Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
File: l1lSndMXBkXXbPasBllQbMZJypA.mft (raw, json)
Hash identifier: 1Heel+3qTH0FvGA8t75BQuaEUo0qkIsvpAeahiV8FyU=
Subject key identifier: D9:22:EC:11:63:DF:F9:42:DC:8D:24:5B:BF:F5:50:53:42:CF:49:48
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 0195127E50BCAECCD15C18C966E65316560D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
Manifest number: 116F
Signing time: Mon 17 Feb 2025 06:00:22 +0000
Manifest this update: Mon 17 Feb 2025 06:00:22 +0000
Manifest next update: Tue 18 Feb 2025 06:00:22 +0000
Files and hashes: 1: 0CXMUaTMQIKH6epSkL7Djl138G4.roa (hash: 7ikpmMwL3KhBT/ey6JF8CQkgs9c+Pq5I2Oo9Rhvfk8c=)
2: 2E_YHRCuF5MHTxlMx4c1H-5_vdo.roa (hash: cd6fZP84XkBNWRqBbhJXNCRjH3aM1q5IULZkt1L/R08=)
3: l1lSndMXBkXXbPasBllQbMZJypA.crl (hash: qNvkDsaO8+QHd60s6tSBgn8lmPjIHNvK3Wc8JvDvv3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:50:bc:ae:cc:d1:5c:18:c9:66:e6:53:16:56:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Feb 17 06:00:22 2025 GMT
Not After : Feb 18 06:00:22 2025 GMT
Subject: CN=d922ec1163dff942dc8d245bbff5505342cf4948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cd:20:aa:69:b0:73:2b:c0:b6:6b:43:86:ab:
f5:14:f4:78:7e:9b:25:27:5b:a9:ab:a2:c7:00:10:
4d:a0:93:f8:99:ce:f4:8e:bc:37:cf:39:00:24:4c:
7d:ed:13:b0:50:76:7e:7c:94:d1:48:89:2c:cc:8e:
87:14:32:2b:6f:58:e0:60:8f:f9:e2:28:58:90:3f:
3d:25:b1:46:de:dd:a7:d2:7f:bc:14:81:6c:f2:a5:
40:cf:f7:ef:f6:0d:9a:0e:9a:d8:8a:39:98:f7:78:
f6:7a:d6:42:16:d6:a3:68:b7:1c:69:ef:00:5d:4a:
a7:29:fb:5c:46:25:cc:6a:0b:01:c8:89:c6:e4:3b:
f6:c1:01:dc:10:ac:b3:2a:91:d9:e4:97:1d:c7:53:
8b:dc:ae:8b:54:80:3c:f5:a2:54:db:ee:4e:f8:ea:
a0:7e:8a:a4:63:82:ca:7c:82:34:d1:e0:cd:d3:18:
17:cd:0b:18:8f:0e:f7:37:9a:48:4f:f3:e9:c2:17:
6c:3f:da:0f:f2:3f:37:9d:b7:95:7e:50:33:8c:57:
77:22:b6:42:cb:23:c4:19:2f:5a:f5:94:b6:58:58:
e5:46:6e:70:51:02:7f:6a:b2:72:29:b9:ef:0a:ea:
04:5e:b6:56:ce:4a:a5:3e:40:85:b5:6a:6a:e2:7a:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:22:EC:11:63:DF:F9:42:DC:8D:24:5B:BF:F5:50:53:42:CF:49:48
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:63:03:73:a7:da:63:c8:03:23:c0:78:21:d1:ae:c2:21:0b:
37:5d:16:db:35:7c:56:59:48:3f:d8:8e:0c:de:b0:bb:eb:07:
b4:41:b8:59:c7:83:24:65:cb:95:dc:7b:32:54:bb:87:17:9d:
93:0b:e4:c0:37:1b:4b:f6:7f:07:cd:48:32:17:e9:45:b8:93:
04:01:1f:18:82:f5:b0:9e:df:cc:d1:29:ff:d1:b2:46:fd:fe:
93:ce:02:27:61:66:57:3c:db:73:c4:13:37:bb:61:d1:5a:b0:
87:6d:8c:46:25:fe:47:e1:c3:c2:c7:b7:de:93:68:77:92:e9:
6a:84:48:4e:47:59:98:33:cd:23:7f:79:3e:eb:63:d7:0c:9e:
48:9a:07:65:2b:c9:86:ae:23:fe:f8:6d:9e:09:49:d8:35:9b:
d8:39:4c:b1:e2:0d:a5:21:cd:fc:39:10:8b:b0:fc:24:e9:53:
84:80:28:d1:10:a0:9c:f4:4a:fd:ec:14:b6:0f:e3:a8:6b:82:
f2:4b:19:51:9b:a6:1b:4b:9b:60:bd:0d:04:1b:75:a6:a5:43:
a3:58:50:72:e8:74:cb:11:6f:44:4e:b1:e9:c3:b3:d4:07:ec:
0c:58:df:6f:d6:4e:d8:f4:63:71:af:04:9c:71:04:a4:f3:b7:
f8:a8:c0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:49 2025 by rpki-client