Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
File: lqKMzDCRW1xzEoCowcpn_mAJVO4.mft (raw, json)
Hash identifier: nWe6MJabSHaaMW9uBUfKToRunXewUH9wuFexYfuNDYU=
Subject key identifier: B7:B0:72:A5:F9:EE:8A:B6:65:B3:F6:9D:5D:D2:75:32:39:4D:78:C2
Authority key identifier: 96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
Certificate issuer: /CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Certificate serial: 01964DEC1E5A4CBDE792EE65963B15405463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
Manifest number: 0576
Signing time: Sat 19 Apr 2025 12:00:41 +0000
Manifest this update: Sat 19 Apr 2025 12:00:41 +0000
Manifest next update: Sun 20 Apr 2025 12:00:41 +0000
Files and hashes: 1: P0vR8NFOqzUM0n5-PTdZVFTAC8Q.roa (hash: A8zEAcViYD9RWk/au7+yPQfR19Sh9DoooPV1RyNftPE=)
2: lqKMzDCRW1xzEoCowcpn_mAJVO4.crl (hash: JUUTUeT0VgSLFJdR0fxTI+ip3nHSEmT09+yZ7wxri8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:1e:5a:4c:bd:e7:92:ee:65:96:3b:15:40:54:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Validity
Not Before: Apr 19 12:00:41 2025 GMT
Not After : Apr 20 12:00:41 2025 GMT
Subject: CN=b7b072a5f9ee8ab665b3f69d5dd27532394d78c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:30:4a:3b:04:ec:77:28:89:e2:84:3f:8b:87:
5a:63:99:fa:4e:55:b5:e8:5b:41:bc:88:2a:a6:b7:
99:66:02:32:23:b4:b7:7d:a5:af:b6:08:c1:06:74:
7d:69:06:d5:9e:14:cd:47:5f:bb:06:92:f5:71:0a:
7c:bc:69:26:8c:c3:a2:fc:30:90:32:88:87:ed:c1:
c5:06:32:b7:d8:3c:3f:8b:85:8d:7c:f7:1b:75:fa:
77:ae:6d:28:9e:4e:3f:a5:52:4d:3c:71:2e:69:0e:
06:33:ba:ba:b6:9d:cf:31:a7:b7:18:f4:39:79:a0:
53:57:27:d4:7d:9b:4d:d2:6d:1a:ba:d7:ce:b4:c9:
d2:7b:cf:ec:9a:db:5f:a9:a8:13:b8:3b:71:84:f6:
3e:3c:36:c5:36:1e:98:cc:b5:e4:31:7b:8f:58:c8:
61:0c:d1:e2:47:ba:0a:aa:50:37:1f:96:e9:fe:0d:
2b:50:a2:68:7e:6d:f1:5d:c0:c1:80:80:9c:1d:94:
ce:fd:f3:19:69:ff:51:9e:2b:16:17:4c:ef:07:58:
ee:aa:28:f4:46:30:92:60:5e:d9:ce:59:57:08:47:
2d:4a:b1:6d:db:13:c3:2c:7a:23:86:4e:5a:25:e6:
56:9c:98:5f:eb:79:ae:c9:0a:6e:fd:5b:b0:62:5b:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B0:72:A5:F9:EE:8A:B6:65:B3:F6:9D:5D:D2:75:32:39:4D:78:C2
X509v3 Authority Key Identifier:
keyid:96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4e:2a:9c:65:1e:71:7e:88:8f:e6:f5:f1:a4:cd:8d:72:1f:
c9:99:71:8c:73:c4:22:16:8c:9d:2d:be:5a:f1:64:24:37:86:
80:d7:95:c0:b9:c1:6f:6b:bd:46:16:c6:fa:01:4d:3b:04:d5:
82:5e:06:c6:45:b3:d7:74:f6:9b:78:11:60:6c:c5:0f:e7:8d:
b5:ff:81:ba:9d:6d:af:71:6f:d1:d9:7a:80:f0:c7:98:3e:fe:
30:e4:05:1d:0f:18:af:03:2c:25:6f:04:da:33:70:59:34:f7:
16:b7:a6:43:b5:e1:5e:f6:ad:f3:92:19:2d:91:72:ba:b2:b6:
c1:79:65:95:2a:23:54:10:14:f9:7d:7e:fe:ca:ac:e0:eb:48:
a8:79:32:2d:f1:c8:9f:41:e7:e7:16:e7:de:8d:29:5b:5f:18:
0f:84:f3:3f:ea:de:65:17:a6:15:3a:40:9d:1f:ed:a0:71:d7:
b9:48:70:a8:70:64:db:ab:6f:4f:d3:2f:0e:e3:c1:0f:b5:e7:
b9:2e:ad:60:dd:75:78:27:cf:4f:ed:e5:bc:0a:46:c5:0e:8d:
7f:aa:50:b4:80:14:ef:31:bb:a0:02:e5:b7:a1:57:60:c5:a4:
e7:2a:07:65:62:6c:74:fc:9e:f3:b2:49:65:f6:e5:ed:7f:83:
1f:e2:0a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:24 2025 by rpki-client