Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: ZwO1qfNtpbwQNd7ImKYTmGayLSCTmPvhXX6JLVN5J4M=
Subject key identifier: 47:E2:B4:D3:AA:5C:68:7A:39:CE:FD:A4:5E:BB:11:45:B8:76:FB:25
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 01965538383FB9A7EF58E5AB7B8DCF9D17C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 12DC
Signing time: Sun 20 Apr 2025 22:01:09 +0000
Manifest this update: Sun 20 Apr 2025 22:01:09 +0000
Manifest next update: Mon 21 Apr 2025 22:01:09 +0000
Files and hashes: 1: 79fBoxetqM8W78-kGmHTvjPW7Uw.roa (hash: pMW1Mp2B+qXHZp51RoJRa8NJEQ1rG2VsgYraYBKPRXE=)
2: 8J0Lc2AsJQgnkJG9_qri1EHFctE.roa (hash: C4HlyCH6kbwI3fK9kG+XOoCsicg+/qe888AdIQka/S0=)
3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: bGa09NluX7S+WEdarZwYGYj3Ug4MjWk2EToXd+c6pGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:38:3f:b9:a7:ef:58:e5:ab:7b:8d:cf:9d:17:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Apr 20 22:01:09 2025 GMT
Not After : Apr 21 22:01:09 2025 GMT
Subject: CN=47e2b4d3aa5c687a39cefda45ebb1145b876fb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c9:35:40:49:f7:95:a0:12:c6:88:ea:68:12:
1e:31:48:fd:34:61:f8:56:8a:c6:f3:af:6c:38:7e:
44:ea:af:38:9c:db:2c:89:93:8e:f4:8e:9a:87:92:
9c:97:be:79:8f:36:7c:6f:96:6f:d5:1b:f5:b8:01:
08:44:5c:cd:1a:7d:2b:06:07:5e:98:cc:20:77:8d:
49:89:c6:8c:5f:14:16:b5:a3:e6:9e:96:40:a7:4d:
0e:b1:f0:38:89:31:da:26:77:65:d2:e3:d6:ed:0b:
27:04:70:f6:d8:f6:4f:ce:c5:28:75:95:09:59:40:
7c:72:c4:42:b9:50:95:e9:f4:a2:d0:2e:d8:92:87:
75:cd:3c:67:ec:fd:24:91:6d:24:52:b3:8d:03:16:
dd:96:b3:2e:d1:67:31:f0:54:c8:60:be:0d:c8:23:
40:ab:ca:53:77:ad:41:5f:93:14:96:04:1b:2b:8b:
cf:52:49:59:aa:6d:2a:a6:a5:85:31:40:49:c3:ee:
97:7a:db:42:75:46:a9:84:01:44:65:0e:15:6c:af:
77:97:d3:8d:ca:29:0d:7e:99:a8:1d:b2:47:4b:d6:
08:fa:fa:ae:db:f6:0b:f3:ad:b7:97:1a:8a:bb:ec:
f9:82:f7:71:bc:1f:bf:1a:3c:e3:44:9b:e2:0d:d2:
86:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E2:B4:D3:AA:5C:68:7A:39:CE:FD:A4:5E:BB:11:45:B8:76:FB:25
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8e:d9:60:63:a7:83:89:ae:67:b5:b9:db:cb:f5:ca:4c:e9:
2c:0f:b7:35:f9:1f:88:63:5e:78:1d:6d:14:3c:e7:bc:79:a5:
80:46:f0:5b:8f:10:15:31:e1:b7:69:00:d7:85:c2:3b:97:d9:
bf:7f:8c:dc:10:3c:17:14:e5:80:ae:8f:45:16:96:41:af:d5:
d9:03:7c:2a:8c:f9:4d:8d:d8:5a:2c:af:b8:87:6a:fc:f6:51:
75:5f:aa:61:64:f9:ca:1f:a1:9c:ba:7b:1d:2a:05:bf:97:7d:
a4:92:f9:38:0f:1e:4c:bd:26:c5:7a:0b:95:1a:f5:29:58:16:
8c:2c:8f:25:d3:13:ef:57:74:10:82:5d:5e:c5:51:c3:5f:ac:
15:45:15:ed:58:89:da:62:20:cf:3c:6c:88:a2:61:c1:93:47:
42:ff:37:3d:a9:7e:5c:38:ce:9b:c8:d9:74:6b:46:3f:88:fd:
fc:0b:5f:9c:d1:4e:fc:71:c0:85:46:64:08:29:72:c8:10:70:
5a:1b:96:22:86:a3:4b:3d:4f:cf:b4:f5:d7:20:20:de:e6:9e:
fd:52:71:14:34:b0:b0:44:ca:a9:c7:89:5b:23:ee:05:ca:f3:
0b:c6:96:7d:ce:3c:e7:6d:79:2e:6d:8b:26:61:27:9c:f1:c9:
58:0f:73:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:02:41 2025 by rpki-client