Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
File: lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft (raw, json)
Hash identifier: aTRpV8/WugfGHR+2c43oSZKaenEUtlsrUpVrPOR46f0=
Subject key identifier: 5B:40:D2:BD:89:E5:C8:F7:2F:E8:8B:FB:D4:14:05:13:2E:6A:FE:4A
Authority key identifier: 94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
Certificate issuer: /CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Certificate serial: 01962C73374ACE6B9386051E85E72F7EB29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
Manifest number: 128B
Signing time: Sun 13 Apr 2025 00:01:10 +0000
Manifest this update: Sun 13 Apr 2025 00:01:10 +0000
Manifest next update: Mon 14 Apr 2025 00:01:10 +0000
Files and hashes: 1: 3rgYqGqnZPklgITV-WBujJljFBU.roa (hash: Tp2azEsxKTsu2hz5GpPNvovvsk7VOiHcGA1gooaCoRs=)
2: lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl (hash: iZSky2m3JTkfrKuhTKpzzh2K5xzZpxsX6ovHPQjOGoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:73:37:4a:ce:6b:93:86:05:1e:85:e7:2f:7e:b2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Validity
Not Before: Apr 13 00:01:10 2025 GMT
Not After : Apr 14 00:01:10 2025 GMT
Subject: CN=5b40d2bd89e5c8f72fe88bfbd41405132e6afe4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:2f:98:c9:c9:b2:3f:55:7f:ff:b1:09:ab:
f1:da:eb:03:a3:90:98:d6:43:c1:f0:90:1b:65:b8:
09:9b:07:a4:2e:89:01:c5:66:78:d5:a5:78:79:e1:
3a:aa:60:37:33:fe:4b:6d:d7:09:eb:24:ff:af:07:
ed:0d:25:8e:11:c1:68:46:03:dd:1e:3c:85:7a:6e:
58:46:18:af:0a:04:cb:80:13:ef:79:c7:08:b6:00:
1f:c4:d6:98:68:3d:21:4c:5f:a4:49:d9:67:87:2e:
8f:44:10:f9:4e:b0:9c:39:28:fa:b5:e3:65:ef:dd:
ae:bf:5b:1f:56:54:f5:d5:af:58:eb:e9:84:93:19:
08:39:66:62:1e:2b:fa:70:cb:e7:8c:45:e0:2e:5f:
d6:96:2d:fb:f2:92:e7:45:38:3a:17:ce:a6:d3:42:
9b:02:84:36:95:a7:13:c8:61:00:15:a6:f0:3a:7b:
4c:86:2e:51:7a:b8:c6:7c:42:ec:1e:48:cf:bc:43:
69:74:5f:18:ff:12:78:2e:34:dd:28:cb:d4:a8:46:
56:92:be:54:3d:bd:84:5f:8d:3d:28:05:a8:37:f5:
ff:85:cb:0c:fa:1e:1c:44:34:0b:29:31:84:4a:50:
bb:f3:c7:5f:5f:c8:f0:c4:65:a4:7f:40:fa:b7:2d:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:40:D2:BD:89:E5:C8:F7:2F:E8:8B:FB:D4:14:05:13:2E:6A:FE:4A
X509v3 Authority Key Identifier:
keyid:94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f7:8b:b0:ac:29:51:f6:ee:8c:e4:21:db:54:35:b1:5e:32:
98:9d:65:38:70:81:02:82:f4:e9:16:b3:3a:75:0a:30:22:9b:
d9:d3:fe:9b:5b:04:d0:b9:0b:a4:23:68:39:05:55:d3:35:0b:
de:af:0f:3a:95:77:f6:b0:95:79:aa:a3:21:d0:5e:5d:a0:23:
12:26:be:9a:74:75:3c:8f:89:1c:9f:c0:89:a8:95:3e:be:b3:
71:89:86:3b:86:df:f4:3c:0f:d5:a9:fe:a5:c5:50:28:72:f0:
0b:69:d8:ed:63:94:b8:ad:72:ce:c8:83:98:69:73:96:0a:71:
d2:02:b8:84:f6:7b:7c:62:a8:14:9d:90:4e:d9:73:4d:ac:f0:
b3:58:bc:26:89:e2:53:64:ab:b3:a4:be:ea:56:00:0c:1a:24:
54:a0:a1:ca:2d:74:a2:4c:75:09:15:89:1c:5f:f6:3c:b6:cb:
44:ac:af:ca:c3:43:28:9a:79:5e:e6:a0:35:b9:b5:d2:05:1d:
be:a2:ba:cf:39:f0:95:a3:65:d5:d7:27:b8:6b:dc:44:d6:51:
81:43:67:3f:fc:47:cc:75:7a:52:48:1d:9c:ae:73:21:47:b9:
02:7d:3c:6d:3d:68:50:05:66:5b:34:cb:2a:20:d7:3f:c0:96:
e6:70:dc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:36:13 2025 by rpki-client