Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
File: ljmhp94G13qyrjOH3Kaaf-x2bEM.mft (raw, json)
Hash identifier: xcaIWakuWQ5o8BJofQQUn3GKRcB0k1tMIPPYVWTR41Y=
Subject key identifier: FA:4B:F7:B8:50:5B:F7:7C:85:68:E8:8F:6D:D0:B6:52:B2:B8:9B:3F
Authority key identifier: 96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
Certificate issuer: /CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Certificate serial: 01965914A93E99038DAF9267FC16D623101D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
Manifest number: 12C0
Signing time: Mon 21 Apr 2025 16:00:48 +0000
Manifest this update: Mon 21 Apr 2025 16:00:48 +0000
Manifest next update: Tue 22 Apr 2025 16:00:48 +0000
Files and hashes: 1: Qiqrfe8kB9GaXpsM0lx0qYLex1Y.roa (hash: wjrm5Cuv3WYI62Wa2AE0y6JBVls2W7DEVANrYb6LK08=)
2: ljmhp94G13qyrjOH3Kaaf-x2bEM.crl (hash: qBuqTyXYskoHSztvzkgjSaheYFDVx2j54M6ZAv54pOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:a9:3e:99:03:8d:af:92:67:fc:16:d6:23:10:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Validity
Not Before: Apr 21 16:00:48 2025 GMT
Not After : Apr 22 16:00:48 2025 GMT
Subject: CN=fa4bf7b8505bf77c8568e88f6dd0b652b2b89b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:15:fc:18:6d:a7:68:fb:de:99:d3:9d:38:4e:
f0:c9:41:5c:86:68:f7:22:57:85:a8:52:b8:34:5c:
e6:f8:8b:c4:c8:1f:0b:1d:86:ee:b8:02:c7:a4:fe:
2c:62:fd:02:3a:64:f0:77:65:79:2a:a9:19:43:e9:
bf:03:cf:f2:67:6d:6c:11:7d:9d:0d:9c:a8:71:98:
2e:80:80:88:c4:bc:e3:5d:84:1a:1f:25:ec:bd:5c:
6c:6e:c5:9f:91:ed:e6:c8:08:c1:06:c9:d1:a8:81:
b7:50:6c:c4:04:c1:0b:b0:b4:b1:01:88:4b:f0:b2:
5c:24:8f:84:2a:46:7f:0b:31:d1:30:4f:cb:b4:1a:
24:3e:1e:ad:e2:29:9b:ef:07:af:d3:54:0f:32:5b:
2d:c1:4a:bc:3f:eb:17:89:ad:93:7a:e4:6b:9b:69:
10:78:cc:97:ec:84:1a:fe:08:78:36:4c:36:67:c9:
57:09:d7:19:f9:02:6f:64:d8:80:b4:ab:29:40:a7:
d5:e1:41:1c:a3:66:01:04:9a:ac:21:fa:67:c4:7a:
de:1a:9d:6a:cd:f8:35:78:0f:38:3c:1e:b2:49:46:
0a:3f:88:d9:de:b4:66:f2:40:d6:3c:9f:fe:c3:51:
f2:6a:b6:2c:31:61:bd:f9:4e:90:1d:b0:e1:31:7b:
3c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4B:F7:B8:50:5B:F7:7C:85:68:E8:8F:6D:D0:B6:52:B2:B8:9B:3F
X509v3 Authority Key Identifier:
keyid:96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:87:bb:d0:3b:58:ec:f6:7c:8b:fe:ea:b7:0c:20:9f:87:43:
0e:35:0b:33:5e:89:51:14:59:5f:14:ca:cf:da:ad:b6:3c:61:
ac:a6:eb:7a:b9:b8:fe:26:0b:f9:b9:5a:b7:ef:d0:82:cf:0a:
8f:01:65:4a:14:f0:1d:de:8d:d1:c2:fb:69:2b:04:ca:dd:b3:
6a:d4:74:95:05:81:c6:cb:00:89:07:df:21:1c:ba:e6:22:6c:
a3:8b:09:fb:27:5b:6e:95:62:c1:18:13:32:f5:3c:24:23:fc:
6f:2f:e2:80:be:7c:45:a9:83:c9:73:b8:c4:56:cc:da:24:67:
3c:d3:a7:c4:a9:ac:be:d4:66:b8:fa:8d:ef:7f:3a:9c:47:fb:
a6:13:ab:07:67:f2:96:97:38:ab:a5:6c:01:a2:ff:bd:ad:51:
1b:9e:c8:f3:d1:73:c0:b3:8f:bb:0a:6a:8e:69:b2:76:0c:53:
3e:b7:1c:55:ab:36:a5:d5:c9:98:9f:3d:b9:06:87:e5:2b:69:
6c:d8:15:c7:13:99:43:6f:bb:30:02:12:02:0c:79:44:5d:f8:
0b:1f:66:11:4c:16:cd:1d:bd:e8:b9:99:af:61:ca:2e:20:5e:
0e:45:5c:38:da:97:80:34:a2:ca:fb:d5:06:4e:f9:03:cd:c7:
9d:6a:67:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:12:10 2025 by rpki-client