Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
File: LofD1fRf7zjBBbk91E3ST1vuYOc.mft (raw, json)
Hash identifier: D/BvMf1uc5Ir8g7sbjflObpX2rkAg6o8jhPcrRSzkH8=
Subject key identifier: D6:70:9F:35:49:D2:AC:7B:79:83:84:04:77:D5:82:5C:A9:3A:B3:DD
Authority key identifier: 2E:87:C3:D5:F4:5F:EF:38:C1:05:B9:3D:D4:4D:D2:4F:5B:EE:60:E7
Certificate issuer: /CN=2e87c3d5f45fef38c105b93dd44dd24f5bee60e7
Certificate serial: 01964D46F1BD3DA35A5B3D1C9E867D84A589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
Manifest number: 0D4A
Signing time: Sat 19 Apr 2025 09:00:17 +0000
Manifest this update: Sat 19 Apr 2025 09:00:17 +0000
Manifest next update: Sun 20 Apr 2025 09:00:17 +0000
Files and hashes: 1: LofD1fRf7zjBBbk91E3ST1vuYOc.crl (hash: gffmnpHY5aH/b3iCOOdYbFk/VyKSsRh1xb+eB7496CY=)
2: QDqzI6mtk0OSKHPd6aEPhi6zaB8.roa (hash: EsH+qC6DrpZNrpMwjRlDLqXBAg493TRAVaOfxpJfUMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:46:f1:bd:3d:a3:5a:5b:3d:1c:9e:86:7d:84:a5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e87c3d5f45fef38c105b93dd44dd24f5bee60e7
Validity
Not Before: Apr 19 09:00:17 2025 GMT
Not After : Apr 20 09:00:17 2025 GMT
Subject: CN=d6709f3549d2ac7b7983840477d5825ca93ab3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:b6:d7:69:3e:15:0e:b8:87:ac:98:41:ea:
51:b9:aa:18:f5:77:55:86:47:0c:7d:81:f2:44:6a:
71:2c:12:5a:68:a4:60:99:f6:a7:51:aa:23:fd:70:
d1:65:a1:fc:41:68:c4:dd:00:3e:c9:73:15:a8:b4:
6d:88:06:9e:7d:c5:03:8f:fe:b3:7f:cb:0f:9d:06:
78:80:24:41:01:72:96:5a:2e:c0:ba:79:51:ac:77:
53:d0:8f:5d:82:43:b4:a7:84:95:68:a9:be:0f:84:
f0:e2:d0:dc:58:10:b6:77:ff:90:13:46:64:44:68:
6b:ee:b5:ea:8d:8b:6c:d8:fe:3a:fd:cb:d1:76:c9:
4f:4f:28:67:ac:40:9b:c3:47:65:98:27:48:28:a1:
18:24:94:dc:e7:d1:2a:66:c8:f0:2c:23:b4:e3:bb:
f6:71:3d:1c:3e:2b:40:78:f1:6c:b0:96:fa:53:f2:
8d:67:9f:d1:52:ea:52:61:24:b9:51:26:c4:a4:5a:
ca:74:7b:69:99:64:af:ae:f1:6b:d1:01:cd:c6:41:
9b:1f:16:5b:35:ee:11:40:91:90:b1:89:e5:eb:27:
21:27:47:ab:bb:20:60:95:92:23:a7:96:46:b9:f2:
26:22:8f:b5:4f:89:cc:04:5d:a8:0b:6c:c2:2a:7e:
60:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:70:9F:35:49:D2:AC:7B:79:83:84:04:77:D5:82:5C:A9:3A:B3:DD
X509v3 Authority Key Identifier:
keyid:2E:87:C3:D5:F4:5F:EF:38:C1:05:B9:3D:D4:4D:D2:4F:5B:EE:60:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:d3:f8:37:42:32:d1:3f:7a:1b:9a:51:cc:f2:ae:59:34:31:
92:4d:bd:45:bf:f1:27:24:ff:8a:c9:06:ba:aa:5a:0e:dc:d2:
90:b0:93:56:1a:be:9f:92:e2:86:cb:62:1a:15:b7:16:ee:56:
c7:28:d0:bb:e2:6b:20:7e:c6:ff:d5:cf:91:82:70:47:d9:2f:
aa:57:96:76:5b:f7:65:66:5f:37:fe:ce:ff:0c:5b:e8:1f:99:
dc:8c:0e:49:54:86:13:1e:81:d1:bd:b5:77:52:86:dd:3b:ef:
12:ee:1b:80:79:92:98:bb:82:0a:69:d5:4b:f0:80:73:a6:4e:
06:37:4f:3e:57:98:bb:4f:70:11:9a:50:b6:6d:d4:93:ba:ff:
1b:40:07:95:4e:9a:a4:40:47:69:26:a4:45:55:0e:10:73:5b:
24:be:a4:f1:bd:c9:d7:fc:73:b1:2f:65:bd:ca:7b:ca:a2:d1:
af:a5:a7:14:a8:f6:7b:16:9d:8c:1a:58:8a:f1:55:2b:fc:c6:
ac:c6:80:e0:64:4e:da:ba:4d:73:2a:2e:72:81:ea:9f:a4:97:
13:fa:32:fd:16:04:17:37:73:1d:d6:7f:6d:c9:5a:ce:2f:a8:
2d:ec:b9:42:fa:1b:86:b7:54:4d:91:44:ff:25:a1:5e:e9:92:
dc:68:6b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:37:36 2025 by rpki-client