Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
File: licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json)
Hash identifier: slPb41tckVqCziWuOGuZ3J0Mft1ACAzFJf/Lec7QyOo=
Subject key identifier: E3:B5:E0:80:0D:57:87:62:A1:D2:9D:17:1C:81:DD:B0:4F:F4:CB:87
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial: 01963BAEFE9CB7856D2621E9B89FC8166E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
Manifest number: 09A6
Signing time: Tue 15 Apr 2025 23:00:46 +0000
Manifest this update: Tue 15 Apr 2025 23:00:46 +0000
Manifest next update: Wed 16 Apr 2025 23:00:46 +0000
Files and hashes: 1: IaAYctjYC9OdNTPcnTixy2ccUzU.roa (hash: eOFbMC4GCXw4TW2u0+c7a73RmqtvjAxvsy3+jqBN21w=)
2: X6SMQ0jEGeZDJ_4uYPtUEXmYusc.roa (hash: FdAgr11itjQmO3uyq8UgNfN1pT9LErTuoVrKYdZ843k=)
3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: pah1/LRd2zJnffUgh1+VUHIu35P9z+XJDsR2sF7kJyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:ae:fe:9c:b7:85:6d:26:21:e9:b8:9f:c8:16:6e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Validity
Not Before: Apr 15 23:00:46 2025 GMT
Not After : Apr 16 23:00:46 2025 GMT
Subject: CN=e3b5e0800d578762a1d29d171c81ddb04ff4cb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:42:e3:0d:37:47:24:de:78:8d:2b:55:c9:
e2:06:44:56:cc:1f:0e:31:5a:2c:96:44:d2:9c:35:
76:ae:cb:05:19:d5:a5:71:95:11:d5:15:70:f9:fb:
17:e5:47:20:25:99:d6:58:b7:ff:31:45:b4:52:c0:
96:cf:05:29:25:06:83:60:49:a7:39:53:46:69:09:
84:08:36:cf:f6:c7:28:6a:9c:b6:7a:80:56:15:c4:
c7:b3:c6:2a:86:80:14:f6:5d:3b:59:46:92:8c:19:
b9:47:fb:3f:c7:cc:e7:08:84:03:1a:52:68:6a:97:
7e:b2:d1:ed:6f:71:c6:cc:d7:d1:a1:d5:eb:fc:b6:
17:2d:f2:a4:f1:a7:4a:0e:be:09:c8:d3:a9:42:27:
d7:e9:cf:3e:ef:f5:0e:4c:42:71:86:e6:50:a0:b6:
7e:2f:3d:71:57:65:a4:85:1c:15:e8:a2:10:36:3b:
6e:39:fe:18:aa:79:2b:9e:94:35:5c:45:ad:7f:89:
84:8b:79:51:db:54:be:c5:c3:1f:cf:ee:34:a4:4f:
94:2a:0e:d2:f7:05:b1:93:01:97:16:ab:34:54:1a:
cd:42:9a:4f:90:94:0e:a9:33:a9:12:2b:aa:d6:5d:
91:31:14:dd:37:77:3c:1f:c3:ec:ea:a3:5c:68:df:
32:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B5:E0:80:0D:57:87:62:A1:D2:9D:17:1C:81:DD:B0:4F:F4:CB:87
X509v3 Authority Key Identifier:
keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:72:74:1e:7e:b2:07:af:31:27:f0:78:48:1e:32:f5:43:05:
54:30:59:2e:f1:fc:65:3b:91:0c:0d:c5:ac:fb:c6:fa:0a:c7:
60:89:20:63:d6:27:b8:6b:30:fa:aa:52:36:8d:d5:d3:07:62:
67:98:1d:03:b6:ae:b7:e0:85:85:69:81:39:d0:9e:15:f5:ac:
30:b7:2a:19:93:64:42:6a:f0:ab:88:24:96:79:ce:14:c4:14:
11:89:20:56:41:87:b9:0b:41:a6:83:1c:a5:12:61:26:d4:f6:
b8:f3:17:16:fb:e7:3f:54:1c:5a:d1:90:cd:38:7f:d2:22:f4:
0b:49:ee:ce:a9:db:da:b4:26:7c:48:d5:94:42:f3:54:46:1d:
31:13:f2:bc:b0:9f:75:c0:1a:0f:3b:6e:22:96:eb:38:a1:2f:
d7:98:27:cb:44:54:9c:2d:cc:c3:61:af:66:b7:fb:9b:e1:b5:
35:fd:a2:0b:61:e1:35:c8:20:a8:b0:07:d6:ec:7f:7a:cc:6f:
82:d4:a4:17:be:ec:82:56:01:4a:08:15:6d:df:81:0d:e1:06:
69:92:f6:78:84:b0:ff:ce:7c:56:42:13:bc:8f:67:0d:43:ed:
f4:b6:fd:64:ec:c8:6e:7a:3e:0c:ed:57:7c:61:70:a9:fa:34:
a1:61:16:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:02:49 2025 by rpki-client