Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
File: lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft (raw, json)
Hash identifier: RPEgGwBw2Nfmxp0rVTjI4G+cD28bWUAq9ZHhzcRj4RI=
Subject key identifier: 2A:FB:9B:F7:5D:75:68:50:15:B7:41:95:C7:A5:A6:47:03:83:D7:44
Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
Certificate issuer: /CN=96b8121d556df453456553dcb45c4143f4cdd213
Certificate serial: 01965793A2F652ED633C60FC01AFF7489ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
Manifest number: 077F
Signing time: Mon 21 Apr 2025 09:00:15 +0000
Manifest this update: Mon 21 Apr 2025 09:00:15 +0000
Manifest next update: Tue 22 Apr 2025 09:00:15 +0000
Files and hashes: 1: lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl (hash: PpwR5Qc15b53VnfHe4WyqBuGvnG5r2j/NjJ+YlrgEHc=)
2: qP3YU_S4LUHGi-PUyOS9YdXOrOg.roa (hash: 86gRYjmoaW5iHjfh3rXQG4yuY8yHQt9SBONVBj8bSuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:a2:f6:52:ed:63:3c:60:fc:01:af:f7:48:9a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213
Validity
Not Before: Apr 21 09:00:15 2025 GMT
Not After : Apr 22 09:00:15 2025 GMT
Subject: CN=2afb9bf75d75685015b74195c7a5a6470383d744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:25:f3:9f:4d:96:db:d8:4b:e9:e4:49:66:6a:
4b:f5:ef:a5:21:4e:52:74:e4:e9:d8:48:a5:3b:4b:
71:fc:9a:18:a6:6f:cc:22:9b:50:0f:d3:0a:c6:10:
3e:97:6b:cf:09:ae:47:a7:67:e8:54:0a:50:c5:23:
33:0e:0d:2e:06:19:c4:a7:81:27:b4:8e:d2:40:1b:
9d:e0:8a:16:66:0e:b8:85:c2:f8:1b:db:79:d0:55:
ea:29:91:1b:f4:21:cf:a8:12:ee:92:c4:ca:1d:85:
fd:28:84:18:5f:42:10:2f:42:40:1c:cc:4b:f2:a2:
d7:59:1e:e4:61:3b:3b:21:8e:9d:11:f0:89:2f:1e:
74:f8:a8:d3:a2:4f:84:31:76:33:57:44:fc:2f:f4:
1d:2a:b3:c3:56:08:05:31:bf:2e:80:c5:97:7e:59:
fb:93:01:e1:75:b3:80:b6:b7:10:c6:db:da:e5:df:
ef:74:ef:09:50:24:bb:27:61:41:a2:27:ce:fd:46:
51:0e:a4:9f:d4:29:5a:1b:02:ba:e3:bf:79:fa:e9:
d5:c8:9c:9e:07:ac:b0:e2:cd:6c:c0:6d:d3:91:46:
3a:8e:3d:ce:d2:9a:b2:5b:2c:6f:4c:05:ef:38:06:
01:2f:a5:e1:8b:26:7a:ee:4b:22:b7:18:fa:30:ed:
9a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FB:9B:F7:5D:75:68:50:15:B7:41:95:C7:A5:A6:47:03:83:D7:44
X509v3 Authority Key Identifier:
keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:28:70:67:de:af:d0:4e:8b:58:d7:75:c7:f6:ad:76:4e:df:
0d:9c:8a:bb:49:a3:cf:04:94:1c:2f:0b:47:86:c7:73:f1:b8:
60:da:bf:d5:de:e1:e0:1e:cc:f3:d2:7e:6e:2b:91:98:e1:b5:
38:28:71:53:b1:b1:72:4b:34:9e:d6:28:ad:3a:7d:9b:62:b5:
29:bc:81:63:c8:90:d0:77:0e:db:af:a4:35:2a:16:23:c2:31:
90:a5:ae:a3:d3:a3:e2:ee:51:49:da:22:25:d2:2d:00:6b:e8:
87:3a:51:92:c4:2f:c3:47:2e:e7:14:0c:41:e2:7b:d6:47:bf:
b4:d1:43:27:77:d5:bc:4f:cc:c3:c9:be:31:71:68:a5:42:c3:
39:ac:57:20:7d:11:ff:13:bd:ad:80:c7:60:84:33:1b:47:7e:
ab:58:13:d7:81:bf:cc:e4:5b:fb:fd:aa:3d:c3:ff:70:ef:79:
94:3f:53:57:6e:94:41:cb:f2:0b:e2:75:83:c4:fc:5f:72:11:
eb:4f:cb:ca:a2:8c:cd:a7:af:43:49:f7:5c:a4:15:e1:3e:c5:
4c:54:e7:38:ed:05:dc:ec:53:94:de:82:eb:29:1c:f5:02:fb:
31:53:6c:98:6d:5f:48:92:57:58:c0:46:18:c5:d3:88:40:ee:
f0:89:e4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:13 2025 by rpki-client