Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json)
Hash identifier: QYqnMcXqTytzCM+4QP7Zl+BV2gDekOpDRzr3/qLLmYc=
Subject key identifier: 73:A9:75:13:A1:F8:10:FF:35:3F:74:82:A3:A4:85:3E:46:D1:68:0A
Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Certificate serial: 01965236EFFDFDD48AD2FF920CA5D887CAD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
Manifest number: 14E5
Signing time: Sun 20 Apr 2025 08:00:54 +0000
Manifest this update: Sun 20 Apr 2025 08:00:54 +0000
Manifest next update: Mon 21 Apr 2025 08:00:54 +0000
Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: d1Y+LlBSAgXvkyhMpCHL+TpCSYVV9csGkZHvmXPvEqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:ef:fd:fd:d4:8a:d2:ff:92:0c:a5:d8:87:ca:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Validity
Not Before: Apr 20 08:00:54 2025 GMT
Not After : Apr 21 08:00:54 2025 GMT
Subject: CN=73a97513a1f810ff353f7482a3a4853e46d1680a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:b6:46:4c:05:78:0c:99:7d:f3:2d:a2:1a:
23:f9:63:dc:81:d3:6c:bc:49:52:41:59:1c:2c:3c:
13:2a:23:78:34:32:7d:3d:24:93:d8:6b:01:cb:b0:
01:6c:c1:7a:72:f8:f1:df:8b:bb:93:d0:b9:7c:12:
36:ef:07:a8:32:82:81:24:9b:61:9d:ea:64:06:f8:
61:7a:41:5b:ac:ee:e5:9b:c6:b8:1e:49:b6:80:89:
ad:e4:02:98:7f:c7:ed:f0:67:3a:f4:ee:80:af:3b:
71:5a:ae:98:df:41:9b:11:1d:c7:2b:97:d5:7c:aa:
31:c0:26:86:0b:26:de:eb:8c:21:10:bd:eb:b1:af:
8f:09:19:9b:ac:7b:d1:95:0c:d8:2c:2d:9a:c1:27:
86:45:98:53:35:6e:6a:f4:f5:45:46:74:9c:b1:4b:
e0:35:1a:af:4a:7b:d7:25:f9:d6:d6:c1:9f:86:e3:
4f:8f:17:f7:a0:fc:08:7d:2f:45:57:c7:8f:28:4b:
ac:ed:96:8b:67:73:0d:97:c5:e4:59:9c:c4:41:9f:
28:da:10:7e:da:f9:0b:11:05:33:1a:e1:99:e7:da:
b0:66:23:48:93:0d:0a:d9:0f:5d:f7:76:30:75:e9:
b3:1e:70:ee:30:ed:56:0f:25:d8:16:7d:09:ec:97:
18:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A9:75:13:A1:F8:10:FF:35:3F:74:82:A3:A4:85:3E:46:D1:68:0A
X509v3 Authority Key Identifier:
keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:76:71:82:21:4b:43:64:00:22:06:88:b6:f3:05:e1:03:3e:
81:6f:03:7d:39:5b:8f:db:4b:9b:ef:91:2b:2a:81:44:8f:bd:
91:ed:a0:2d:c2:17:ac:08:14:cb:cf:81:c7:60:8b:bd:9f:16:
ac:23:7d:0b:98:e6:aa:37:05:55:38:53:89:94:9e:4b:cb:27:
83:67:42:81:3f:87:03:cd:b0:b4:00:5a:65:0a:b2:67:55:7e:
8a:99:6e:06:07:31:7d:02:06:5b:1b:72:95:e1:0a:df:3a:c1:
a4:3b:dd:ac:9b:7c:ca:75:0d:61:83:3a:95:8f:b8:ff:0e:3d:
f4:a4:d0:a2:3b:71:80:a1:c1:2d:b5:9d:67:c7:4c:91:95:1b:
02:b4:ba:b9:71:50:56:31:de:6b:06:24:1d:f3:31:f4:dd:33:
fe:c1:50:1d:f4:e3:31:80:3b:06:7c:e4:f2:02:a2:0b:60:a2:
cd:ee:2c:d6:b6:71:49:91:0f:49:90:52:79:35:5e:d2:2b:09:
51:26:13:58:a2:97:21:8d:36:08:6f:79:72:7e:47:e9:c1:b3:
56:55:69:a1:97:32:64:01:5d:3f:78:9c:18:d7:d6:3b:e7:98:
6b:3a:a9:42:a3:32:ee:01:ad:fb:4e:3d:c2:c8:83:ef:45:c0:
64:c7:7f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:40 2025 by rpki-client