Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
File: lXbbt2mVtJUKhsXwfKjbPrSWePY.mft (raw, json)
Hash identifier: urdIk7PWpDXHYdo3G5SD8EWsonqr+q9cNJQ0GaZrlWk=
Subject key identifier: 2C:C7:36:B0:0C:9C:8B:0C:6B:B0:2A:65:B2:5B:D7:8F:DA:92:92:F9
Authority key identifier: 95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
Certificate issuer: /CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Certificate serial: 01960A8C54BA42E1CD0CBC4BF6773DE7C2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
Manifest number: 0217
Signing time: Sun 06 Apr 2025 10:01:30 +0000
Manifest this update: Sun 06 Apr 2025 10:01:30 +0000
Manifest next update: Mon 07 Apr 2025 10:01:30 +0000
Files and hashes: 1: lXbbt2mVtJUKhsXwfKjbPrSWePY.crl (hash: RliX+XZ3ScNXVu0egowj8qikcMQxv8wX9+h5asKihlQ=)
2: wOkYAGqpSPBGigfUEv7El852HGA.roa (hash: jGAVgltAX4k1B+fH3k6Z7JMTyuIFNv8n6kIlzZB4Zww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:8c:54:ba:42:e1:cd:0c:bc:4b:f6:77:3d:e7:c2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Validity
Not Before: Apr 6 10:01:30 2025 GMT
Not After : Apr 7 10:01:30 2025 GMT
Subject: CN=2cc736b00c9c8b0c6bb02a65b25bd78fda9292f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:9a:f9:5f:28:a0:57:fe:13:b7:5d:b6:11:
d6:a6:89:46:a5:97:ba:03:95:04:dd:30:93:02:34:
ac:ca:e8:1d:03:89:a4:2b:19:d7:24:04:f7:eb:33:
0e:22:54:ec:6c:63:35:c6:54:5c:0f:4e:6b:92:8d:
e0:dd:bd:58:5f:a1:26:77:42:92:fd:b0:98:ed:8a:
3b:16:1f:d9:62:d6:00:1e:52:4c:fe:6f:84:7e:95:
63:2d:d1:f7:8b:99:09:82:7f:b2:10:0b:f0:a8:b3:
18:66:58:c7:44:fe:da:7c:50:dc:8e:7c:08:4e:04:
46:d2:cd:63:5d:28:20:78:0c:50:9a:a9:4a:5d:e1:
fb:50:e0:2f:58:55:c6:84:e8:7f:3b:9e:7e:1b:f2:
36:4d:d0:6c:ec:a3:ae:21:3f:96:64:ec:f9:69:24:
b0:9a:c1:df:ac:13:13:51:8e:52:b0:93:1a:b9:0c:
c2:86:a4:e3:18:c0:f2:49:79:f0:10:38:da:47:9b:
39:50:32:73:6d:0f:2d:ef:2d:d8:37:6c:43:76:9a:
88:e4:c7:54:1d:7b:e1:aa:ab:c3:92:03:40:12:6c:
98:e6:64:b3:05:36:33:ec:f2:c1:7f:cb:0d:56:77:
fe:a9:25:00:29:7f:14:05:fd:7a:ca:b9:84:00:30:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C7:36:B0:0C:9C:8B:0C:6B:B0:2A:65:B2:5B:D7:8F:DA:92:92:F9
X509v3 Authority Key Identifier:
keyid:95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:52:c2:ba:6b:18:fc:53:fa:04:20:5a:df:10:da:40:e8:91:
b6:8e:7d:46:e4:7b:07:47:99:e4:eb:8d:35:fe:ab:83:64:ea:
f4:cf:18:da:9f:22:6a:1b:ba:70:ef:3b:dd:a0:f8:1e:d6:40:
33:3e:e1:47:04:6b:5f:2c:15:e2:cd:3d:21:c5:43:a2:63:d9:
84:b2:3d:41:d5:c3:75:48:57:d2:c2:e9:10:31:bc:17:bd:0a:
cf:2b:8e:63:04:b2:c5:33:6d:31:2d:c3:5e:f0:65:9d:be:6f:
1a:7b:d1:67:c2:82:bf:91:18:b9:e3:92:f1:e6:34:ee:b6:e2:
b5:4f:a4:37:3d:26:ea:79:23:97:62:e2:64:87:fe:0f:a3:ed:
37:60:b4:ca:19:e9:90:74:bc:72:63:23:9e:49:18:13:81:a1:
08:9b:ba:e2:8f:22:37:01:b9:5d:50:42:1a:14:fd:76:6f:36:
a2:db:92:a8:2a:b9:ee:c1:5e:9e:f6:e5:97:18:bb:4d:81:e6:
0f:6c:44:3e:db:d5:3e:da:3a:9a:21:3f:4b:58:a0:eb:10:ac:
88:c9:bf:dc:2c:ec:e4:57:c0:70:17:a7:d7:20:96:14:fd:a5:
5c:bb:9f:45:00:59:22:b4:de:fb:81:a5:1a:d1:6e:ab:41:42:
fc:b1:9c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:05:11 2025 by rpki-client