Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
File: _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json)
Hash identifier: wNNwDraKdnEvcVy1P6yvAVY+blAQtGVPmaDZYrWFNfI=
Subject key identifier: B9:A1:C3:79:68:67:6E:BE:29:10:5A:46:C1:1F:B2:38:DC:FB:4C:73
Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Certificate serial: 01964EFEBC9DAFCDFE12BA7720845F3DB71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
Manifest number: 120D
Signing time: Sat 19 Apr 2025 17:00:39 +0000
Manifest this update: Sat 19 Apr 2025 17:00:39 +0000
Manifest next update: Sun 20 Apr 2025 17:00:39 +0000
Files and hashes: 1: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: ZOaJdFMtfyYX6kyz7iucAIDlV+j/BD6MjboSack0mho=)
2: haHKJrHUqbm5DebtyDYhDiGIt7A.roa (hash: Cz3j+Dv+gBqpFYF7WEnyvYZy+IRYW0vriwmXpF2DtvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:bc:9d:af:cd:fe:12:ba:77:20:84:5f:3d:b7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488
Validity
Not Before: Apr 19 17:00:39 2025 GMT
Not After : Apr 20 17:00:39 2025 GMT
Subject: CN=b9a1c37968676ebe29105a46c11fb238dcfb4c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:54:b0:32:f7:95:2f:57:7f:15:c6:92:a9:
58:46:be:c7:b1:ed:7f:a8:68:49:7e:4d:63:11:ad:
7f:7b:1f:e9:ab:4f:31:65:25:9e:5d:6e:b7:71:c5:
8d:0c:6d:e2:4a:35:a7:3e:14:56:5e:5e:fd:29:fc:
15:f8:dc:7e:a6:ce:8c:8a:84:a9:36:e3:f3:80:6a:
91:ef:70:be:87:f4:42:b4:4f:f7:6e:09:11:c7:36:
84:9d:c7:43:97:96:0b:d4:ee:62:46:55:0a:a3:0e:
36:08:f8:92:03:01:6e:02:5a:b1:5c:76:6a:29:e8:
d9:ab:1e:7d:ef:70:50:10:d0:43:c0:4d:1f:51:78:
0b:27:9d:e5:25:e2:09:9c:c3:56:e6:3a:6f:ec:35:
f0:5e:7a:a8:3d:09:07:a5:3a:ec:ee:fa:9f:64:23:
f6:4c:69:a7:14:e4:85:e0:73:a5:21:17:73:54:0b:
c2:4f:12:1e:90:76:3f:78:11:b4:53:72:65:84:87:
07:85:e9:49:d9:27:0f:57:f4:95:86:85:99:a4:5b:
aa:24:31:1e:93:06:d9:b0:b8:37:2d:0e:5c:d6:23:
6d:c0:a3:b5:58:75:dd:e7:27:09:d6:5c:f5:4a:5d:
3a:48:95:23:68:53:1d:6c:d7:a9:d9:42:2c:2a:c7:
29:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A1:C3:79:68:67:6E:BE:29:10:5A:46:C1:1F:B2:38:DC:FB:4C:73
X509v3 Authority Key Identifier:
keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:71:2f:5d:5b:83:2c:b9:2f:12:40:98:62:64:7c:45:8f:61:
a0:35:ce:7b:cf:8f:88:2b:d5:e7:f2:a9:c8:68:92:ac:3f:48:
57:c6:4b:0c:ec:e0:c2:0f:a9:0e:d0:30:ff:5b:d4:ca:54:e0:
eb:3a:e4:2d:ba:2d:4c:55:6b:93:dd:13:86:a1:86:27:80:bd:
9f:65:d0:ba:b3:41:fb:b5:7a:ab:d9:05:25:33:e0:25:de:a1:
c4:d4:2b:71:3a:b1:3e:00:e3:d6:62:f6:7b:4b:f1:29:2d:ef:
ab:c5:f6:02:c8:82:ed:cb:7d:6d:5f:ee:ad:19:3b:80:72:d0:
13:03:3f:48:0a:0f:e0:0f:37:ba:c6:13:41:c2:75:33:9c:71:
b8:de:13:f4:3b:a0:4e:1d:70:4d:63:13:31:33:d6:4a:e5:f3:
0c:5e:3d:3b:17:c2:94:19:ad:fe:67:92:37:73:4f:db:2a:63:
4b:f0:ea:52:2e:56:07:5b:44:7e:d4:a5:58:76:be:f1:70:51:
46:70:f9:c2:08:19:41:d5:6f:28:29:66:71:ec:de:43:85:0c:
c2:4a:63:c0:54:cf:db:90:44:62:38:21:83:f8:16:7b:31:bd:
9b:21:f7:b2:3c:57:f0:4f:57:b6:60:da:c0:17:97:75:7c:69:
9e:34:1f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:33 2025 by rpki-client