Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
File: 818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft (raw, json)
Hash identifier: 2murCE/I/p+fEBAQffdohpYVAK47RhdUMABtpcj+3kE=
Subject key identifier: FD:CE:64:8F:92:4B:4B:FE:26:54:7C:79:D9:37:F7:A0:0B:BD:96:13
Authority key identifier: F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35
Certificate issuer: /CN=f35f3f2ebf80c77669250a759be1e5c91e388435
Certificate serial: 019650B61FA9B1476278ED1BC4D6AA47512F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
Manifest number: 14F9
Signing time: Sun 20 Apr 2025 01:00:35 +0000
Manifest this update: Sun 20 Apr 2025 01:00:35 +0000
Manifest next update: Mon 21 Apr 2025 01:00:35 +0000
Files and hashes: 1: 818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl (hash: VuiuCmjp6d3Y8QoLlDB29WPuoHzKdzuGapcddDepx3Y=)
2: POD0rcdBSvDIH2xQjNK7FTsBiSU.roa (hash: qqDcVkaCep5jyj7VmzlXWQJNTWjPppQG+dngjp5gRWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:1f:a9:b1:47:62:78:ed:1b:c4:d6:aa:47:51:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f35f3f2ebf80c77669250a759be1e5c91e388435
Validity
Not Before: Apr 20 01:00:35 2025 GMT
Not After : Apr 21 01:00:35 2025 GMT
Subject: CN=fdce648f924b4bfe26547c79d937f7a00bbd9613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:12:d2:c3:c7:99:80:66:a9:46:78:b4:29:
bb:7f:37:9e:43:31:70:0d:2e:e2:a5:de:46:9b:bc:
ec:a4:c6:5b:d6:0c:ac:25:11:c6:5f:11:88:43:a3:
4f:8e:a2:5e:38:07:09:2a:68:f9:15:0e:ca:65:48:
ee:98:27:7f:41:b4:36:1f:45:a9:09:b5:02:fd:0a:
6b:18:23:5c:d1:4f:9b:59:5d:5f:d2:82:45:97:67:
e5:b2:81:fd:93:6b:cc:59:1d:89:94:c2:2b:74:48:
69:85:95:e7:2c:55:f3:f7:9c:a9:d4:d1:0c:18:d7:
e8:30:f6:a6:d4:e3:75:f8:73:a1:6a:dd:12:73:84:
4b:a6:f9:67:c5:9d:a4:b9:a2:af:0a:ae:35:c4:0a:
43:d3:9c:f7:91:2e:c0:e5:81:9d:02:ca:7a:04:b7:
a3:e9:c1:83:b0:8f:39:21:3a:2a:4b:1d:9d:26:78:
3a:dd:51:66:68:b9:e3:c9:04:d8:4c:92:26:76:7a:
2d:d5:11:a2:55:51:0b:79:b1:72:26:01:33:6e:c3:
f6:ff:96:65:11:74:d4:c6:2f:29:eb:69:3e:c9:ae:
11:cc:2c:b8:11:75:6f:3b:c8:f2:3b:72:d2:0c:db:
08:52:8f:23:0e:5f:e4:ad:ba:00:3b:6b:32:55:ae:
1b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CE:64:8F:92:4B:4B:FE:26:54:7C:79:D9:37:F7:A0:0B:BD:96:13
X509v3 Authority Key Identifier:
keyid:F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:af:37:6d:9a:38:ee:1c:ac:73:ba:4d:24:15:e3:b7:b8:05:
5d:49:65:8b:21:c0:c3:59:c8:ee:33:a4:7a:40:5d:2f:02:4d:
64:dd:a3:12:78:aa:82:d9:c9:a6:fe:02:9f:81:5a:76:58:d0:
14:0b:3f:48:98:80:c2:a6:16:8f:da:14:ca:3b:88:04:ae:b2:
c1:7c:74:70:f7:d9:ca:70:51:1b:27:a3:1a:db:1e:9c:af:3c:
1b:5d:7a:ee:63:cb:1e:a1:89:25:a3:45:70:1e:a7:aa:a7:6b:
d1:b7:4c:1c:f6:1e:eb:c9:b9:c5:2e:7e:8e:56:f8:2d:88:b9:
27:20:cf:ed:03:d7:bd:fd:93:e8:18:8f:0b:cb:9b:a7:c3:ce:
89:21:e6:cd:5d:7d:9a:10:c1:55:0e:22:e4:4b:14:6e:ac:5c:
3d:ed:8b:f4:d7:de:31:8f:b8:d0:f1:0c:ff:02:c6:72:94:be:
2a:f3:80:df:1e:5e:77:8c:7a:25:62:58:ad:da:c2:b0:50:99:
16:ea:65:db:09:0a:2d:58:27:e5:24:45:2e:ce:9b:16:06:b2:
69:3f:8a:c8:9c:7b:e9:1f:5e:6e:28:1b:53:40:ca:33:e4:98:
c4:7d:05:12:9b:89:5f:ee:70:5c:2f:1d:01:d2:65:3d:5f:57:
d0:e1:a2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:25:23 2025 by rpki-client