Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
File: lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft (raw, json)
Hash identifier: zdQGrJt23B3ZDHMshgTDpzGHnTdDEilRxXf0bqEuYcE=
Subject key identifier: B9:A3:3E:21:B4:A7:4C:92:63:4F:5B:40:C0:8B:5B:4B:8B:FE:06:88
Authority key identifier: 94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6
Certificate issuer: /CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6
Certificate serial: 01965914DDF54FCF1265C71D3841FBDD63A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
Manifest number: 119A
Signing time: Mon 21 Apr 2025 16:01:01 +0000
Manifest this update: Mon 21 Apr 2025 16:01:01 +0000
Manifest next update: Tue 22 Apr 2025 16:01:01 +0000
Files and hashes: 1: GkmNRez_B8q96uaVOleqThEPoEs.roa (hash: aNQGHPeLClAe2Gmzc0jqm+MRXJ2xuLHjsljQiK1K4qw=)
2: lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl (hash: j/CF+vF5LKk9qZ2QaiZugN7GCcjsX5y9OmdNgnjLh5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:dd:f5:4f:cf:12:65:c7:1d:38:41:fb:dd:63:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6
Validity
Not Before: Apr 21 16:01:01 2025 GMT
Not After : Apr 22 16:01:01 2025 GMT
Subject: CN=b9a33e21b4a74c92634f5b40c08b5b4b8bfe0688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:06:59:74:75:3c:f6:90:e2:8e:b1:db:3f:
e6:a5:cd:c2:0b:84:5f:93:0a:db:d9:f8:e2:60:60:
aa:6a:32:9d:43:eb:d0:5e:b2:7e:17:cc:cd:7d:17:
20:c8:72:5d:50:ea:11:da:e7:8b:08:10:8f:f4:c6:
10:c7:f9:b5:eb:43:fe:e8:74:da:e1:b9:88:65:73:
81:c9:b5:14:f3:8e:f5:97:8c:90:26:ad:aa:08:1b:
9b:b8:99:69:31:07:36:d1:ce:3a:78:36:0c:c9:92:
bc:67:89:2b:29:c4:47:75:a0:b6:b2:25:b3:30:6a:
f4:89:e3:90:68:18:c3:9f:e0:a9:a0:0f:a8:db:a7:
79:30:29:33:38:2a:5a:db:a9:52:f6:69:3e:fd:0f:
a5:2c:77:a0:d2:8b:33:dd:d1:ea:94:32:ff:a0:da:
21:2d:8c:95:ca:af:2c:f2:69:7c:15:9d:57:01:3f:
4d:8f:28:eb:1e:a9:ba:52:eb:6b:3d:fe:22:46:b0:
5c:68:97:cf:f1:54:38:73:74:5a:7e:a5:b5:17:43:
be:73:cc:9d:cf:0a:86:7b:d2:4a:ce:1c:57:d2:f6:
d1:c5:f6:64:51:ef:4e:d5:87:00:ad:f1:d9:60:fb:
90:86:e4:4d:c4:aa:58:49:83:36:ff:1b:9d:83:6c:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A3:3E:21:B4:A7:4C:92:63:4F:5B:40:C0:8B:5B:4B:8B:FE:06:88
X509v3 Authority Key Identifier:
keyid:94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:80:13:6d:4f:d3:a9:1a:7e:a2:13:4d:4e:55:a6:e2:eb:a3:
73:26:17:68:93:ac:47:99:c5:53:b1:4f:3f:df:c9:8e:d9:a6:
7c:76:45:5c:6a:1e:3a:02:55:c4:89:7f:24:c9:26:85:f0:ac:
d7:13:97:52:e0:7d:8e:fe:22:e2:30:85:ef:a2:aa:ff:3d:13:
5b:a1:3e:34:f6:04:c4:58:4c:6a:fb:38:6e:09:87:a3:77:92:
06:59:60:0a:0c:96:bd:10:5f:2b:b4:ba:c3:f7:b0:12:e3:de:
43:cc:7c:a3:5f:ea:5a:a3:fd:12:e3:5b:c2:f7:73:3a:b3:62:
99:21:33:0a:2a:96:dd:4e:e1:7e:42:69:01:6e:c5:61:c5:2d:
16:90:85:e8:5c:93:2a:e9:fc:73:2f:b0:17:05:83:1c:7f:57:
5f:1f:07:2b:35:f4:92:93:b0:14:74:e3:f1:94:c1:49:7b:c0:
85:af:48:09:16:5e:05:e0:55:df:2b:b1:66:83:50:48:fe:d7:
72:a6:9f:ce:d5:74:41:e6:4e:ec:de:bd:3c:82:d8:92:db:b1:
6c:84:d6:ae:4b:4d:1f:87:ba:05:57:0b:46:ab:de:ad:cf:91:
34:9e:a6:a5:ee:f2:b7:3b:9f:17:b5:c1:63:b3:45:5f:76:fb:
f9:9a:84:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:10:53 2025 by rpki-client