Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json)
Hash identifier: TlLqGVomgF9xv5XSQo1NsbCvdyALB9hg9ArMYd02yn8=
Subject key identifier: 99:6A:5E:F6:B7:6F:CB:F2:34:03:5A:2E:88:19:5E:27:B3:FC:02:7F
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 019654C9D0C7D5E2EF2E55F3ECC9FC3B6FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 20:00:34 +0000
Manifest this update: Sun 20 Apr 2025 20:00:34 +0000
Manifest next update: Mon 21 Apr 2025 20:00:34 +0000
Files and hashes: 1: be8vZHIQ1O-yMUrEnm-Rt647sVc.roa (hash: pvBuP6PztryvJybpVkIz6/2PBJVRSL6jUXjVeSb3fes=)
2: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: I8DF6KrEuBX0KbvNXssW8HyOQv0sWJsObmywwv6wF1A=)
3: vrEOBF9ldIypmhQM7-y0wx8mvB4.roa (hash: jx76OmojI/1aknSM7oCZVvVpchbSHerzNk3p0la4Ogw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:d0:c7:d5:e2:ef:2e:55:f3:ec:c9:fc:3b:6f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Apr 20 20:00:34 2025 GMT
Not After : Apr 21 20:00:34 2025 GMT
Subject: CN=996a5ef6b76fcbf234035a2e88195e27b3fc027f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ec:a8:5e:4b:c3:0d:1d:06:59:c9:d6:fc:ed:
20:82:b2:bd:8e:f1:c5:d7:69:54:a9:2f:0e:f6:d8:
c3:26:55:9e:bc:7e:06:a0:72:92:f7:df:5c:4e:e9:
a1:4a:b5:10:3a:be:ea:31:6e:74:8b:bd:1c:45:52:
c7:f5:cd:54:20:36:ca:67:40:f4:70:8f:a0:a1:94:
29:2d:3c:ee:24:85:5f:03:10:8d:08:0d:16:c2:61:
d0:13:6c:ce:f4:c8:3d:b4:f5:1e:ef:e3:8d:94:7e:
fa:93:a8:79:bb:a5:2d:d2:a7:12:ba:7e:5a:45:c7:
1e:60:ab:c2:43:41:2f:dd:23:68:0c:3a:6c:f0:3f:
d4:56:6c:df:4d:37:84:0c:f1:a5:e1:e2:c2:32:c0:
2b:b6:3a:70:0b:1a:a7:75:b8:4d:5c:01:1d:69:ac:
ec:65:77:39:d3:aa:dd:ae:77:82:53:18:a3:8b:e9:
bf:6c:bc:3a:20:60:e8:ca:9f:5f:c1:fd:58:ff:96:
4a:ca:bb:ad:e1:03:0f:05:9a:bc:5e:f8:33:04:85:
8f:47:58:0c:ff:55:5c:4b:63:f2:54:6e:9f:cf:0b:
47:23:f5:0b:c7:11:64:3a:db:ea:67:14:3d:1c:ed:
0c:79:a2:40:77:1f:7a:ce:ca:92:d3:e4:20:e7:87:
ae:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6A:5E:F6:B7:6F:CB:F2:34:03:5A:2E:88:19:5E:27:B3:FC:02:7F
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4e:91:4f:90:c6:be:12:93:fc:67:1c:cc:2b:e1:88:68:3f:
94:cc:bc:ba:a3:ea:aa:5a:43:97:2f:ce:63:38:fe:03:ba:87:
30:ba:fe:b3:4c:30:6e:71:01:6e:a4:c8:0f:19:17:ed:4b:97:
94:27:2f:10:b9:22:9f:9a:2a:1d:f0:dd:42:4f:3f:04:58:31:
c5:15:29:26:cd:59:67:e0:9d:34:52:15:c7:b4:56:d2:e6:12:
fa:22:41:c6:84:3c:c3:a4:05:36:3c:51:b2:e4:a8:7a:3e:97:
d6:96:2c:d6:ec:c0:37:a7:7d:55:fd:43:81:44:15:9d:0a:26:
76:5b:f2:67:7c:e5:f6:67:d7:5f:17:3d:d8:38:b1:40:2d:d8:
dc:0e:90:67:2f:9c:ef:57:b8:4b:d8:72:da:e7:6f:10:aa:d6:
95:d9:e1:ff:e2:23:ae:02:08:c4:c3:72:c5:08:10:e1:3a:f4:
64:2a:c4:61:8b:4c:55:e2:17:70:4a:6d:bd:a7:13:2c:96:16:
e7:d2:08:5a:d0:73:4a:f1:1a:50:4e:0b:4a:86:81:37:5d:12:
ab:49:be:c3:d4:fa:10:56:5f:ce:dc:6c:c1:5d:45:02:90:60:
16:f5:a9:ab:b0:0f:28:88:c3:5f:c5:1c:19:c3:a2:e9:d8:9d:
ca:6e:d9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:24:07 2025 by rpki-client