
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
File: l5WGA1q-I1acITXjINvRolW4QDQ.mft (raw, json)
Hash identifier: Lo8lUDORj4AY9Z/UQBwOJWeeeaiYu8ohMo60sOl9NCQ=
Subject key identifier: 47:78:84:FD:AD:22:77:2A:5B:AF:48:80:B3:1E:FD:4E:C8:B4:C5:E3
Authority key identifier: 97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34
Certificate issuer: /CN=979586035abe23569c2135e320dbd1a255b84034
Certificate serial: 01964FDAB4CBE52E9F8B0FCFCAF530CB6D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
Manifest number: 0EF6
Signing time: Sat 19 Apr 2025 21:00:55 +0000
Manifest this update: Sat 19 Apr 2025 21:00:55 +0000
Manifest next update: Sun 20 Apr 2025 21:00:55 +0000
Files and hashes: 1: B8Ry5W4Nd7mGEXHvK2ID6RlaYKg.roa (hash: bjPJdt8d8Rm7Nt6tD0StaYZNVd8a8Vg9VG3eQIsicu8=)
2: l5WGA1q-I1acITXjINvRolW4QDQ.crl (hash: +t0FyM4Z8ccX8el3Ixl7J8dvvDFbv0ZgyGiOSWTZaLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:b4:cb:e5:2e:9f:8b:0f:cf:ca:f5:30:cb:6d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979586035abe23569c2135e320dbd1a255b84034
Validity
Not Before: Apr 19 21:00:55 2025 GMT
Not After : Apr 20 21:00:55 2025 GMT
Subject: CN=477884fdad22772a5baf4880b31efd4ec8b4c5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:80:42:18:94:0b:df:95:51:d9:60:1d:d8:
32:e3:5a:63:f6:f7:bf:31:af:f1:5e:d7:d2:d8:12:
6f:9d:ab:e0:fe:fc:a6:d6:7c:f0:35:33:c1:85:44:
5a:0c:b7:ae:ea:68:99:c9:bb:f5:84:51:12:76:f6:
fa:77:53:e5:24:a3:bc:71:32:9b:4b:71:7d:0f:38:
81:5e:3f:51:68:7e:0c:a0:53:93:66:f5:3b:98:63:
e3:8a:b1:14:4f:a9:99:f8:a0:cb:b0:fa:14:72:7f:
b5:a0:52:e1:1d:f5:22:10:6f:ed:54:43:0d:82:6a:
62:85:3e:32:1f:5b:f3:74:aa:32:4c:b7:b8:ac:a1:
31:27:9c:d8:27:87:9a:62:02:96:80:c9:1c:27:83:
ba:58:2c:fd:da:15:26:86:87:16:78:df:9f:42:67:
78:56:3c:0e:82:da:11:0a:a8:ca:2e:27:09:76:6d:
32:03:c9:89:98:e5:c8:75:3d:95:8c:e4:5f:b1:6d:
19:8d:df:5e:b2:c3:8a:6d:46:cd:77:9e:be:76:d4:
92:bd:eb:69:0f:e1:e4:05:98:00:36:91:b0:7a:f3:
42:9e:6d:0d:45:01:5c:79:67:95:96:b7:3f:bc:42:
3c:2d:40:5e:e3:c1:df:61:1f:ac:53:da:70:46:bb:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:78:84:FD:AD:22:77:2A:5B:AF:48:80:B3:1E:FD:4E:C8:B4:C5:E3
X509v3 Authority Key Identifier:
keyid:97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e9:ff:18:3f:11:92:a7:c5:5c:7c:2b:fb:d1:18:ce:1e:96:
e9:7e:4d:1b:9a:6f:6d:3c:54:38:4f:16:0a:31:cd:53:0b:bb:
6b:5b:b7:17:45:4d:cf:d0:e9:0e:28:dd:bb:e2:ff:ae:94:7b:
39:21:b3:5e:f9:ba:db:cf:16:c6:ee:94:80:33:b7:4b:44:23:
d4:a6:f5:f0:d6:d7:c8:01:9b:8c:03:df:e0:ce:e4:45:ff:97:
52:32:8a:6f:dd:dd:58:72:12:9f:50:d7:64:4e:19:ec:b5:fc:
69:a1:0d:b0:9e:78:cf:72:d3:0a:b2:ab:1c:cd:be:89:fa:f0:
1a:0a:99:60:3a:91:10:17:7e:0f:06:4d:0f:74:dc:62:29:9c:
0f:5c:37:9f:f7:b5:7a:24:5b:07:43:a1:55:0c:64:d3:d8:a0:
c0:c7:b3:72:33:d3:f3:b9:42:c3:21:5a:e0:1c:4c:20:e1:a8:
2b:64:a8:b1:96:60:bd:58:33:46:94:0d:ce:fa:f4:e7:c9:87:
b0:58:27:b5:e5:2c:0b:48:8d:72:b9:0a:3b:d7:e5:af:b3:77:
32:c7:8e:ac:47:c8:36:f0:a7:2c:32:34:37:2f:8f:9e:c9:22:
06:a1:62:11:8f:be:2f:8a:f9:55:60:34:eb:29:fd:16:06:2b:
61:04:f0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:19:02 2025 by rpki-client