Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
File: lSGiYvUHXiSys8m2nIr0DimIoeQ.mft (raw, json)
Hash identifier: OV2wrh8O/faqDdljqqWmbi17Xp8PvVtiLmoSSxk37xs=
Subject key identifier: CE:ED:5D:A7:92:C9:1F:8B:62:53:CF:3B:9A:26:77:E4:12:82:AC:9B
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial: 01958BF20B6CD95A7CAF6B5D93F0921CD88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
Manifest number: 01B6
Signing time: Wed 12 Mar 2025 20:00:50 +0000
Manifest this update: Wed 12 Mar 2025 20:00:50 +0000
Manifest next update: Thu 13 Mar 2025 20:00:50 +0000
Files and hashes: 1: Lpcsk8pQMiEPT6ApZhOXx9JAafQ.roa (hash: UQY6sisXum2gKK35fkWx14SykCBKN5d6dEz3tT5FKwk=)
2: lSGiYvUHXiSys8m2nIr0DimIoeQ.crl (hash: 0TZifxrlNMjhCfGynZWegLF3mZzuVOuWA0grI1YKF2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:0b:6c:d9:5a:7c:af:6b:5d:93:f0:92:1c:d8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Validity
Not Before: Mar 12 20:00:50 2025 GMT
Not After : Mar 13 20:00:50 2025 GMT
Subject: CN=ceed5da792c91f8b6253cf3b9a2677e41282ac9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:29:e0:62:29:32:99:42:bc:37:b6:60:ec:46:
cc:7b:c6:f2:6a:49:7d:d8:f7:63:ed:0a:eb:c0:d8:
65:93:d5:14:ed:5a:8a:04:33:cc:88:a7:b9:09:9d:
bf:f1:b9:36:47:92:93:0b:fe:ec:c3:a4:9e:50:c5:
c6:99:2a:e4:34:71:d9:73:6c:6f:bd:3e:8f:93:f0:
ca:30:c4:ae:c4:75:1b:de:5b:35:76:8d:cf:eb:31:
c1:f1:04:b5:2f:89:32:07:a8:eb:53:39:9c:25:37:
d8:15:ef:cb:2b:16:a3:34:86:fe:62:56:23:97:ca:
42:cb:34:9f:e3:8f:cd:4f:ce:df:c2:08:54:6e:28:
c3:6d:04:f7:87:d0:8c:d3:4d:f3:dc:48:91:39:44:
c6:12:26:05:b4:b2:73:fe:da:6f:ff:69:32:b6:69:
59:97:02:36:20:d9:bc:55:77:07:f8:93:bb:3e:18:
32:70:b9:94:11:81:f6:62:52:d9:45:c4:e6:09:01:
0b:9f:5a:ec:3d:9a:be:2c:08:24:41:db:23:d8:3f:
c1:3d:a9:f2:af:5a:8c:62:b0:c5:c7:57:4e:a8:57:
0b:40:65:0b:42:b8:77:09:1f:5e:40:4b:1b:6f:29:
32:21:d4:5e:4f:87:7f:9f:4f:f4:8b:fb:a5:af:72:
60:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:ED:5D:A7:92:C9:1F:8B:62:53:CF:3B:9A:26:77:E4:12:82:AC:9B
X509v3 Authority Key Identifier:
keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6b:0f:12:7a:25:3d:55:a9:fe:04:73:d6:f2:29:88:57:41:
02:25:8e:06:da:83:91:8f:9c:07:9c:3d:39:31:87:6d:e9:84:
4c:7b:86:40:68:27:59:06:b0:18:2d:4f:71:af:32:d0:d5:59:
57:e0:96:02:48:18:db:65:43:79:ff:61:a3:b4:90:cc:05:48:
a3:ab:f1:45:20:2c:38:3a:9b:4e:e1:dd:d0:df:47:1b:07:11:
c0:dd:69:e4:fc:df:64:ba:c3:d5:96:67:e1:2d:ac:d0:29:2b:
2d:8b:1b:55:58:5e:12:48:47:7f:05:4f:4c:33:8a:33:2d:06:
bc:49:14:8a:32:c9:66:3c:9b:4b:cd:97:2d:21:cc:da:53:3c:
5a:c8:7c:12:96:1e:f9:86:a0:bc:1a:0a:bd:3c:7e:bf:d8:56:
ac:73:2d:6b:6f:4e:8f:3b:cf:3d:e9:23:c3:76:1e:44:4d:05:
b6:7a:a9:d3:cc:86:a1:8b:ca:cd:16:be:7e:68:2d:62:78:31:
b2:8c:cf:c2:51:7f:3b:e3:0f:70:82:21:60:46:8c:a5:28:7e:
e5:92:0d:28:ae:4d:e9:3f:fe:99:eb:a7:43:1f:82:46:84:0d:
4f:6a:7c:45:e2:8b:a6:cf:6c:82:2c:2d:10:dc:67:2f:8d:5d:
ba:69:0a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:04 2025 by rpki-client