Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
File: lvbqdo68ndwGj1aX39dcrt164Qg.mft (raw, json)
Hash identifier: 1B7cZ/Dx6F8acki980UYD+xpZKzYAFarj0xlguqTviE=
Subject key identifier: F6:99:DC:52:54:4D:1B:BB:FF:DF:13:56:CF:DF:FF:1A:20:9D:8A:BA
Authority key identifier: 96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
Certificate issuer: /CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Certificate serial: 01958CCE631298120948DB9AD642DC6F5435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
Manifest number: 0DFD
Signing time: Thu 13 Mar 2025 00:01:30 +0000
Manifest this update: Thu 13 Mar 2025 00:01:30 +0000
Manifest next update: Fri 14 Mar 2025 00:01:30 +0000
Files and hashes: 1: hpkYZsr4ehkRhZoX0PY5vhGw4f0.roa (hash: yIy93XAXh8xhvhofZiP5cDUdE2rbmmhviH4jDOGAZ/g=)
2: lvbqdo68ndwGj1aX39dcrt164Qg.crl (hash: S1RvHhLYsaRqE5k+Vsvq0AThIRIMuq1QCHV44bRg2d4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:63:12:98:12:09:48:db:9a:d6:42:dc:6f:54:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Validity
Not Before: Mar 13 00:01:30 2025 GMT
Not After : Mar 14 00:01:30 2025 GMT
Subject: CN=f699dc52544d1bbbffdf1356cfdfff1a209d8aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:4a:c9:f4:cd:7c:aa:72:da:e0:b6:02:e5:
1d:06:19:7f:ca:68:84:d3:36:d1:11:8b:3b:af:e4:
17:41:1b:b6:ef:10:c3:3e:73:f3:50:82:ee:dc:5e:
8f:0c:2f:cb:b3:8b:f9:e0:a6:ef:97:c8:55:f7:a9:
9e:a1:1e:df:b6:65:03:3b:01:6c:d5:b3:2b:f7:e0:
c6:50:af:0d:20:92:2e:2f:13:57:5e:78:4a:8d:91:
58:b6:6c:d1:9b:f8:d2:d2:4b:9b:6c:57:39:e2:14:
15:e1:ef:5c:a9:5d:4d:5a:8b:c2:40:91:8e:2b:4f:
bb:de:a1:f1:66:95:00:fa:2e:77:f0:18:d2:95:53:
9a:4f:54:4a:2e:15:b8:63:c3:d2:ac:33:0c:42:0c:
95:b3:fb:34:1e:a9:f5:81:56:e5:ac:65:4a:a9:b7:
f6:ef:a3:42:e0:e8:70:f8:b9:04:1c:ae:1f:1e:84:
2a:13:a1:f4:ed:ce:27:8b:71:0b:d3:60:85:94:f8:
01:13:69:53:71:d7:26:83:10:a4:a2:c4:f2:49:54:
8f:ba:53:15:42:d3:35:6e:54:72:a6:66:ba:95:ff:
95:87:0e:fb:ed:e3:d4:3e:de:a6:e4:31:b7:26:cd:
bc:e6:23:8d:b8:d8:93:cc:c5:4a:de:f1:b1:62:f4:
a1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:99:DC:52:54:4D:1B:BB:FF:DF:13:56:CF:DF:FF:1A:20:9D:8A:BA
X509v3 Authority Key Identifier:
keyid:96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:17:35:ba:11:5e:e9:92:ca:99:c6:fb:3a:2b:3a:26:37:2b:
6d:fa:5c:50:cc:24:f2:0f:37:85:ee:85:96:af:16:f1:a9:e8:
de:de:fd:9a:6c:6e:82:0f:a7:40:ce:15:e7:b0:56:88:ae:f7:
98:e1:e6:00:d2:00:67:23:46:ea:bc:14:c3:6c:cd:d7:33:0f:
bc:ac:a6:17:f3:3c:54:fe:f6:3b:ac:ab:e5:09:52:20:bc:56:
4e:f2:84:2b:4f:8a:29:03:7a:1c:db:87:43:9e:1c:d1:f6:9f:
03:d0:79:e9:f3:5a:e0:a2:4c:ac:b7:1f:16:11:9e:83:88:6b:
01:49:6e:ee:29:41:03:a0:31:2c:8b:4a:1b:5b:91:08:be:b1:
eb:fa:7d:46:37:85:3f:4f:e8:47:0d:e5:62:7e:a2:39:bb:dc:
54:56:92:61:bb:7a:e3:ba:5e:ce:a6:02:f9:71:d1:95:70:cb:
3a:bc:eb:36:86:14:49:59:2c:f7:f2:f6:91:f1:b4:d0:0b:55:
b3:22:fb:9b:cd:d1:12:63:79:c8:f9:af:d4:6d:0a:f1:fd:0b:
ce:5a:4f:ff:66:1b:ad:a0:13:66:76:a6:0b:81:2b:e9:db:54:
7a:a9:d8:d8:7f:42:55:71:1a:bd:6f:e1:a5:62:38:53:6f:40:
6a:a2:22:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:06 2025 by rpki-client