Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json)
Hash identifier: /WmvxapiyCmKLQBl7ncf0C1aNnA1mTJNo5Ueb29PcY0=
Subject key identifier: 89:4D:86:8C:24:05:5B:02:54:69:81:71:56:ED:63:92:00:A3:81:A1
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 0196120EDD6C8ACF43DD05173C6ED508733E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
Manifest number: 14DD
Signing time: Mon 07 Apr 2025 21:01:26 +0000
Manifest this update: Mon 07 Apr 2025 21:01:26 +0000
Manifest next update: Tue 08 Apr 2025 21:01:26 +0000
Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: vhOWmQiiSJCgpHMtMbOED50F7fFaH2uR58T0sS0KV3Y=)
2: PUu9JBqT0q_kMegzLpokDy8FZpg.roa (hash: GZSimUwCl58YJS+NoDvHAGPvWk0bb2fLNY1EJxjHl3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0e:dd:6c:8a:cf:43:dd:05:17:3c:6e:d5:08:73:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: Apr 7 21:01:26 2025 GMT
Not After : Apr 8 21:01:26 2025 GMT
Subject: CN=894d868c24055b025469817156ed639200a381a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:61:d6:42:ae:df:1d:f3:26:39:53:58:13:59:
39:89:0c:46:54:49:39:d6:a1:d9:56:c1:bf:be:f8:
dd:73:3b:d3:a4:8c:97:82:4a:bf:30:40:60:ec:0b:
5e:9c:5c:a7:e8:b7:8d:a9:0b:ae:77:cf:05:5b:fb:
54:21:53:7b:08:e5:31:3b:cb:28:e5:66:ba:8d:a5:
32:c4:16:65:57:e8:8d:8b:0b:93:3a:03:c0:c7:c5:
38:bc:0d:74:e3:67:ec:77:57:f9:4f:7b:c7:a0:79:
d3:e3:6b:f2:92:46:45:fb:11:6d:9c:92:09:df:fb:
10:54:d0:d7:e5:41:1d:29:6a:1a:05:04:8e:be:72:
87:20:aa:93:ab:e7:89:c2:52:69:73:26:13:c6:29:
ad:bc:77:ad:33:e6:0a:6c:5e:ae:20:f9:6f:3b:42:
40:ad:d4:05:cd:e9:13:21:a3:d2:d4:a0:00:1e:f2:
77:f4:13:49:b5:90:bb:19:91:b0:9a:17:dd:e2:c9:
68:70:06:2a:e0:fa:c3:94:2e:ac:73:7f:b9:88:13:
3a:fb:b0:10:82:6f:d1:39:d0:1b:ac:04:57:63:43:
79:bc:00:9a:0f:03:9e:f8:e1:2f:68:ae:72:85:f0:
d1:8d:09:45:73:98:8d:d7:6b:e6:4b:d7:91:17:93:
9e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4D:86:8C:24:05:5B:02:54:69:81:71:56:ED:63:92:00:A3:81:A1
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e4:1a:70:35:1d:c0:61:18:bf:88:7f:b4:b9:fc:18:ea:0d:
af:2f:92:8b:a1:91:53:50:78:df:ee:0c:34:02:d5:f2:b3:4e:
98:b8:f2:0b:12:cf:ed:8a:e1:13:d2:e2:0f:8d:84:c9:8e:e3:
bb:a3:0c:89:cc:96:ba:1d:e3:d7:b9:23:12:35:72:f3:f7:f0:
bb:76:00:b4:eb:f1:30:de:34:f6:7f:a0:ae:f6:38:51:3a:9a:
e4:52:8e:fe:ad:c6:85:34:be:99:e0:00:0f:f8:5e:5a:d4:94:
fc:70:ae:fe:bd:8e:38:aa:f5:e9:4f:62:20:03:53:11:50:cb:
13:30:32:6f:38:ce:ee:3e:26:79:ad:0b:09:25:c0:7f:a8:c5:
81:7b:e9:69:fc:b2:62:0f:6f:7f:a8:24:4d:e8:99:ee:3a:bf:
0c:a0:49:11:30:9a:a5:59:8c:cf:d9:b5:90:b9:0d:23:0c:80:
ca:50:47:c8:8b:23:cb:ad:98:a8:85:76:a2:ba:fe:48:be:7d:
f9:79:cc:5b:34:a8:d2:b7:db:5e:fc:fb:5b:cc:cb:1a:bb:3c:
f1:08:18:49:73:63:71:54:4a:08:a8:ae:9f:33:2d:eb:94:e6:
48:d4:fb:74:cc:40:4e:bf:d3:38:9a:16:a9:56:f7:cd:e8:bc:
e6:54:11:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:23 2025 by rpki-client