Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
File: le0bk9O85ravzekCC4AWe4XGj1s.mft (raw, json)
Hash identifier: TQ4eA/SLgxN5+D4Hjj0o7vLk+RtbiV7mwpoQMWo1htg=
Subject key identifier: 3A:8C:B6:54:1A:83:C5:23:FA:65:4B:78:BC:89:AC:00:3F:0A:C5:D7
Authority key identifier: 95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
Certificate issuer: /CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Certificate serial: 01958C96DEF3A42AEFABCDD8E62364A78C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
Manifest number: 0D81
Signing time: Wed 12 Mar 2025 23:00:52 +0000
Manifest this update: Wed 12 Mar 2025 23:00:52 +0000
Manifest next update: Thu 13 Mar 2025 23:00:52 +0000
Files and hashes: 1: le0bk9O85ravzekCC4AWe4XGj1s.crl (hash: M0U/902tD46PiqYl8OVKDJie2u6BlvahWqkzVJPQKCM=)
2: sNS8MkZUJtaz5-wbK4r3uIbXR9Y.roa (hash: OLvJxCHm6G2oyD8b+AkUkXYjm6Gprq3IbMPbqUHNmeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:96:de:f3:a4:2a:ef:ab:cd:d8:e6:23:64:a7:8c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ed1b93d3bce6b6afcde9020b80167b85c68f5b
Validity
Not Before: Mar 12 23:00:52 2025 GMT
Not After : Mar 13 23:00:52 2025 GMT
Subject: CN=3a8cb6541a83c523fa654b78bc89ac003f0ac5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:20:f6:8b:2c:f9:b5:47:09:f2:bb:1d:74:3a:
0c:7f:37:79:5d:ee:18:8f:98:be:18:79:03:72:ba:
9f:60:73:05:07:b2:f8:92:7d:98:c5:8c:40:89:e2:
e8:2a:d5:fa:01:59:85:20:da:df:6c:e3:de:53:98:
06:5e:08:26:2e:08:7c:22:81:cb:9b:17:dc:db:8a:
55:e8:c1:ec:00:8a:58:cd:f4:0e:34:47:ed:26:1d:
e8:52:7a:75:58:da:14:cd:f4:a7:2b:1f:70:2f:b2:
b7:33:c7:98:2d:c4:97:7a:2d:14:da:94:1b:3b:0b:
3d:e9:27:3f:66:12:74:e7:ae:79:32:c0:5b:22:67:
f3:8d:7e:01:01:c1:7d:be:a1:b0:65:5f:d7:13:a6:
6c:e4:11:55:aa:ab:73:5e:c8:9a:55:5b:b7:a2:d5:
de:81:59:65:b5:fd:c1:ef:30:e2:71:bf:96:1c:00:
53:86:cf:c1:73:7e:81:7a:a5:ef:84:c2:91:bc:9e:
1d:c8:c0:a0:d8:62:0f:aa:32:a7:12:41:54:ed:2c:
77:25:75:e0:fd:3a:ba:42:43:53:5b:d6:5d:64:1b:
a6:9b:a4:dd:60:0b:c3:76:2c:d6:54:f6:38:16:9d:
39:4e:54:20:f9:f5:de:e9:ba:cb:d5:cc:8f:a3:e3:
3e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8C:B6:54:1A:83:C5:23:FA:65:4B:78:BC:89:AC:00:3F:0A:C5:D7
X509v3 Authority Key Identifier:
keyid:95:ED:1B:93:D3:BC:E6:B6:AF:CD:E9:02:0B:80:16:7B:85:C6:8F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/le0bk9O85ravzekCC4AWe4XGj1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/cf2f87-8197-4600-a3ab-576ce4101483/1/le0bk9O85ravzekCC4AWe4XGj1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9d:2b:1b:77:1c:af:2f:71:63:e5:1a:df:1d:e3:09:b4:08:
8d:89:b4:67:29:ef:db:c4:28:ab:0d:d1:55:49:26:4e:6c:39:
6e:64:97:65:ac:48:3c:dc:fa:c1:16:26:98:4c:80:67:ca:ff:
10:c8:76:42:0d:df:83:50:f6:bb:e2:cc:bf:35:9c:b4:0c:29:
63:15:ab:f2:7b:96:46:ca:8f:9b:33:15:63:71:cc:38:d7:3e:
b0:80:a1:66:f9:a1:94:81:f5:3d:94:f4:dc:12:a3:28:d2:a4:
1f:2d:72:87:3b:05:cb:97:29:66:54:0d:2d:2f:ef:87:f8:4e:
ce:93:b5:9d:cf:a0:4b:a6:2a:31:b5:8f:80:1c:4f:4e:b6:1b:
f2:59:5e:cf:c4:0f:ba:b3:e8:e9:e7:3f:a6:4e:89:e0:21:fe:
78:09:7a:ed:0c:fb:07:d4:79:4a:34:b5:52:12:07:5f:d9:a9:
f0:97:12:a4:09:79:de:cd:41:1a:e9:b8:ff:1d:ba:9d:03:00:
4c:0c:be:50:57:56:15:1a:b9:0e:77:7e:03:05:1e:60:1c:5e:
ce:e0:17:50:12:af:3c:19:4c:81:26:40:44:6b:92:68:cf:79:
0b:ac:b7:94:7f:32:8e:1c:51:3d:e3:ab:2d:f8:98:a0:38:f0:
5c:16:d7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:02 2025 by rpki-client