Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
File: l9nve9MDJN7fcLrOS72ldgwyaxo.mft (raw, json)
Hash identifier: qmkjdVBfzzIf5k06SeEi1aHpyd+Q4RYTc5Y3tTls6PI=
Subject key identifier: EB:50:8A:C9:B7:73:0E:1A:BC:89:95:C0:2F:1E:39:65:97:65:A2:A1
Authority key identifier: 97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
Certificate issuer: /CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Certificate serial: 019656B7F460539A176E40AACFB57D985631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
Manifest number: 0DC6
Signing time: Mon 21 Apr 2025 05:00:18 +0000
Manifest this update: Mon 21 Apr 2025 05:00:18 +0000
Manifest next update: Tue 22 Apr 2025 05:00:18 +0000
Files and hashes: 1: N0s8xKfa_bF09tlRJvpRIiwnl5w.roa (hash: 90x2GkpRoKN6DUPIyJuUzKhNvSMsOvRGP9u2xtqB9lE=)
2: l9nve9MDJN7fcLrOS72ldgwyaxo.crl (hash: 4A0lT3paT0BERKA1n4tMXy3cmCzTCiE2oS7fs88CF9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b7:f4:60:53:9a:17:6e:40:aa:cf:b5:7d:98:56:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Validity
Not Before: Apr 21 05:00:18 2025 GMT
Not After : Apr 22 05:00:18 2025 GMT
Subject: CN=eb508ac9b7730e1abc8995c02f1e39659765a2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fc:9a:9f:b0:93:b0:b5:3f:b0:bc:89:fd:d1:
a5:f7:bd:41:8d:35:fc:c4:63:cc:a2:c4:09:ca:22:
bf:bb:7c:3f:fc:da:22:eb:18:1b:7c:7f:d6:c3:50:
9a:20:b0:61:ca:ee:d2:17:60:6a:8e:af:13:8c:cf:
01:e4:6d:bc:68:71:36:68:70:45:aa:f0:42:75:d6:
b9:bb:f7:d6:1f:db:0b:d0:dd:e9:41:ab:24:0a:64:
c8:7b:f0:2a:1d:29:00:01:63:06:16:4b:15:d6:08:
bf:f1:03:05:b2:a5:02:99:d7:01:c9:a6:5d:18:cb:
ee:02:d9:20:83:32:e4:ae:e9:22:fc:3e:96:6f:d2:
a9:98:fb:f5:fc:ce:7c:c8:5f:ae:45:63:8c:5e:03:
d8:c9:28:5a:09:82:4a:4c:99:df:2b:78:55:4b:a1:
38:1c:5c:e7:ba:e6:b0:bb:b2:6c:e4:97:bb:f3:25:
37:26:fe:dd:f9:77:32:9a:b2:4d:d8:c8:bc:0c:f8:
cf:56:e0:ea:56:bb:f1:df:9f:e8:dd:fd:06:65:da:
e1:9a:12:2f:10:e2:4b:38:4d:df:c4:9a:26:79:2c:
4c:f1:d9:3b:e1:6f:90:68:3b:5e:a0:da:a6:7f:99:
1c:ba:16:e4:1d:4a:ac:75:ca:f0:56:3c:3d:ae:f9:
24:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:50:8A:C9:B7:73:0E:1A:BC:89:95:C0:2F:1E:39:65:97:65:A2:A1
X509v3 Authority Key Identifier:
keyid:97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:96:eb:32:ea:07:f8:57:86:a5:f9:ce:ab:f5:35:c9:e2:97:
ff:40:1d:1b:7f:d8:16:82:41:a7:2a:b6:98:66:78:e0:a8:91:
0e:2d:39:74:84:3b:54:f2:17:f8:65:e0:69:61:3e:4c:ef:f7:
08:bb:8f:34:c9:48:63:9c:10:67:e5:19:4f:ec:5c:7a:38:36:
7b:52:39:a6:69:e6:67:5a:ac:dc:c7:8e:df:85:bf:29:da:9a:
08:f4:10:f9:f9:de:ea:57:8c:a1:57:57:9e:c0:b7:a6:fb:23:
4f:3c:eb:3a:c6:7c:70:4a:f0:3b:97:9d:16:3c:4b:7d:31:af:
6f:46:0a:91:f3:5f:39:5f:6f:64:be:9b:ac:a4:b2:7a:ee:80:
47:db:3a:20:ed:ba:c4:03:5b:02:bf:32:9b:26:6f:d8:c6:3b:
06:1d:a5:db:54:8e:d8:6c:28:93:66:d9:b3:3b:b8:60:b3:94:
a1:6a:06:30:ea:62:c9:c8:78:32:57:b7:cf:ac:49:80:b9:0c:
1c:49:4e:00:81:00:59:32:37:41:b9:33:97:d8:0d:93:92:25:
c7:55:a5:7f:1f:de:71:d9:5b:09:36:61:68:2b:06:de:19:c4:
62:b4:5e:8e:66:0e:35:7a:59:53:e5:65:51:34:32:bd:a3:f4:
fc:a2:c1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:57:40 2025 by rpki-client