Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
File: L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft (raw, json)
Hash identifier: WDCiJ8Hh3hIoyUfyajbpSnu5mSu7BEneO2jcc93BkE4=
Subject key identifier: 39:8D:5F:47:40:6B:38:64:7E:AC:50:4A:90:81:80:1F:D3:A9:FD:5C
Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
Certificate issuer: /CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Certificate serial: 01961020BB3C026C1705E5C0E12CAF5EF018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
Manifest number: 04A8
Signing time: Mon 07 Apr 2025 12:01:42 +0000
Manifest this update: Mon 07 Apr 2025 12:01:42 +0000
Manifest next update: Tue 08 Apr 2025 12:01:42 +0000
Files and hashes: 1: L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl (hash: Y+d9FnKHqoXrj5zVOvqFLiL0HxKTjkQvierhSjQEcyU=)
2: qznnQ-v33pCD5fJCMq_QfAFaVVY.roa (hash: 0VqZD7dxruPTKQ34pdbfgNvG+cfqa/rYpHKqqEaQD/s=)
3: sxWEI_lS1aXV-AY65QedUYFWKCk.roa (hash: ms1QHqqgoXo/meqTZa2TJKA2xu/idnTrM5+e1jr1amY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:20:bb:3c:02:6c:17:05:e5:c0:e1:2c:af:5e:f0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Validity
Not Before: Apr 7 12:01:42 2025 GMT
Not After : Apr 8 12:01:42 2025 GMT
Subject: CN=398d5f47406b38647eac504a9081801fd3a9fd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:17:ef:9b:a1:5b:c1:4b:ec:46:58:fc:87:
66:cf:d6:c1:c3:d0:97:37:6c:b9:6c:e6:68:1c:62:
63:e7:ff:d3:ee:ee:61:35:91:ad:51:3c:43:bd:21:
d9:c5:67:66:01:20:76:78:5e:e2:f0:f3:69:8b:8d:
9e:62:9f:ef:da:a2:ae:37:9c:0a:f8:83:76:67:be:
e8:d7:e3:d0:7d:8f:75:d7:12:1e:db:11:1d:60:0f:
2d:0e:ba:60:9a:47:46:63:c5:a0:f2:24:40:62:54:
a7:c8:d4:b3:6d:69:65:2a:5d:37:49:7d:70:92:f2:
82:01:bf:5b:77:ca:1e:6d:35:e9:dc:6c:d4:20:59:
fe:d4:05:cd:93:6e:13:65:f1:2c:73:f9:b6:68:a1:
72:0e:6a:cd:3d:55:68:13:e2:13:e8:ce:72:f0:95:
96:36:f8:0d:68:c0:63:0d:11:c4:90:cc:4b:2e:c4:
7f:c5:c7:51:4b:3b:c6:9c:29:a0:ff:8c:5f:1f:4c:
9f:aa:8c:a1:46:1f:b9:39:b6:5c:77:f1:e3:9c:66:
d3:15:e6:7a:37:b7:c8:d2:65:99:f4:5f:2e:6a:b6:
1f:99:0e:cb:2f:a9:bf:e5:33:bf:4f:17:6a:3e:76:
8e:65:b7:82:bc:06:53:5f:2b:42:e5:ae:6a:4f:dc:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8D:5F:47:40:6B:38:64:7E:AC:50:4A:90:81:80:1F:D3:A9:FD:5C
X509v3 Authority Key Identifier:
keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:99:44:43:4a:c2:13:9d:97:7b:5e:82:38:44:65:a1:af:49:
0a:0c:5d:88:c7:27:c2:25:70:5f:41:4b:36:93:71:a0:87:d5:
bc:84:b2:10:4b:22:55:f2:e8:09:91:b2:cf:be:54:f1:64:30:
6d:27:1d:86:5b:fb:b1:83:77:4c:82:8b:f4:23:ae:22:cc:b1:
18:e7:ac:a6:7f:4c:6c:f3:1b:71:e1:0a:c5:66:b4:23:ef:c3:
73:d1:cf:24:f7:40:ed:1b:b7:78:09:b9:41:06:96:86:6b:50:
f3:1c:9b:32:44:19:d6:e4:62:7f:ef:00:95:73:b0:87:58:c6:
21:76:cb:57:86:40:13:88:18:c1:d2:7f:db:50:b0:79:2a:e5:
c8:dd:5d:c8:db:4c:d8:f7:6c:67:07:59:d7:9d:88:44:f3:7c:
3e:dd:e9:e8:cd:2e:b4:39:88:7e:5f:3f:c9:da:d4:e9:ea:6d:
95:9c:65:8c:b9:49:ea:55:39:e8:37:8d:f6:13:5a:0c:57:74:
20:f1:6b:4b:23:d7:9c:cc:5d:d9:91:98:bc:3c:60:b5:d6:6f:
d1:29:36:2e:8e:b2:6c:99:2f:b3:ff:d4:ac:df:fd:ad:ca:9d:
c0:e3:6b:9f:8c:5e:a1:6b:90:3a:67:48:14:16:e2:20:ea:49:
89:fb:4b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:44 2025 by rpki-client