Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier: 8wtfqKQsvXYjeTg7jqhXC0LFTOcowrA+FssVNoFYyRY=
Subject key identifier: D7:FA:F5:62:F4:3A:7D:D7:CB:4B:47:7B:5C:9F:C9:78:64:97:C3:DB
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 01958B84537899C986A5D399DCD3FDFC0260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number: 05AA
Signing time: Wed 12 Mar 2025 18:00:59 +0000
Manifest this update: Wed 12 Mar 2025 18:00:59 +0000
Manifest next update: Thu 13 Mar 2025 18:00:59 +0000
Files and hashes: 1: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: ibZXUdnsQ+DMWJCVtdbSWNu3xaMxz8xtSRimCZdOGqo=)
2: jCfDa1o9-67BNQODivTRRldEbdY.roa (hash: 8Y6qhIf9Ka0kdUNg/SnNbfjipainSlycgW7SSV7AHSU=)
3: om141KzkG2-4eMZ-f0PthIkpE80.roa (hash: cw3Iskxz7drppI2oVPr2KEtsT6+wW7KALNNnzpIfPOQ=)
4: vA4JTCZBPjorS9CM--5uNxgqUOI.roa (hash: C8BQR0NQXngOUVQVK+k99B0pWs9mjN+aAreX6gH4h2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:53:78:99:c9:86:a5:d3:99:dc:d3:fd:fc:02:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Mar 12 18:00:59 2025 GMT
Not After : Mar 13 18:00:59 2025 GMT
Subject: CN=d7faf562f43a7dd7cb4b477b5c9fc9786497c3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:a1:e9:5b:34:0d:11:9c:8c:6d:b2:34:b0:
cc:6b:61:cb:f7:ba:40:4f:0b:e2:e5:dd:01:08:79:
0e:75:74:03:c9:f9:e8:85:52:7a:8b:6a:cc:47:5e:
41:d4:41:8a:a7:07:cd:0d:9d:73:9a:48:c8:6f:29:
8e:e8:df:79:5b:e6:c8:77:eb:30:66:4c:5a:96:30:
c3:5a:c6:f1:05:86:2f:f6:83:cb:db:31:71:30:5f:
9e:7c:fa:f9:9e:0e:01:ed:ca:b1:bf:95:8f:cc:81:
fa:b8:7f:06:39:37:1f:cb:cd:1e:fd:b4:4a:1d:6f:
4f:21:95:b3:c3:d8:bb:07:5f:e4:71:ab:56:29:f3:
6e:db:e7:56:14:91:2d:f8:28:ad:d9:fe:2d:a3:5c:
87:de:5c:e2:a4:ea:b5:bf:db:cd:64:0d:6f:2b:a7:
df:e9:7c:60:b5:c6:27:8c:06:2b:09:cd:c9:9e:e2:
39:72:f7:c3:a7:4f:95:e1:8a:56:14:61:52:60:02:
55:cd:bb:ba:b1:a6:0d:fb:b4:b3:75:70:fd:f0:cd:
32:d7:26:71:72:21:b7:a7:38:26:cc:55:0a:79:84:
84:55:be:b0:db:4a:51:b7:f0:9c:29:a9:a5:11:fd:
9f:7c:a5:41:da:46:85:7f:de:41:c7:8c:15:22:0a:
f6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FA:F5:62:F4:3A:7D:D7:CB:4B:47:7B:5C:9F:C9:78:64:97:C3:DB
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ab:d0:9f:62:a0:c3:39:fd:ac:81:c7:0e:aa:42:5e:fe:95:
ba:7e:f2:9a:2e:ec:58:f7:96:ec:39:c3:7f:30:8c:32:b6:b3:
94:f9:89:32:f4:25:32:54:d5:79:34:92:73:7d:08:54:c4:31:
46:68:81:78:89:eb:3a:f4:fb:46:8d:c0:76:b6:a7:8a:ea:66:
cf:0b:7f:f1:76:41:f7:f0:94:9e:df:e1:e7:42:9e:76:db:36:
e7:fd:ef:2f:26:a5:5d:50:cb:48:92:8a:6c:c7:02:b5:31:bd:
17:e2:74:87:c8:8b:1b:5d:b0:76:c4:79:df:64:e6:e3:d8:75:
e1:17:53:21:1a:41:ab:4f:ef:8e:d4:b3:8e:10:a4:74:0c:5d:
fa:03:dc:bc:10:16:b6:8d:20:15:c3:f1:85:0e:d7:b3:65:fc:
a8:0b:6e:83:a0:21:4c:37:4a:a2:b7:8e:af:d3:de:4f:ad:b6:
25:49:50:a7:a6:0c:6b:0a:6b:3d:af:60:b5:ec:1d:72:72:9c:
f8:ca:3a:dc:d9:30:a6:d1:d9:01:e5:4e:9c:a0:8c:d6:d0:56:
6d:d2:aa:6d:66:7b:23:b6:73:c6:06:b1:04:d1:26:91:c4:a3:
33:2a:5a:31:dc:e5:54:d0:f4:c4:60:76:1f:02:39:d2:51:7d:
14:09:73:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:29 2025 by rpki-client