Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: B6FPqJngE/XP+i9iIbxEy2XM2cV2JoI+WSXJWwAAn8Y=
Subject key identifier: 16:85:93:6F:F6:5E:67:06:9D:97:F2:02:32:D5:73:79:6A:6F:6F:76
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 01962C3CAEF521EA7CD34501A73C1DB6EF8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 0189
Signing time: Sat 12 Apr 2025 23:01:36 +0000
Manifest this update: Sat 12 Apr 2025 23:01:36 +0000
Manifest next update: Sun 13 Apr 2025 23:01:36 +0000
Files and hashes: 1: 0VA_9HQvgavGjx805ubmo2Lo5H0.roa (hash: LdNiPcj48/zXBSO9oEQ4RJjrS+zHAsqfBOtXhy9k8x4=)
2: VrF_JXAYi7cHSdA7vOtQcy0-na0.roa (hash: T3vCer2CYjMD216ESnj/Jeswzt56af8ZdG15R1wMajk=)
3: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: ziXtR8YghwPuXhV8XpLQuShb6UaufMcz81LqdD6p/yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:3c:ae:f5:21:ea:7c:d3:45:01:a7:3c:1d:b6:ef:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Apr 12 23:01:36 2025 GMT
Not After : Apr 13 23:01:36 2025 GMT
Subject: CN=1685936ff65e67069d97f20232d573796a6f6f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:b4:6b:4b:f9:da:55:62:04:8d:0b:aa:5d:
f8:44:34:54:c0:c3:b1:f6:7e:65:fc:ae:b6:0a:56:
48:b0:af:e4:6d:28:ed:e8:ab:37:5a:d4:15:bd:8b:
3b:0e:18:ad:38:88:fd:df:f0:07:dc:a0:cc:1e:89:
86:60:f0:3d:78:9d:ba:04:92:8e:75:46:f8:e2:57:
f7:3f:f5:40:80:d8:9b:35:d1:41:b1:30:98:4f:dd:
58:17:93:61:e0:5c:52:bd:f7:99:5c:82:71:35:8d:
73:c0:45:54:ac:a2:b2:50:ef:e4:0f:ec:04:8f:47:
c6:47:23:bd:78:7f:fe:72:0d:25:8e:28:9d:6a:39:
cd:72:61:91:d4:bc:3c:fc:b2:1f:23:66:b0:9d:58:
30:54:c3:da:e2:11:a3:e5:94:82:36:57:03:a4:07:
80:a4:6e:af:9e:3d:c7:f0:81:1a:0b:21:96:8b:71:
8e:5a:e3:d4:3b:a2:d9:ec:11:23:15:3f:c0:39:48:
37:f3:0c:29:4b:86:11:6c:44:4c:a2:50:f1:3d:b5:
b9:a7:63:18:fb:5b:44:3a:46:e4:8f:58:65:22:b1:
25:c3:84:2d:0d:a7:d5:3a:15:2c:07:9d:52:85:66:
f1:f5:22:9d:aa:38:95:82:7d:94:cd:d7:8c:24:67:
dc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:85:93:6F:F6:5E:67:06:9D:97:F2:02:32:D5:73:79:6A:6F:6F:76
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d8:c1:4d:62:f6:e6:9b:a7:75:29:31:4e:a4:56:73:32:79:
18:43:da:30:ee:7f:d7:62:76:8f:fa:1f:00:3e:31:e3:2f:b6:
e8:37:3a:f3:36:05:5c:5b:a5:8e:ad:00:fa:a6:90:4d:a8:75:
d4:6d:a0:17:7d:15:a4:92:d7:e8:84:2f:a1:ca:b7:18:5f:1c:
7f:79:d4:07:cf:6a:20:83:c1:16:1e:69:81:ea:5e:47:a5:bc:
a7:50:45:f2:11:c5:2d:b0:6b:13:ed:97:b4:24:26:61:03:d6:
b7:b3:9b:ca:35:f5:86:4e:3d:1d:dc:f2:5c:60:31:f5:3d:05:
09:a3:6a:c1:50:49:a8:6e:77:b3:54:55:c2:e4:c7:13:4d:29:
e2:4b:2e:cd:14:bf:ac:c9:bc:a0:ea:25:30:f6:52:67:2c:af:
25:c2:23:c2:1a:d6:10:86:44:04:8b:5d:9d:bb:d7:07:9f:01:
8b:05:cd:4a:64:54:33:a7:0d:00:8f:55:e1:46:0f:25:4e:c6:
f9:aa:9e:e1:16:e8:65:32:4b:85:45:38:c3:62:4c:ad:1b:00:
6c:86:08:27:a2:75:2a:81:47:1d:24:a3:31:85:9c:57:49:3b:
70:2d:d7:86:2f:ae:03:d4:3b:ce:33:75:c0:a4:06:d4:3b:cd:
59:59:ba:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:19:56 2025 by rpki-client