Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
File: lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json)
Hash identifier: AG1ETUePxxwBp8NAPFrxnPlpPCOuwkQnW7eLtKf+Omk=
Subject key identifier: CE:81:74:6C:9E:A0:3B:AC:43:FE:A8:C0:7F:F0:65:79:3D:3A:8A:A0
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial: 019647B3E857F3FE1F8BAECF9C01CC770FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
Manifest number: 148B
Signing time: Fri 18 Apr 2025 07:01:34 +0000
Manifest this update: Fri 18 Apr 2025 07:01:34 +0000
Manifest next update: Sat 19 Apr 2025 07:01:34 +0000
Files and hashes: 1: D7v-i2Em1A95E4k4o6lvGCl8mqk.roa (hash: xqtDWFhhoatEtwCz7HFHDZQmIK3iuhE2AzGVbExJo/4=)
2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: vfDJns8ADpfFweOOQMltW7af9p9dbNDUysmq9Z5zE84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:b3:e8:57:f3:fe:1f:8b:ae:cf:9c:01:cc:77:0f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Validity
Not Before: Apr 18 07:01:34 2025 GMT
Not After : Apr 19 07:01:34 2025 GMT
Subject: CN=ce81746c9ea03bac43fea8c07ff065793d3a8aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ab:d3:89:ff:5f:8e:c8:05:db:95:de:8f:b8:
e4:f2:be:c4:3b:79:58:4a:6d:b5:67:69:cb:83:14:
b5:e7:51:7e:4b:2e:23:ca:52:67:d6:86:4e:c4:f8:
a4:48:78:f6:c1:ec:de:ea:31:88:3c:20:e3:46:8a:
58:4b:78:ba:3f:27:71:9f:16:10:08:50:54:36:f5:
69:32:62:cc:dd:d1:05:98:78:ce:21:9c:5e:2b:c5:
ac:18:55:b2:49:3b:a0:6a:10:19:5d:5d:6e:7a:5d:
6d:83:79:4d:bc:4b:4a:19:d0:a9:ee:6a:18:50:03:
39:26:19:87:b4:cc:ed:35:e0:dd:a8:38:53:a4:f0:
65:7c:d8:75:67:29:84:79:71:bb:16:0b:79:a1:8a:
e2:f9:4a:7e:01:95:87:1e:bd:7a:71:ca:ae:c6:33:
6a:87:d6:48:62:af:ab:22:2a:0b:76:04:93:cb:d2:
7f:c7:81:02:6d:51:aa:04:b9:a3:b8:28:1c:46:21:
1e:d2:4a:ea:33:8c:46:da:97:81:4b:d0:58:20:36:
8f:11:03:de:e7:26:dd:fe:31:46:b3:ed:eb:6a:3d:
8d:40:27:6c:c9:5b:46:98:28:8a:d2:05:e5:5f:c1:
39:2e:62:c9:1a:3a:b7:03:ab:b6:ea:44:ab:c6:c9:
c1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:81:74:6C:9E:A0:3B:AC:43:FE:A8:C0:7F:F0:65:79:3D:3A:8A:A0
X509v3 Authority Key Identifier:
keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:78:1e:6f:93:d4:b7:9f:86:d2:b6:ed:9c:76:84:62:78:97:
39:58:29:a7:7d:67:57:aa:53:f8:64:09:39:f2:88:bb:da:58:
cc:f4:bd:6f:66:2f:5f:33:00:3e:a9:21:8e:e4:f4:31:2d:29:
b2:3d:df:75:66:df:1e:6e:80:7f:c3:a8:c2:f0:68:d6:01:e1:
32:6e:d0:d1:67:e4:bb:4f:48:70:14:75:0a:f1:6b:19:ed:b7:
78:9e:1f:d2:d9:44:d0:b1:da:a0:d1:e4:c3:32:d1:1a:40:5b:
5b:3d:e2:9c:14:6a:ef:2e:7f:f3:10:e9:78:07:74:82:58:da:
49:16:13:3b:46:3c:2f:66:53:ed:e7:91:2b:c7:7a:4c:2e:4d:
40:24:06:5d:10:c8:f8:ba:29:37:df:c7:e1:85:2a:ac:12:59:
65:ce:e8:36:8b:c4:61:18:ba:d6:40:4e:dd:32:68:02:ee:b9:
c9:19:0d:d6:5c:b8:f6:07:6d:a1:1f:a9:24:3e:71:23:32:de:
2b:57:dc:65:3d:04:ad:f2:0b:c4:68:f4:b4:cd:d3:f8:ee:78:
24:a8:c5:98:16:96:67:fc:86:cd:96:2d:cb:dc:80:b5:d4:21:
fc:b8:5d:1a:d1:fd:c4:2f:5f:3b:26:3c:eb:d4:f8:03:8e:b4:
93:2b:a5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:45:36 2025 by rpki-client