Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
File: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft (raw, json)
Hash identifier: 1PUWANrqsTe/FR3fCr5abaPfFqC66S1uP9+/kcy9s1M=
Subject key identifier: 80:F8:76:56:EF:F4:ED:D7:A7:9C:B6:ED:94:C8:0C:C3:60:E4:BB:9E
Authority key identifier: 97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
Certificate issuer: /CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Certificate serial: 019651FFE3FC1CC3B077DD5C668078FBD1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
Manifest number: 05A8
Signing time: Sun 20 Apr 2025 07:00:46 +0000
Manifest this update: Sun 20 Apr 2025 07:00:46 +0000
Manifest next update: Mon 21 Apr 2025 07:00:46 +0000
Files and hashes: 1: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl (hash: 16vZTXuqaDKkxgByqKX5DSAy6wHz2AVIIWZQCgqpoTw=)
2: tU-16s9tq9lFPI9LdHnUudxWQ80.roa (hash: C3zkVEZCC33fk0KY3UR1pX59nVM27axL5/PozEIPAG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:e3:fc:1c:c3:b0:77:dd:5c:66:80:78:fb:d1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Validity
Not Before: Apr 20 07:00:46 2025 GMT
Not After : Apr 21 07:00:46 2025 GMT
Subject: CN=80f87656eff4edd7a79cb6ed94c80cc360e4bb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e2:71:d0:14:46:f5:f8:b5:76:c9:a2:80:a5:
02:62:21:45:e0:c5:56:37:0e:da:83:3e:e4:bf:bb:
7c:d1:90:6c:94:ad:29:59:7f:77:81:aa:fa:fa:62:
1f:cf:8b:0b:1d:6d:0b:67:e6:38:d6:c6:32:24:41:
82:a3:90:19:a9:23:ff:47:c6:b0:3e:2c:b3:a9:06:
07:e0:8b:55:3a:92:5a:c3:61:2d:72:44:9d:16:d9:
d7:ef:78:48:c7:a1:41:d2:38:6b:05:fc:53:83:90:
2a:f0:c3:33:e5:c6:a6:1c:db:ea:4c:0a:78:2d:ef:
ac:b6:d4:ae:fc:49:b3:f6:2e:4c:0b:77:5c:53:ae:
ae:47:24:59:7a:1c:76:b6:f3:b2:99:60:28:36:e2:
39:69:4a:10:57:77:b0:12:8e:ff:e7:16:85:4c:85:
b1:24:d0:77:ad:7c:30:7a:a5:74:13:83:83:e3:b1:
71:66:24:f4:a3:59:2b:be:5b:e5:65:b1:6c:a9:cf:
f2:ee:a4:65:5d:54:58:16:f9:c4:ef:92:17:3e:91:
97:3a:b3:b6:9b:97:39:e9:d6:00:ca:ae:36:75:54:
b7:f7:a9:66:32:80:75:4b:fb:7e:68:e5:45:eb:df:
93:08:55:a0:7a:99:60:c0:29:85:95:c9:ea:86:0b:
29:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F8:76:56:EF:F4:ED:D7:A7:9C:B6:ED:94:C8:0C:C3:60:E4:BB:9E
X509v3 Authority Key Identifier:
keyid:97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5b:36:05:38:6b:aa:10:71:80:ae:df:1c:56:60:0e:31:82:
f0:bc:d9:34:25:e2:eb:91:3a:bb:ab:5b:a3:24:d5:e1:fd:7b:
93:ed:01:59:26:9c:5e:b0:45:d8:9e:50:6a:b9:98:cb:79:92:
b7:7c:04:53:e2:46:6d:d4:9d:ae:97:f7:4f:1b:ff:0c:d6:1d:
85:8f:0d:6c:39:6d:43:8c:ca:d5:f7:04:a8:96:12:fa:dd:60:
9e:a2:c6:3b:11:b3:d1:45:6b:8b:8f:21:01:97:92:40:dc:0a:
f5:eb:29:2e:0e:62:dc:84:d2:e3:a5:d9:91:c6:96:1e:3c:79:
59:70:67:8b:9e:56:f7:71:6f:fb:7c:cd:98:42:90:df:e0:1d:
9f:c9:b5:9b:ec:83:cd:bb:69:28:30:23:3c:47:e0:c1:dc:43:
13:76:d7:ce:a5:0c:53:00:e1:92:56:d8:10:04:a2:de:98:33:
72:32:e9:48:0d:f2:0f:cf:83:df:6e:c2:00:09:5d:9e:51:17:
54:0b:d8:1c:e7:02:dc:10:29:a2:a7:90:11:26:93:c6:ed:40:
94:39:e8:13:19:db:2f:8a:ec:21:06:67:9b:14:42:7b:d1:36:
1e:c0:35:a2:e3:9d:be:bb:fb:93:bb:8e:7e:db:a2:33:b1:d1:
31:fa:ee:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:14:59 2025 by rpki-client