Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
File: lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json)
Hash identifier: B776SdN9V5IiNSEjm7Xtx+t6aSqM15jKmyxdAUBEoRs=
Subject key identifier: BD:4F:47:20:D6:D1:F6:6B:61:89:B3:DD:AC:FC:87:56:B7:3F:9B:52
Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
Certificate issuer: /CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Certificate serial: 0196534A53162368AF6B3E52CBE39C1088A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 13:01:41 +0000
Manifest this update: Sun 20 Apr 2025 13:01:41 +0000
Manifest next update: Mon 21 Apr 2025 13:01:41 +0000
Files and hashes: 1: __MYyid4GtIkDzQxVkfCnSU_9K0.roa (hash: wGfHIHi66rHTs2wGskl+w+/VWjBeUlcRI6guMD/KMNQ=)
2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: 6DQWCE/6E5r/YiiGDOZJ8rkjdx5eqtX+xhfB3LiMG9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:53:16:23:68:af:6b:3e:52:cb:e3:9c:10:88:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Validity
Not Before: Apr 20 13:01:41 2025 GMT
Not After : Apr 21 13:01:41 2025 GMT
Subject: CN=bd4f4720d6d1f66b6189b3ddacfc8756b73f9b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:60:b4:2d:31:b3:9f:03:24:75:b9:c4:e9:2d:
f7:6c:67:d6:94:28:57:c7:2e:34:bf:70:a9:37:51:
f8:12:ae:a3:be:77:f9:62:8d:e8:61:85:64:6b:5d:
68:78:dd:2b:a9:3f:4d:e4:03:12:21:a6:32:0e:ab:
9a:63:f9:91:05:f0:2b:7b:e4:c9:ff:7b:cf:31:47:
05:f7:5c:47:51:80:f4:f0:c5:53:22:d4:7b:4e:f8:
4a:65:3f:a7:4a:77:d4:a0:33:2d:92:ca:10:d1:2c:
46:69:1a:6f:22:7d:d2:7b:b4:10:33:13:4e:81:22:
fd:fb:39:99:a3:21:14:3b:ea:1a:b9:0f:32:9a:cc:
97:38:77:ab:e3:fd:d4:55:26:0a:60:a8:66:d9:bd:
b8:1d:19:bb:46:2f:4a:80:14:a4:d1:08:fe:0a:3d:
ea:a7:99:7b:c4:b5:65:48:bb:c2:05:bb:a5:1a:24:
68:a1:e2:67:3a:d8:f5:98:bf:16:e0:7d:03:e7:43:
f2:15:aa:8a:c2:20:41:28:80:63:01:a3:54:c5:86:
56:3e:fd:75:4b:d9:4f:56:f4:49:4c:61:4e:1a:22:
36:96:a3:fc:ea:96:7a:d4:12:97:45:2c:62:2d:49:
af:c9:56:c0:0f:ea:b5:23:4d:33:1b:95:ff:91:5f:
c9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4F:47:20:D6:D1:F6:6B:61:89:B3:DD:AC:FC:87:56:B7:3F:9B:52
X509v3 Authority Key Identifier:
keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a6:63:e4:6c:b7:c4:ff:65:27:3e:ea:58:59:8c:41:84:ad:
d9:ea:82:8f:19:f7:49:b1:78:81:71:08:d2:de:55:25:60:ed:
78:34:d5:75:a6:b5:d8:b2:22:ac:89:7c:83:da:89:98:50:35:
64:46:88:5a:80:1a:a4:98:2f:0b:cc:77:3b:24:fd:ea:94:41:
96:e8:8e:f8:52:d0:ec:8c:07:50:cf:c9:39:d9:98:9d:6d:68:
f1:74:a5:ac:8e:5b:5c:c0:94:59:e1:b6:6c:ea:df:78:50:5e:
b7:4a:93:f6:e7:2b:f7:8d:8f:06:21:79:da:4b:ca:c9:45:26:
da:a7:66:29:ae:ad:5f:43:1d:5e:f4:2a:1f:20:b5:10:85:6c:
bc:bd:5c:44:66:0e:59:37:46:39:0f:ed:ac:c1:bd:a1:28:0b:
a8:80:3b:66:6e:20:bb:20:69:3d:5f:0b:ad:16:9b:e8:ad:aa:
e9:e4:a8:95:f8:55:bd:63:7b:4a:d8:44:19:4e:37:6f:d7:14:
64:f5:a2:f8:31:ac:18:5c:e8:f7:04:a7:6b:b2:58:4d:22:fb:
76:51:d1:76:55:69:a1:5f:b5:71:35:7d:c5:51:c5:01:d5:65:
a7:75:e9:5a:00:ac:fd:5a:74:6c:07:d4:ca:4b:a1:bf:b1:5e:
ba:b9:b8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:38:22 2025 by rpki-client