Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: RYNWmImjE8XcAwXOhN+sGRGIoFz7ANIBCfVzRAbYOAE=
Subject key identifier: 6F:EA:36:E6:61:28:B6:EC:F3:3F:5D:8F:41:5E:F5:EE:5D:B2:50:0E
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 0196428C87C98147033B105D859FC2974F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 12B5
Signing time: Thu 17 Apr 2025 07:00:28 +0000
Manifest this update: Thu 17 Apr 2025 07:00:28 +0000
Manifest next update: Fri 18 Apr 2025 07:00:28 +0000
Files and hashes: 1: GmVe1_dUtE2thDPnKTTodQa1WTk.roa (hash: +YHOaXQXUcLXYGboOZLBoqiMUEPBTb2ggQGekMwXWOE=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: JNc0JJsGajiAfl0jT5qtSAqLVKiqkQDb15PaC2LPobw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:8c:87:c9:81:47:03:3b:10:5d:85:9f:c2:97:4f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Apr 17 07:00:28 2025 GMT
Not After : Apr 18 07:00:28 2025 GMT
Subject: CN=6fea36e66128b6ecf33f5d8f415ef5ee5db2500e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:5c:9d:99:00:48:b8:6e:88:fa:b6:c2:b0:
13:51:a9:9d:7b:be:d2:7b:be:bf:5c:d9:a3:cc:31:
c9:02:0f:15:30:59:67:c7:08:38:38:bc:3c:39:32:
7e:e3:1d:b1:10:f6:c3:3a:29:36:16:ff:b3:97:e8:
bc:4f:23:0c:bc:6b:f6:bf:7d:bc:32:98:73:78:ca:
aa:7e:86:36:37:c4:ab:60:03:cd:2b:60:f7:88:63:
a5:2e:d8:3e:8d:46:92:e7:fc:94:93:53:49:11:0f:
36:3e:f2:34:a6:e8:0d:0b:28:2b:65:3b:a4:4e:df:
e6:35:22:ae:ce:70:77:eb:23:30:4d:08:bc:14:eb:
5f:ee:4c:41:4c:e1:4f:4c:51:9d:89:3a:41:38:d8:
e0:ff:76:7a:2f:dc:8e:d3:60:1f:a5:a2:20:c3:08:
e3:a2:1f:b2:30:c1:99:b3:4e:2b:62:a5:60:3f:8d:
80:1b:1d:96:97:e7:27:7c:f3:57:8b:48:52:0a:e5:
06:95:5c:99:cc:3b:84:4c:2f:5e:e9:11:67:c6:11:
ae:33:56:0d:93:ec:c4:8f:c3:fe:df:ae:2d:af:6a:
55:8d:0e:d8:74:6b:68:46:11:97:9d:9e:59:3d:e2:
4a:9d:46:14:89:b8:c7:89:ca:81:fa:13:84:c9:a0:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EA:36:E6:61:28:B6:EC:F3:3F:5D:8F:41:5E:F5:EE:5D:B2:50:0E
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8c:0e:37:58:c2:19:8a:cf:38:ea:b7:f2:5f:1b:9e:6b:ba:
c4:b5:03:60:c7:6f:be:0b:f1:41:05:4d:ad:73:1a:a2:b6:81:
94:d4:bb:7c:cc:49:17:1d:5c:be:95:b7:c1:24:b3:7b:29:73:
b2:62:eb:d3:63:36:8a:01:ca:07:79:c5:e6:14:ea:94:52:eb:
c4:b7:81:1d:b2:1d:79:46:7e:dc:e9:bf:fe:ab:90:2a:a4:a0:
11:9b:49:84:08:bc:87:a1:4d:c7:04:ca:c4:36:85:4c:3a:2b:
ff:09:91:c8:c7:ed:d6:df:e5:da:aa:1f:66:2b:f2:9b:3c:05:
72:7b:d4:d7:3c:55:57:22:94:b4:d6:a0:60:3c:97:ac:ef:e2:
47:14:fb:e0:3e:27:94:fd:bb:66:ac:34:09:ef:1b:41:70:0e:
41:1a:3f:e2:54:68:4d:5e:ba:36:c2:dd:48:5e:f8:23:ee:03:
9d:bb:7f:64:21:98:32:c7:79:51:49:35:7b:9c:87:50:c0:47:
eb:28:6c:a6:36:42:23:3e:20:1f:0c:52:32:9f:a1:95:5c:da:
97:1c:11:51:3b:fc:26:87:5e:a6:72:aa:4d:84:c9:d5:b0:e1:
da:74:7b:1f:51:5d:9d:53:68:cd:ae:b5:b6:1a:6b:45:d0:35:
e3:71:c0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:35:53 2025 by rpki-client