Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
File: l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft (raw, json)
Hash identifier: ihW+2grXtAZghjx8QB5ncpLJ4jU6qToZdeyyayj/32k=
Subject key identifier: A4:AE:FE:7E:83:28:5D:5B:6A:90:6E:C4:5D:F2:2F:DF:67:05:F9:3F
Authority key identifier: 97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
Certificate issuer: /CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Certificate serial: 01965CF16C10EEFDA5969F186A3F7BB647B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
Manifest number: E2
Signing time: Tue 22 Apr 2025 10:00:47 +0000
Manifest this update: Tue 22 Apr 2025 10:00:47 +0000
Manifest next update: Wed 23 Apr 2025 10:00:47 +0000
Files and hashes: 1: KGvd9Dk5_a_R1xkL2TWSdydfpdk.roa (hash: HlescFWLzPsD70c5CcwFp2ufdRCBYWVscapXjHm9XI4=)
2: l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl (hash: uQSch7l9FwuXIdvwg7j4MGmIjL+E7Kjv4ksfp3QRyiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:6c:10:ee:fd:a5:96:9f:18:6a:3f:7b:b6:47:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Validity
Not Before: Apr 22 10:00:47 2025 GMT
Not After : Apr 23 10:00:47 2025 GMT
Subject: CN=a4aefe7e83285d5b6a906ec45df22fdf6705f93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:22:22:dc:65:d6:70:95:3a:b3:93:d5:c3:
3c:63:4a:df:70:ae:25:5d:ba:08:21:21:7b:64:08:
e6:7d:a3:b5:63:cd:fd:f0:4e:c5:d3:f1:ee:b6:1a:
84:74:bc:4b:78:af:7b:b5:a7:54:19:f4:fa:80:bb:
57:18:4e:ec:13:e0:79:d3:84:0e:b3:5d:a1:78:05:
db:3f:1d:7f:93:69:1d:00:7a:5e:10:64:25:1e:bd:
70:50:6a:75:52:f9:a6:3c:b7:6c:5d:6f:88:80:21:
b5:6f:d7:92:08:40:28:6a:e8:75:cd:64:61:3f:ca:
6e:4b:b3:11:51:01:52:c7:ec:07:3f:6c:36:1f:1f:
f8:c6:d4:f5:40:91:6f:1a:15:d4:cc:ef:ff:52:d7:
a5:96:0c:fc:75:64:ba:1f:fb:6c:cf:cb:dc:b3:da:
b6:13:d1:1b:f6:e1:3e:1a:ee:ee:d9:c1:97:e6:6a:
85:20:3d:31:54:38:63:a4:11:be:2d:62:83:84:e3:
60:9d:d2:7d:98:9d:93:f3:f5:20:6a:f8:ea:f6:eb:
08:04:4f:a8:19:44:c5:6d:97:c9:c0:3e:57:82:04:
b1:d5:24:f5:30:d9:34:95:ce:da:12:25:86:8e:42:
a5:de:30:b4:05:f8:57:3d:b0:c8:26:04:fd:46:07:
a2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AE:FE:7E:83:28:5D:5B:6A:90:6E:C4:5D:F2:2F:DF:67:05:F9:3F
X509v3 Authority Key Identifier:
keyid:97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:db:98:63:73:03:76:b6:75:50:6d:11:a0:d7:25:ab:4e:fc:
54:6b:5d:e1:4d:69:d2:3b:d4:25:53:26:e1:ec:0b:a5:a6:b1:
40:50:11:54:98:e4:6f:55:95:70:0f:96:1c:67:90:7f:06:7b:
b3:66:0d:6e:62:68:0f:ac:0d:6e:06:52:cb:ef:5e:6d:ce:2b:
05:20:a2:37:a9:3e:42:c3:14:6e:9e:12:46:e7:a8:a2:16:1f:
9d:a6:26:aa:de:de:e9:64:9c:6a:73:63:bc:ca:64:64:43:b3:
5c:bd:d4:df:93:8b:7e:e9:5c:c6:90:ef:bb:0a:02:43:30:cd:
e3:32:88:21:c9:d1:8e:d2:70:2b:bf:98:d2:83:72:bd:39:cd:
6b:2f:2f:54:26:e7:ca:2a:16:63:78:cf:9b:6a:71:42:0e:aa:
88:46:7d:56:88:5e:83:a0:8d:00:0e:22:da:93:73:73:b5:79:
01:c2:85:6a:df:3d:b4:57:7d:05:df:81:c6:79:0f:45:4a:4f:
c0:19:ab:0c:bc:3f:89:fd:80:98:66:61:20:ca:1d:b6:27:ea:
b4:39:b5:8c:a5:49:04:66:69:1e:bf:48:ca:46:46:76:77:6d:
40:1b:da:3e:c3:90:07:23:95:dd:e8:78:72:14:a2:b7:49:17:
88:6d:b2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:29:43 2025 by rpki-client