Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier: BrM9YnlZG0NJ4vrJpBrGLE9DWPIrWHLjDaKyAcDZK/c=
Subject key identifier: D2:25:58:1C:E2:B2:B7:12:AA:F6:BF:64:01:EF:FA:6C:9A:77:74:AE
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial: 01964CA2A0B81B4EC8BB2614257C90CE127F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number: 1342
Signing time: Sat 19 Apr 2025 06:00:48 +0000
Manifest this update: Sat 19 Apr 2025 06:00:48 +0000
Manifest next update: Sun 20 Apr 2025 06:00:48 +0000
Files and hashes: 1: i6ZkgPOU4WKpq6-T7FEmeCgO4_U.roa (hash: 4/Gord29LMo6fRm1iefbRHE4SPhSa5o/5bLxx5zdzBU=)
2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: 6JZAt73qExH4GSWThBVGM+Lzwpc4EDzjYD2xNqukas4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:a0:b8:1b:4e:c8:bb:26:14:25:7c:90:ce:12:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Validity
Not Before: Apr 19 06:00:48 2025 GMT
Not After : Apr 20 06:00:48 2025 GMT
Subject: CN=d225581ce2b2b712aaf6bf6401effa6c9a7774ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:54:70:56:50:90:5d:a8:81:c8:f9:a7:22:
e2:f3:e1:d0:bc:7b:7e:09:34:34:94:89:ab:67:a9:
b4:62:32:97:cc:85:a2:ed:6f:62:52:86:ff:39:e0:
4b:22:40:9e:75:35:aa:1c:08:62:95:8f:30:a6:ec:
5c:f4:3b:f7:0a:7c:14:d5:31:74:e7:a8:81:79:48:
f7:84:38:89:35:19:94:b2:54:53:95:3e:12:d9:59:
f7:9d:f7:30:b2:87:b9:6a:67:6b:1b:28:a5:45:31:
50:22:76:d2:d4:c8:75:48:8c:51:e0:52:dc:88:9c:
75:6f:0e:16:3e:c8:df:59:df:36:82:5f:44:3d:df:
7d:35:0a:fa:88:f4:ed:04:5e:05:17:3b:eb:a6:9a:
0f:cd:5f:0b:c5:83:ec:57:33:ca:ef:12:55:5f:2a:
1f:13:b0:c6:57:81:da:94:67:21:4d:34:72:71:bd:
84:e0:d5:d7:04:ac:a5:3d:00:1a:83:12:64:01:7c:
36:db:49:6b:a1:e9:5e:38:6d:ef:2f:86:0e:df:6e:
90:11:29:0e:b6:08:69:53:38:fe:92:b2:78:86:ae:
19:6d:b6:83:bc:28:36:95:50:e4:c2:38:b7:f6:cb:
b7:4d:ff:e5:69:e7:f7:be:26:07:07:d5:50:3d:96:
7e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:25:58:1C:E2:B2:B7:12:AA:F6:BF:64:01:EF:FA:6C:9A:77:74:AE
X509v3 Authority Key Identifier:
keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:6c:18:bc:1e:db:68:e0:19:94:98:70:45:fe:55:6a:47:5c:
0e:b4:df:8d:23:0b:32:61:b1:8f:38:8d:ac:7b:98:3e:b5:98:
43:17:e6:d3:05:5e:c8:68:fa:0f:75:b0:3f:f5:5b:bd:06:53:
3b:7b:3f:ec:79:f9:56:61:1a:03:a7:05:fb:13:8b:62:aa:c4:
71:1f:9c:24:d0:b3:8a:dc:0c:fc:7c:a5:16:ae:bd:24:5d:73:
2f:73:b3:78:68:ba:a8:b5:c8:d2:ec:5f:36:bf:02:27:fc:06:
31:fa:3d:08:a2:8b:f4:a0:fa:24:60:96:28:89:18:88:a2:16:
c1:53:31:87:fb:7b:5e:b8:86:f8:7f:72:65:ff:bc:b9:b2:92:
47:c4:d9:64:17:cc:19:6a:cb:27:a6:5d:15:15:84:78:f5:90:
f8:41:15:59:4d:dc:62:5f:d6:f3:8d:fc:a2:c6:78:d3:70:73:
94:c8:05:bd:ec:81:74:db:5a:ed:c8:26:e7:b9:b2:80:bd:9d:
4d:b2:76:9b:cd:71:e3:c6:5c:3b:52:8e:4a:5f:71:28:2e:79:
ce:7e:f5:7f:b7:99:93:29:ab:f2:40:13:1e:9d:b7:91:61:81:
e3:72:03:e9:27:cf:19:bb:53:4d:b2:fe:a0:ef:14:82:86:18:
d2:41:d1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:04 2025 by rpki-client