Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
File: l9nve9MDJN7fcLrOS72ldgwyaxo.mft (raw, json)
Hash identifier: VHKqGKVIYZetfDSvnVZWUdwVYLiYZvgOE9wLbdVxoFk=
Subject key identifier: 39:AD:C4:D1:C6:CC:7E:C1:69:36:3F:A7:7A:41:3E:06:53:D0:10:9D
Authority key identifier: 97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
Certificate issuer: /CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Certificate serial: 01958BF238589294BE48C2D10734C71B7E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
Manifest number: 0D5D
Signing time: Wed 12 Mar 2025 20:01:01 +0000
Manifest this update: Wed 12 Mar 2025 20:01:01 +0000
Manifest next update: Thu 13 Mar 2025 20:01:01 +0000
Files and hashes: 1: N0s8xKfa_bF09tlRJvpRIiwnl5w.roa (hash: 90x2GkpRoKN6DUPIyJuUzKhNvSMsOvRGP9u2xtqB9lE=)
2: l9nve9MDJN7fcLrOS72ldgwyaxo.crl (hash: A+sWn17pTIJpZ8tfWHoN8G30F4AomiOWyDi66F8dSeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:38:58:92:94:be:48:c2:d1:07:34:c7:1b:7e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Validity
Not Before: Mar 12 20:01:01 2025 GMT
Not After : Mar 13 20:01:01 2025 GMT
Subject: CN=39adc4d1c6cc7ec169363fa77a413e0653d0109d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:78:35:00:86:be:4b:1b:5a:54:4b:65:96:
36:0d:e8:8d:99:9f:78:9c:de:f9:31:60:0f:a4:43:
68:b3:3f:55:90:10:62:4c:38:90:db:78:02:38:47:
98:85:78:a0:69:5c:7e:b2:21:85:c5:40:fa:8c:87:
cf:13:e5:84:3d:e1:6c:7e:54:5d:c9:94:d7:c3:ab:
51:0a:13:cc:b8:6f:d9:4e:7d:15:3f:a0:40:0e:56:
4f:5c:89:8a:1a:f2:fa:1b:a3:ac:b6:29:34:6a:a4:
94:3e:ef:ed:11:4b:38:5a:23:38:73:2d:d4:0c:ff:
3b:d0:67:68:fe:ff:d4:fe:77:d3:06:98:92:fb:f0:
5c:ad:ff:81:1e:b5:ea:84:04:85:39:fb:e9:d0:71:
c3:6f:a5:68:16:ed:59:24:c5:3f:91:9e:a2:9c:c7:
96:a5:c5:8a:a3:ca:36:ca:27:51:23:50:a9:6d:55:
db:fe:d4:a6:e1:3b:ab:ff:d7:1d:ac:1d:40:15:4b:
a7:2e:29:94:6c:07:17:d6:a4:a9:56:a3:82:e3:3a:
b6:21:59:73:bb:a6:73:a3:32:3d:d2:b4:b3:30:39:
36:e0:36:29:40:42:8d:24:0b:dc:a8:96:a3:d4:ac:
b4:e9:a6:c4:7a:2d:7f:99:8f:85:ae:09:b9:89:37:
58:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AD:C4:D1:C6:CC:7E:C1:69:36:3F:A7:7A:41:3E:06:53:D0:10:9D
X509v3 Authority Key Identifier:
keyid:97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:df:d7:17:3a:63:7a:30:19:d6:86:5e:ab:bf:fa:a5:de:97:
69:c4:48:9e:87:17:66:59:d0:7d:16:00:68:f5:f0:4c:d8:ea:
98:8d:ce:e1:de:39:89:4c:0d:df:01:50:bc:88:88:2f:26:f2:
2e:bc:f2:4b:a0:4f:e1:dc:bf:13:00:a2:b8:f3:c0:36:0b:7a:
57:3e:60:b3:c0:50:cc:91:90:5f:ed:21:20:99:e7:4a:d3:15:
52:8f:56:4a:0a:38:6e:75:df:13:eb:7a:b9:f4:93:a0:86:0b:
fd:ad:63:fa:00:f2:4c:52:b9:1c:67:67:93:02:62:05:62:b9:
5f:28:ef:2c:e2:7b:96:d0:a3:b5:fc:ec:60:21:58:37:f8:56:
a0:6e:fa:66:07:e2:bc:02:a7:18:2a:6b:a2:49:12:6a:06:38:
4d:00:74:0e:bf:5a:04:15:cc:73:3d:66:18:8e:06:ad:61:87:
77:97:68:78:6f:36:ab:95:c4:8c:33:33:b3:59:bc:80:36:2b:
89:ff:9a:ac:23:02:5f:5b:11:8f:6a:9c:ae:c6:fb:c1:41:c3:
0a:06:7f:02:19:75:28:7d:59:b8:cc:e1:2a:1e:f5:8b:42:17:
83:df:81:45:28:1d:da:16:c1:33:0c:fd:eb:67:78:9f:fc:12:
f5:f9:02:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:06 2025 by rpki-client