Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
File: llRbrTliWupnkD-Bg_n7uurGyI0.mft (raw, json)
Hash identifier: HsMepr7+khbiOTaKmk1i8TxSAlJtXet91H4Nmd+Qz+c=
Subject key identifier: 78:21:7C:8F:29:DD:74:EC:6D:5D:22:EC:F5:0C:69:6C:A3:B6:72:BF
Authority key identifier: 96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
Certificate issuer: /CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Certificate serial: 0196458D886EF110DE58D9CB0B0EFDF24311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
Manifest number: 14F8
Signing time: Thu 17 Apr 2025 21:00:25 +0000
Manifest this update: Thu 17 Apr 2025 21:00:25 +0000
Manifest next update: Fri 18 Apr 2025 21:00:25 +0000
Files and hashes: 1: llRbrTliWupnkD-Bg_n7uurGyI0.crl (hash: VEpMKDdb4WBU/VZ1LSewjxiaF0J62WhLaNKnG6oxhO4=)
2: xB2QvC1lnSEbHZpo5CzUz22HzVs.roa (hash: iOoP9/OWnHogDFUgN5EWWw0h5813UdNcLLWGJLi6Jv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:88:6e:f1:10:de:58:d9:cb:0b:0e:fd:f2:43:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Validity
Not Before: Apr 17 21:00:25 2025 GMT
Not After : Apr 18 21:00:25 2025 GMT
Subject: CN=78217c8f29dd74ec6d5d22ecf50c696ca3b672bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:8b:28:b2:f4:5b:0f:9f:94:93:f2:c7:d4:
55:ea:ba:e5:f3:84:9f:ce:7b:d2:e8:54:2a:f1:e9:
53:76:e8:2f:07:9d:fd:23:91:cb:db:39:fa:8b:94:
06:62:5c:de:a5:17:74:9a:d7:bc:63:ae:b4:94:68:
2a:c8:72:64:d4:13:dd:54:34:73:5c:a1:02:8b:5d:
45:78:77:a8:5f:41:51:89:35:1b:d3:7c:7e:92:11:
28:28:ca:1f:1c:53:3a:5c:ac:1c:98:82:73:cd:ff:
4d:6d:2d:6e:76:e5:70:50:79:38:91:b2:94:29:84:
fd:83:69:3b:f8:a9:22:0b:8a:61:8b:27:57:a0:fa:
58:a7:95:3f:27:4e:a4:72:44:de:d3:76:17:c5:fa:
cc:47:94:83:be:bb:21:cd:77:6b:56:36:a8:43:f5:
69:5d:b2:c7:88:a9:12:39:6f:de:4d:5a:85:08:12:
69:13:28:7f:6d:43:63:b6:5f:7e:69:cc:f0:80:36:
04:31:07:27:9c:3a:29:02:58:1a:51:07:17:bc:46:
6a:ec:5c:d4:fc:98:0a:e8:94:1a:4c:2b:a5:3e:e0:
09:9d:64:b5:35:81:9c:1d:b6:ca:7c:6b:70:fe:03:
a8:57:d0:90:ef:c9:e4:e7:76:79:fc:b0:73:d7:d9:
8d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:21:7C:8F:29:DD:74:EC:6D:5D:22:EC:F5:0C:69:6C:A3:B6:72:BF
X509v3 Authority Key Identifier:
keyid:96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:16:e5:78:33:9b:c8:73:a0:e3:15:59:29:51:b7:8e:bb:c5:
aa:7c:c3:05:d4:3a:0e:cd:b2:cb:82:b7:51:0d:78:d8:e9:2e:
50:ea:2f:26:04:7a:fd:b8:1a:0d:80:86:2a:b8:2f:59:e1:d9:
30:e9:fb:3d:5d:35:fa:08:85:46:00:ef:49:5c:95:cc:b2:e0:
0d:34:1b:da:56:bd:19:45:df:a7:8f:a8:8e:aa:aa:e0:42:8e:
1c:3b:95:fa:0c:e9:d1:89:a4:10:a4:15:bf:f1:e6:55:7a:0e:
48:f5:f2:33:3b:5a:f8:94:c5:f5:a6:89:5a:0a:d2:82:e2:59:
ee:19:74:72:4e:bb:90:b7:07:2f:a1:7d:17:01:92:1f:f7:bc:
7b:a8:b5:a8:d8:df:e1:e7:6f:a0:22:39:65:e9:71:24:7b:97:
e7:b7:76:b9:57:c4:69:0a:de:9c:c0:32:fb:43:60:32:d8:c5:
a6:55:59:07:eb:a2:ff:ec:41:7e:b8:6a:0e:b7:8a:23:fd:83:
ae:15:8d:26:7c:ae:15:b2:38:ea:2d:2c:45:52:34:f2:33:d1:
07:f6:04:41:2f:e1:dd:7d:88:1a:bd:c0:c2:0c:4e:ff:53:81:
8d:23:77:4a:27:e5:c4:6d:b8:aa:81:ff:57:ee:29:4e:ea:24:
bd:ca:e1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:46:58 2025 by rpki-client