Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
File: L6aSUEx3C6T4QLir7sSFttEPpOo.mft (raw, json)
Hash identifier: hjcou35PP0Yh17rZq8VHzdaZ4qGhEKlu1ycMleuI4OA=
Subject key identifier: 48:8C:B1:BD:E6:25:35:CC:5B:4B:5F:9E:20:A1:A7:BD:62:B3:B9:E9
Authority key identifier: 2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA
Certificate issuer: /CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
Certificate serial: 0196526DC2E41489DA3B3A46469DC65BF453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 09:00:47 +0000
Manifest this update: Sun 20 Apr 2025 09:00:47 +0000
Manifest next update: Mon 21 Apr 2025 09:00:47 +0000
Files and hashes: 1: Fezrzno06jPF9kifbXHX27nmWc8.roa (hash: dGafPOOH6YcUYjyk23t5nAFA7BiY0x8JbwBsczL6J28=)
2: L6aSUEx3C6T4QLir7sSFttEPpOo.crl (hash: dxZUObgnqMpmyW1JPxrH63LQvu/9vPAEhVaLLQElG08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:c2:e4:14:89:da:3b:3a:46:46:9d:c6:5b:f4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
Validity
Not Before: Apr 20 09:00:47 2025 GMT
Not After : Apr 21 09:00:47 2025 GMT
Subject: CN=488cb1bde62535cc5b4b5f9e20a1a7bd62b3b9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3c:a1:58:fc:a1:fd:d7:1f:8f:34:d6:ea:93:
ad:6f:1c:ee:05:f8:21:d3:98:0e:08:90:e5:64:5b:
7e:81:13:66:4f:f7:bc:93:14:98:43:11:bc:a8:75:
0e:3f:8a:a3:99:24:76:18:d3:9a:1c:5b:17:81:66:
95:f2:b4:df:71:3d:93:f6:85:d2:2a:47:12:43:c7:
47:5c:2d:d5:ee:3b:cb:88:ed:97:3e:7e:e5:88:eb:
ff:81:44:e3:5a:cb:3e:bb:7e:99:90:51:c2:eb:fb:
b5:4c:be:39:a9:c0:17:16:6e:03:49:99:b9:fc:5d:
a7:02:1c:db:af:23:c5:06:1d:78:58:f8:0c:1e:34:
94:92:f9:ea:43:b7:e5:a2:e0:82:e8:91:02:c6:7e:
94:f7:d0:98:e3:23:c8:7c:02:56:12:f1:22:34:36:
0b:92:e1:0c:3d:00:ee:f6:be:4a:23:68:0c:d5:2b:
8b:d0:1e:f7:8e:aa:94:a0:02:9c:0a:4c:2b:54:43:
10:be:57:3a:66:bf:61:b7:bf:d4:59:87:b1:f6:f8:
d6:e6:27:d6:10:bb:1d:26:0a:4f:83:9d:2b:d9:e8:
57:62:95:01:49:32:d9:f2:2b:2c:6a:17:ce:ed:4a:
83:7d:cc:bf:0a:a0:30:54:a8:aa:14:90:97:86:4e:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8C:B1:BD:E6:25:35:CC:5B:4B:5F:9E:20:A1:A7:BD:62:B3:B9:E9
X509v3 Authority Key Identifier:
keyid:2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1c:84:0e:f6:32:e5:97:99:e0:49:84:ef:8b:3e:94:87:b4:
e0:a9:64:b3:b6:b4:76:7c:5d:7d:87:ac:5b:42:85:b1:2f:55:
8c:2d:99:b1:8d:44:ba:c0:44:56:71:27:a4:05:1c:49:ee:9c:
f7:15:c4:83:b6:68:fe:e8:e3:48:dd:de:42:ad:9a:4f:a7:9b:
23:f8:80:52:ba:0b:ad:71:b2:52:6b:29:e5:52:29:5d:2e:4a:
d7:6b:0a:35:df:74:4b:16:e9:c7:db:cb:d5:00:c1:ec:28:63:
ce:2e:6a:c3:d3:a1:fd:76:1e:dc:58:08:5b:07:4a:47:d1:95:
68:d7:e0:8f:c2:7f:41:fa:90:f3:35:1d:70:79:99:a2:6d:4b:
ab:d6:4a:91:47:a1:4d:15:a4:30:09:fd:4c:fe:e9:28:3b:ba:
32:4e:11:da:9d:b3:68:43:8c:0a:23:fe:36:58:9d:41:d9:07:
d7:f8:73:ad:a3:a5:06:cd:71:84:10:42:75:4c:ff:c6:a9:cd:
4a:c7:16:73:9d:5a:8d:55:14:06:a3:d2:38:33:7c:b5:44:86:
06:70:1e:8b:c1:28:8c:15:e3:f8:d2:b4:62:70:1e:f1:ce:49:
b9:d1:00:26:e5:45:b8:d5:5c:d4:8e:a1:f3:a5:89:b1:c1:e7:
46:95:73:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:32:12 2025 by rpki-client