Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
File: 1-LPVjZk_lghA9-8v4gwAityXH5c.mft (raw, json)
Hash identifier: rjpyFsiM1NizCqqWk1FHZEg98+2wjOeHx9uzO8SFkdc=
Subject key identifier: 4B:66:87:5E:5C:20:9A:5E:AA:A0:A8:28:BE:3A:B3:4D:AC:A5:6C:D2
Authority key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
Certificate issuer: /CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Certificate serial: 019655A61693BAC2A993F52DA69AF8884F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 00:01:10 +0000
Manifest this update: Mon 21 Apr 2025 00:01:10 +0000
Manifest next update: Tue 22 Apr 2025 00:01:10 +0000
Files and hashes: 1: 1-LPVjZk_lghA9-8v4gwAityXH5c.crl (hash: TmYkPfUs5Uuhq5m95yHB01phSGRtWIhg7JKEQlSoMJ8=)
2: G_1BjHa-Ii2Y9oecPQ2LQCQwR58.roa (hash: 8hKbU4VqspkNDKDSQPFelJhuWZ21X39DPqFIjGUgHFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:16:93:ba:c2:a9:93:f5:2d:a6:9a:f8:88:4f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Validity
Not Before: Apr 21 00:01:10 2025 GMT
Not After : Apr 22 00:01:10 2025 GMT
Subject: CN=4b66875e5c209a5eaaa0a828be3ab34daca56cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:83:68:1f:4f:48:33:8a:b7:ec:fc:8b:0c:
d0:7a:03:9f:d2:00:76:15:38:f3:5e:75:0f:79:c4:
4a:26:b6:9b:09:5a:b7:50:ad:7d:6c:c5:b6:d2:fa:
26:34:2a:ba:72:fb:07:67:35:3e:f1:8f:ff:74:ad:
b0:bf:d3:4a:91:3a:f2:be:f7:24:85:cf:04:d8:39:
2c:4c:77:1d:6c:e9:fc:36:77:d4:fb:cb:a0:a0:2a:
1c:8f:75:b1:53:05:08:14:f9:ac:66:9c:c8:d4:52:
5f:3a:50:8d:b2:44:87:cd:3c:ca:44:a2:bb:aa:e7:
02:01:0b:b4:7f:34:49:18:df:6f:11:e4:0c:53:a2:
98:6d:3a:c8:58:9a:33:fc:c8:3b:71:01:16:8a:34:
36:27:f2:0a:f8:7a:97:e7:30:64:c0:fc:73:91:d6:
1a:04:ab:66:24:39:c3:38:99:50:44:d4:a8:95:0f:
a3:98:88:4a:e8:ef:cd:4d:c5:64:db:a6:61:4c:c8:
b5:42:9e:36:b9:dc:6a:c6:92:80:e2:f8:5b:33:97:
af:e9:c6:c2:31:d0:fc:54:e1:cc:6c:62:2b:9f:12:
d3:3d:35:8e:0b:dc:48:75:a2:83:66:3b:e7:55:ed:
6b:4f:dc:e8:d9:df:12:f6:95:3d:ad:4b:03:f5:4b:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:66:87:5E:5C:20:9A:5E:AA:A0:A8:28:BE:3A:B3:4D:AC:A5:6C:D2
X509v3 Authority Key Identifier:
keyid:F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:28:c4:26:a2:25:56:7d:ca:30:ff:99:59:a1:12:7d:e1:91:
7b:8e:8d:72:83:3f:40:aa:c7:e2:cd:08:d2:d5:ff:61:dc:17:
c3:2a:55:60:0c:93:22:ed:c4:3b:08:02:e9:4a:d6:24:a1:de:
ae:0a:74:cf:1a:f3:8f:a7:d3:55:30:8e:58:39:a8:7f:41:ad:
78:70:fb:53:99:ce:de:ed:8b:99:ef:0a:6a:82:00:bf:59:ae:
d3:a0:26:b5:81:bb:c9:3d:32:bf:c8:70:a2:7e:e5:84:07:45:
d2:cb:47:c2:5d:27:f0:19:2c:36:00:ac:47:22:51:1d:15:94:
22:ad:dd:9a:54:0f:71:e7:04:f1:e7:23:70:f1:79:07:b3:ae:
00:f8:66:c7:d8:c1:fc:40:3d:66:80:67:c1:53:83:aa:40:5e:
4b:0e:7f:ad:90:3c:8f:9e:6b:da:6a:7c:4d:ec:2e:ea:ef:f9:
43:53:22:7e:c5:63:de:db:50:8d:d8:67:cf:aa:1b:a2:ac:e7:
40:6a:84:41:cd:fb:be:26:5f:82:28:29:1f:68:24:6e:14:41:
e3:05:20:10:9a:bf:2e:26:83:4d:59:2e:89:fb:4c:1f:20:22:
07:77:d6:75:36:27:4f:0c:39:bb:ec:fb:58:2c:a9:cb:bf:fe:
23:72:d8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:33:04 2025 by rpki-client