:bd:96:cc:ba:3e:35:3b:a0:ac:
10:ea:e8:d7:d7:89:ba:5b:5d:3f:b3:5e:97:61:e9:
8f:5e:cb:21:91:2b:55:69:14:ba:e1:be:f6:af:ae:
f8:37:fa:24:eb:b6:54:ac:08:01:4e:bd:f6:f2:d9:
d4:17:e1:1f:4c:06:f4:16:43:99:25:84:25:a0:d4:
ec:89:52:a4:98:f8:8c:18:80:d6:ec:72:6d:34:ff:
ba:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:83:80:0D:F3:0E:B9:21:E2:4B:4E:FD:C0:58:51:8F:28:7A:27:83
X509v3 Authority Key Identifier:
keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6d:72:a6:c9:3b:bb:cd:e1:60:c6:d2:7e:01:0b:52:03:81:
ec:8d:12:ef:d5:ad:9d:49:10:70:84:aa:8f:92:9b:58:c5:b3:
cc:2d:26:a4:6c:1b:0e:24:f1:67:df:f9:3c:76:31:2f:a2:3a:
1a:86:f0:55:6c:b7:5f:35:e7:57:10:60:9b:a0:31:33:dd:52:
60:bd:b1:38:0f:56:44:50:b8:81:9d:07:bb:1a:45:94:73:26:
d1:84:bf:cb:02:77:a1:3b:cc:05:61:0f:f4:15:05:90:d0:5f:
4b:cf:01:af:3d:8a:85:2c:8e:f2:cc:6f:ee:5a:ba:4e:16:04:
e2:c7:82:89:ae:06:e8:8a:31:58:21:ba:7d:51:c9:5b:75:c5:
cc:af:8a:0b:cb:67:e5:43:88:61:45:f2:e6:46:f1:09:15:4a:
eb:eb:2d:31:9f:12:aa:ee:9a:58:00:ef:44:f6:bd:92:6c:b0:
67:6a:eb:f4:6e:55:0b:98:1a:9e:34:c7:ff:b9:b9:08:db:98:
8a:e1:73:7b:1d:4f:0b:72:59:d5:4c:dd:64:6f:f2:2e:78:27:
4f:d7:d2:69:00:8a:ff:ca:cc:84:d1:a0:68:d3:f2:16:ab:0a:
31:f9:bd:3c:f4:3b:61:b2:50:47:d9:1a:46:66:49:40:41:6a:
09:78:b5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:25:45 2025 by rpki-client