Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
File: lYs3Q2qJ-sosT35g-axNR6GZrWY.mft (raw, json)
Hash identifier: PiPgLWHNb9mTPfvgaevCHgl4KG1SWpedWYSwpCQ4vK8=
Subject key identifier: 11:42:E6:7F:90:43:A9:65:A7:45:79:82:67:AB:AC:B3:4B:07:74:ED
Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
Certificate issuer: /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Certificate serial: 01962B60B9FD94BA29DA4BB67B29800448FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
Manifest number: 14E6
Signing time: Sat 12 Apr 2025 19:01:21 +0000
Manifest this update: Sat 12 Apr 2025 19:01:21 +0000
Manifest next update: Sun 13 Apr 2025 19:01:21 +0000
Files and hashes: 1: lYs3Q2qJ-sosT35g-axNR6GZrWY.crl (hash: Qx1hLK4nl8ej55VPx+67ebGwKHpSuDIkMlJxWUkZqAc=)
2: uaazccLN6Mk4sx0EaEhEvn5C3x0.roa (hash: v+tP2jEaMonsS2eBuWt5qEl+U+sbi9qBetOBwIDVmAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:60:b9:fd:94:ba:29:da:4b:b6:7b:29:80:04:48:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Validity
Not Before: Apr 12 19:01:21 2025 GMT
Not After : Apr 13 19:01:21 2025 GMT
Subject: CN=1142e67f9043a965a745798267abacb34b0774ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:99:16:bf:84:31:cf:98:a7:f5:68:1e:12:
2f:02:57:77:30:3b:04:c2:f3:35:25:d2:13:96:51:
35:bd:b3:05:f4:49:ee:94:8b:0b:7e:3c:a3:d8:06:
39:6f:5e:7c:1a:32:de:96:ec:ed:4b:aa:04:47:18:
fa:bf:8f:06:ed:36:c3:33:ac:7b:84:a2:ac:b6:6b:
1f:79:49:13:77:cc:67:b3:96:8e:4a:9a:9e:3d:0b:
a9:c2:1a:e1:5e:52:77:a9:18:cf:aa:f3:af:fd:f4:
34:89:f4:60:91:6d:62:17:89:df:6e:0a:85:b6:ca:
d7:ef:fe:70:84:71:a6:83:fc:86:0a:00:b1:12:de:
97:a9:a9:ac:f9:15:32:a2:c0:32:19:5e:5e:60:b8:
ef:a1:19:3f:60:ad:5d:4e:49:72:5b:4d:e0:57:f0:
94:58:bd:5a:1c:0a:fc:44:59:43:77:8d:5d:96:9d:
80:09:b5:d3:68:a6:a7:ab:a9:48:30:63:9b:9e:ed:
1d:43:86:64:ae:80:cf:f1:6a:7f:1e:a9:f3:ce:9a:
de:05:0b:5a:81:0f:39:24:c2:07:70:66:57:1e:47:
92:68:20:b7:40:36:86:55:1e:58:9b:6c:5c:46:48:
60:8a:2c:df:93:e0:b8:0e:60:7b:da:e7:b1:75:99:
89:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:42:E6:7F:90:43:A9:65:A7:45:79:82:67:AB:AC:B3:4B:07:74:ED
X509v3 Authority Key Identifier:
keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c8:54:d9:fa:b9:a1:29:96:61:29:d9:e4:12:ce:26:08:d0:
3d:db:85:ae:c0:55:f2:37:92:50:f2:64:dd:36:93:0a:e8:47:
f0:ed:fb:23:2b:b5:32:1f:4d:d5:14:8d:40:0f:81:38:16:0c:
2e:fe:35:2a:17:74:eb:a6:40:7e:3a:d0:bd:57:3d:f9:90:45:
dc:15:55:a4:50:39:79:14:a1:de:da:ce:1b:c4:5c:15:bc:9f:
bf:c5:7f:9a:fb:94:e4:9d:65:5b:1b:5f:67:9d:4f:63:50:19:
72:c2:17:84:dc:cb:51:ba:db:a9:93:fe:37:0e:7d:10:e5:fb:
9c:0a:80:35:3f:59:df:68:93:c9:86:4c:22:2e:2d:04:eb:7c:
df:38:f5:d9:bb:f2:87:65:f0:be:28:01:70:86:f9:e2:65:4d:
1a:fa:e6:05:15:70:ce:c9:94:97:9d:46:c6:67:08:3a:f2:7e:
b6:03:73:f8:0f:e0:e8:5d:09:86:8d:c7:bc:eb:2b:ad:bd:4e:
ed:66:94:7b:36:e3:15:a2:1d:e8:91:25:82:f0:72:d4:08:d7:
e7:85:da:10:2e:c0:93:16:5c:bc:bb:a8:17:84:50:6d:10:8a:
a4:bc:23:ad:3e:a8:71:9d:f5:1b:84:7b:ad:64:7a:25:4e:8c:
7c:e3:be:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:49:29 2025 by rpki-client