Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: kZjY0zlic0qOWsvBCe47mq/6IiO2FEEXL0rTJ5/jC0Q=
Subject key identifier: 1B:5B:6B:66:77:23:EC:67:6A:C0:59:FD:2B:BE:62:F5:A1:BA:F0:11
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 01963BE59FAB3C95716C83F7995E51546693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 14F1
Signing time: Wed 16 Apr 2025 00:00:26 +0000
Manifest this update: Wed 16 Apr 2025 00:00:26 +0000
Manifest next update: Thu 17 Apr 2025 00:00:26 +0000
Files and hashes: 1: e5DeESZZoV9ugwD2DDetvmmqaNQ.roa (hash: oBItgFG7VmwghbXnqb4YDSc7wHHSkFpawBFKEQ4ggoU=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: 1LGB+nXTuqExHJj4vBrgBhCjn2A5Rw2ZqC/BosYf7OQ=)
3: pusRxy9QftUa2YYJz6wip986r9U.roa (hash: RNMs7mYaUX06i+bmjYIm1r/crAvFi8r8tzeB1u4p4Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:e5:9f:ab:3c:95:71:6c:83:f7:99:5e:51:54:66:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Apr 16 00:00:26 2025 GMT
Not After : Apr 17 00:00:26 2025 GMT
Subject: CN=1b5b6b667723ec676ac059fd2bbe62f5a1baf011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:5a:1d:6a:54:9f:48:ac:41:51:a1:25:5b:
9b:1d:a9:23:1c:f3:69:be:33:c3:ed:0b:df:98:74:
38:28:dc:54:27:72:ff:f2:e6:3f:2d:28:b0:7e:52:
3f:ff:7d:a7:a2:99:4f:fe:b5:f2:92:81:ef:b0:ba:
48:b3:b5:9b:23:f8:1f:be:a7:09:2c:db:89:47:b5:
6a:c9:f6:e1:bd:8d:e5:77:8b:11:f1:57:91:16:4c:
f0:39:26:6b:f7:df:71:51:8d:c9:bf:f6:d9:05:46:
b4:14:24:d5:7a:1c:7e:ac:31:4c:7c:b8:26:5a:bd:
50:d9:c8:ca:6b:a6:ec:f0:d2:4b:5f:7f:54:46:eb:
35:43:73:e7:eb:92:0c:55:8b:a3:29:69:23:70:c6:
8a:99:d7:a2:2c:45:88:46:ae:2e:0a:3e:31:25:5e:
f1:f9:97:9c:ac:23:af:34:3b:71:51:aa:b0:44:9d:
1c:d1:e8:8b:49:7b:07:72:f0:a7:ed:91:62:15:e3:
b4:71:4b:fd:bc:c9:fe:b5:ce:fe:e9:b6:ba:76:1f:
4e:72:16:34:53:23:90:61:91:ac:08:09:2b:c2:ee:
e6:25:d8:d3:6a:ba:71:0e:70:76:f1:25:2c:54:0d:
a0:4d:f9:a0:35:f4:93:fe:60:5a:e3:a5:06:ca:76:
62:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5B:6B:66:77:23:EC:67:6A:C0:59:FD:2B:BE:62:F5:A1:BA:F0:11
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:3c:fc:3e:bf:6b:eb:1a:42:6f:cf:e4:a8:e8:b0:4a:43:ea:
18:66:24:7a:43:c4:84:ce:d2:0c:0c:cc:66:6e:22:c4:e9:71:
28:4b:2b:ac:c2:80:bc:d5:ad:47:7c:a7:9c:65:e2:cd:cb:89:
87:aa:20:cc:6f:48:68:d7:58:26:5d:5b:5a:54:27:c0:92:19:
dc:10:16:4e:69:58:c2:6e:43:85:9b:7b:be:c5:14:bc:aa:9b:
ed:f2:35:44:37:85:c4:52:b3:f6:e3:98:f7:2e:e4:2b:a8:87:
94:b5:4f:42:c9:95:01:c4:d4:8f:0c:a2:83:78:bc:ee:d9:dc:
93:60:93:90:df:cc:33:ac:fc:51:3f:08:0c:55:a3:77:5b:af:
0f:22:43:b2:b3:bc:c3:b9:7a:25:34:b7:a7:ba:9b:cd:27:0a:
0b:28:ab:b6:d7:17:73:fc:20:cd:5a:20:a4:0b:57:67:2a:d9:
63:dd:df:fa:70:67:d9:17:83:30:c1:a9:cc:2b:28:4e:54:2f:
6f:30:8a:a7:3f:27:6f:5e:86:e7:62:60:e9:df:07:17:e0:ed:
d3:dc:08:7b:53:aa:50:a7:b5:d8:01:11:e9:75:3d:d9:73:bc:
82:e4:b5:a7:04:7c:3c:89:0a:7e:13:f3:1f:82:95:72:55:43:
6a:83:05:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:26:04 2025 by rpki-client