Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
File: L4g71OpOPesouJSxkPjgi68G8cw.mft (raw, json)
Hash identifier: N9WJmv8XaYEdfS+I/Gnh+xEangMnjb/LJqfAwAITBvs=
Subject key identifier: 5F:24:ED:30:3C:F2:CF:D3:F5:48:77:C8:0A:87:D2:72:77:21:76:F0
Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Certificate issuer: /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Certificate serial: 019629E0514052B1B160DDD2548CD8872B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
Manifest number: 0493
Signing time: Sat 12 Apr 2025 12:01:28 +0000
Manifest this update: Sat 12 Apr 2025 12:01:28 +0000
Manifest next update: Sun 13 Apr 2025 12:01:28 +0000
Files and hashes: 1: 72212ELi_xTfEeuyR3CUIU7otcg.roa (hash: 05TY+/FULQvb5YOeymsTjWCBkX5gY/8/tCWpzbv8PI0=)
2: L4g71OpOPesouJSxkPjgi68G8cw.crl (hash: OMS6tQiBGXPQl8uUc5HG0O9NrXAKTPtX4xCwDzc8m7I=)
3: rKcLia0y-4QlTSWH-I5frDT77pU.roa (hash: dvn3H9WJWj8AZKwySDQ1F4qo4Fa0dQjkVokla1Xiyhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:e0:51:40:52:b1:b1:60:dd:d2:54:8c:d8:87:2b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Validity
Not Before: Apr 12 12:01:28 2025 GMT
Not After : Apr 13 12:01:28 2025 GMT
Subject: CN=5f24ed303cf2cfd3f54877c80a87d272772176f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:24:00:99:c3:af:83:5b:2e:51:8b:5f:6a:
0a:c1:81:59:91:fe:75:ee:9c:f1:b2:81:a2:05:f7:
67:38:e1:0b:d3:26:70:bb:4a:ac:d1:a6:45:29:6b:
4e:0d:38:c5:46:a2:4c:b4:0a:14:7d:c5:e4:80:2e:
b0:ea:f9:68:0e:00:b0:30:e7:7b:09:2b:46:40:b7:
6b:c3:b7:fa:b8:bb:e0:aa:3a:7f:36:31:f3:df:33:
a4:a5:de:af:d4:10:19:5b:34:96:2a:74:8a:59:da:
0f:33:d9:a2:aa:cf:18:a9:39:0d:d0:76:76:71:6d:
d0:e3:70:63:1e:b5:67:59:12:bc:82:84:83:6c:74:
37:08:38:32:b6:e7:4a:20:26:97:e4:6c:6d:99:2a:
4b:0e:be:f2:67:59:ff:04:48:27:73:96:65:fb:37:
74:49:79:0f:91:70:41:fc:17:85:2f:cf:b6:ce:97:
cb:a0:22:c6:18:2f:a6:8f:d4:63:17:ba:89:1e:07:
23:4e:c0:fe:89:d1:89:a9:e2:89:3b:5c:4b:fa:bb:
92:3a:3a:25:71:7a:25:c0:83:0b:30:24:8a:36:6c:
17:d1:a0:d3:6b:93:8d:6f:ef:b9:9f:29:f4:42:5c:
e5:53:8f:fa:9a:d1:01:7f:ec:cc:cb:be:48:b9:8b:
7d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:24:ED:30:3C:F2:CF:D3:F5:48:77:C8:0A:87:D2:72:77:21:76:F0
X509v3 Authority Key Identifier:
keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:bb:9c:72:66:4e:2d:f0:00:82:57:fc:53:b0:3d:2d:0c:8b:
71:c4:97:a9:aa:40:d4:ba:fd:cc:46:f9:fb:3a:0b:a3:94:73:
c1:2c:7d:4e:7c:a5:ca:eb:a3:62:9a:7e:43:80:58:72:a6:7d:
d2:04:70:05:03:8e:2d:73:60:d9:0b:5b:fc:06:a6:f5:32:d9:
99:74:28:4b:02:01:ce:f5:84:7b:88:42:b6:04:11:2f:af:2f:
de:7d:32:16:61:6b:25:87:88:6a:ef:79:ba:ed:03:01:45:99:
01:0a:31:ef:81:38:f9:15:d3:bc:88:cf:f8:e4:fc:46:92:ae:
56:24:7d:b2:c7:a2:41:8f:f4:f5:41:ea:19:7e:68:ee:18:19:
73:50:f2:92:16:a6:4f:78:9a:a8:25:24:e1:b9:10:cc:15:01:
44:f4:9c:12:e6:16:f7:ce:8e:eb:e6:20:c1:4b:68:7f:c9:b6:
03:a2:8b:1f:32:88:20:13:29:1f:38:86:8c:75:d5:3e:23:30:
51:91:64:d1:c7:f7:84:dd:7c:54:3f:d6:4a:77:89:f3:59:db:
55:8a:1d:1d:22:f9:09:32:b0:50:02:49:64:57:8b:1a:ab:40:
cb:ad:c2:d8:91:6f:c3:22:14:e2:bf:2e:c6:e8:be:8b:4d:8e:
da:d9:10:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:07:31 2025 by rpki-client