Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
File: LclV9MLHFXq72_6AnPGVYFlJppg.mft (raw, json)
Hash identifier: H4NuhQ5Ezvm0iKlE2ByV0XgxkzVb9T4uB6hYS9vMxak=
Subject key identifier: A1:70:A8:58:74:1C:EE:FC:8C:C6:63:D9:0D:C8:51:B7:3F:0E:83:23
Authority key identifier: 2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
Certificate issuer: /CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Certificate serial: 01963E7904F9D88404B24FC374088CE6295C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
Manifest number: 01FB
Signing time: Wed 16 Apr 2025 12:00:40 +0000
Manifest this update: Wed 16 Apr 2025 12:00:40 +0000
Manifest next update: Thu 17 Apr 2025 12:00:40 +0000
Files and hashes: 1: IP4ujJVqk5UohCLCA6tGHFm6tpQ.roa (hash: u2FH+am0hxvosviHA7cG2t5BKioAL7DxGSIWvLxxQUo=)
2: LclV9MLHFXq72_6AnPGVYFlJppg.crl (hash: dhN4bFktpSZpokvqJmLxYg0Ttbt4ubqhoyzk1mT21xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:79:04:f9:d8:84:04:b2:4f:c3:74:08:8c:e6:29:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc955f4c2c7157abbdbfe809cf195605949a698
Validity
Not Before: Apr 16 12:00:40 2025 GMT
Not After : Apr 17 12:00:40 2025 GMT
Subject: CN=a170a858741ceefc8cc663d90dc851b73f0e8323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:ee:1a:95:7a:52:0f:a0:ab:d9:d0:2a:79:
44:1c:6e:30:f7:d1:ba:1b:16:31:aa:5b:21:bc:8c:
d3:bd:38:f9:b1:af:55:24:e8:c3:8b:60:72:66:6c:
17:44:35:ff:a0:1e:da:26:71:70:0d:31:59:20:28:
ba:34:c4:25:44:4a:4b:39:7d:ac:d8:4f:2f:23:f5:
3d:76:5b:8e:cd:d6:eb:a8:99:77:1a:26:1c:93:57:
b1:6b:1f:72:05:d6:f9:4d:eb:62:35:26:0a:76:fb:
06:b7:cb:27:69:08:35:b1:68:97:18:ff:86:63:67:
28:21:dd:25:6b:f7:8e:fa:c0:7d:85:08:e2:2d:90:
e3:12:a9:f1:b7:e4:bb:22:1d:b4:97:1b:e5:fa:d8:
87:47:6f:d8:67:22:35:46:a6:73:2d:a1:5e:a7:93:
99:ca:cc:3a:ac:9a:9f:54:b2:b9:c7:ce:8c:e8:cf:
c3:b0:c1:22:39:a4:49:17:d2:d3:78:bd:2f:e6:83:
25:59:86:7c:fb:2e:80:88:dc:17:d1:81:a1:f5:c2:
c4:72:a6:b4:91:cd:97:3c:e0:67:de:74:fe:50:64:
4a:24:98:ea:3a:d9:90:58:f0:1b:6e:d3:f0:1c:13:
97:29:25:ad:13:5b:d0:be:c8:ed:5d:a3:41:c3:c9:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:70:A8:58:74:1C:EE:FC:8C:C6:63:D9:0D:C8:51:B7:3F:0E:83:23
X509v3 Authority Key Identifier:
keyid:2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:70:ea:36:dd:4a:7e:e9:f9:6c:91:5a:07:00:c9:b9:ad:cc:
78:0c:0f:e7:32:76:72:f3:f8:82:5e:62:1e:a9:65:ea:8d:9e:
bb:05:97:67:6a:ed:50:b0:41:c0:2d:ec:ea:9c:5c:a5:36:78:
b1:28:71:b4:c3:1f:72:c9:08:c7:c9:e1:a7:15:5d:0f:3b:9d:
2c:2a:5a:f8:3f:a4:9f:e8:46:b1:16:1e:b0:87:4d:8a:84:b1:
21:5f:2d:ec:b7:2d:6b:f3:e8:ef:12:fa:a8:d9:90:39:e5:0d:
53:84:e7:4f:19:42:94:3b:42:ad:a7:f1:06:7d:c7:c1:d9:e2:
ce:63:fd:c7:cf:c7:f9:a3:b6:04:10:88:8a:7c:69:d3:30:97:
8b:98:ab:88:b1:ea:7a:c1:ec:0d:1a:cd:d8:90:f7:e0:f8:a1:
26:05:67:4f:b4:80:17:35:af:54:22:a5:2c:14:39:e5:74:61:
a7:ed:22:05:a4:74:1d:2c:7c:65:fd:51:a0:ef:29:83:38:df:
e5:59:18:d3:e9:56:dd:23:e0:e5:b1:13:6b:05:a8:48:c9:f7:
4b:4d:02:91:6c:d3:25:a7:ca:8a:d5:95:7c:4b:81:8b:b4:e1:
db:bb:7a:0e:8e:40:0a:62:b0:0b:79:be:6e:c5:21:ab:23:c3:
47:52:af:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:01:53 2025 by rpki-client