Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
File: l1lSndMXBkXXbPasBllQbMZJypA.mft (raw, json)
Hash identifier: ncvJcfHqsBJTvRCb753kvTuFOJ7tAGrbgMflwnC8dAg=
Subject key identifier: 00:9D:05:C3:50:82:30:A6:B0:F6:54:9B:72:74:6E:83:DD:1C:96:BA
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 01958C2948266E6B671FE4E1AE646797531B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
Manifest number: 11AE
Signing time: Wed 12 Mar 2025 21:01:10 +0000
Manifest this update: Wed 12 Mar 2025 21:01:10 +0000
Manifest next update: Thu 13 Mar 2025 21:01:10 +0000
Files and hashes: 1: 0CXMUaTMQIKH6epSkL7Djl138G4.roa (hash: 7ikpmMwL3KhBT/ey6JF8CQkgs9c+Pq5I2Oo9Rhvfk8c=)
2: 2E_YHRCuF5MHTxlMx4c1H-5_vdo.roa (hash: cd6fZP84XkBNWRqBbhJXNCRjH3aM1q5IULZkt1L/R08=)
3: l1lSndMXBkXXbPasBllQbMZJypA.crl (hash: Fbjt3QvQNL60fzYKnXGY3eA7GrtCJxe51ILkLrAw1BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:48:26:6e:6b:67:1f:e4:e1:ae:64:67:97:53:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Mar 12 21:01:10 2025 GMT
Not After : Mar 13 21:01:10 2025 GMT
Subject: CN=009d05c3508230a6b0f6549b72746e83dd1c96ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:64:26:b3:e0:b3:00:2b:09:f2:52:da:6e:
07:1d:8d:50:2a:ab:4b:0d:98:42:1a:1f:34:49:bd:
62:fe:00:68:23:2e:15:34:33:3b:16:19:c4:1a:26:
b4:66:b2:45:07:92:c3:e2:51:8f:36:8e:c1:be:b6:
e1:a3:35:07:05:a9:0d:05:a6:64:e3:d7:41:a2:f0:
c0:63:ce:23:9e:97:3d:26:3d:af:b1:b3:5c:30:28:
dc:bf:5c:10:83:ae:7c:5b:b2:80:bb:ff:b6:f5:fb:
1e:09:25:a7:c9:1b:a9:30:89:f0:5e:0b:72:4b:b0:
8b:91:97:2d:5c:54:95:c2:d1:8f:a7:63:fd:4b:93:
60:94:56:e1:17:cd:ba:2f:a8:94:8c:df:61:93:e1:
3c:dc:64:f5:23:f2:cd:a7:32:ff:91:68:7f:d5:22:
30:da:21:3d:6b:66:77:29:b0:9c:65:4f:7e:52:66:
2c:62:84:fb:28:eb:5f:d2:0b:00:a4:2f:33:72:4c:
b4:30:b0:e0:0e:18:88:ea:9e:24:01:15:05:4e:6b:
36:ba:f8:04:00:21:c0:94:4e:a0:b7:a3:65:98:3f:
e1:9f:9c:b4:6f:c8:a2:9e:fb:60:b1:8c:77:3d:99:
f4:34:6c:36:2b:0b:8c:55:93:5a:2b:a8:f0:17:b6:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9D:05:C3:50:82:30:A6:B0:F6:54:9B:72:74:6E:83:DD:1C:96:BA
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9b:ad:76:0f:e1:4c:05:2d:c9:31:28:25:f0:a8:3a:9d:5e:
0e:e1:f7:20:ee:3b:18:e4:10:ec:84:90:98:5f:0c:e4:0c:31:
91:be:f7:af:0f:35:8c:78:32:04:81:50:7f:8d:7d:3a:77:44:
51:f1:f5:73:df:ae:19:82:03:8b:88:e7:a6:eb:48:02:25:66:
af:cf:33:97:58:f5:37:fd:55:04:66:80:1d:2a:33:44:61:9f:
76:89:9b:a0:63:1d:bf:09:4e:fb:d3:da:d4:24:c1:d9:a6:b8:
55:46:6f:81:f6:f2:ef:e5:45:55:6f:bd:4e:9f:54:b2:65:c2:
5b:f1:4c:32:80:28:14:03:99:c9:1a:7d:7e:6c:b0:71:0d:f4:
0d:ca:dd:fd:82:1d:ad:53:7f:59:fa:01:e7:bb:8a:81:5f:f4:
3f:3f:66:37:33:0f:ee:72:12:14:c6:ed:d0:25:f4:2a:2d:ca:
5e:62:78:7d:25:ce:2a:95:67:bd:fa:63:55:62:87:7b:16:4f:
6c:ae:27:43:af:94:92:d1:03:b9:b9:9e:04:2b:64:c0:5e:97:
ba:cd:7e:c7:7d:90:80:18:09:4e:85:04:d3:4c:29:44:b6:19:
0d:29:a4:d4:f9:59:2a:57:e3:a1:fc:f9:be:fa:1b:37:df:a7:
d7:97:8f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:19 2025 by rpki-client