Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
File: lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json)
Hash identifier: UNeU3c6LbH0tBiQbNk1+rXWc+BiJBpKxpafNRWT1RRQ=
Subject key identifier: 07:D2:9E:90:7A:1C:C7:FE:4F:C9:56:91:18:73:D2:EA:8D:8B:39:4D
Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
Certificate issuer: /CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Certificate serial: 01964BFD97EEAE25D69B9C1D5926BD7B238B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
Manifest number: B1
Signing time: Sat 19 Apr 2025 03:00:32 +0000
Manifest this update: Sat 19 Apr 2025 03:00:32 +0000
Manifest next update: Sun 20 Apr 2025 03:00:32 +0000
Files and hashes: 1: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: hS/1A8qUhP96pC0qZPz3genN81dpFONigbUGBjDBaV4=)
2: t16PzAlvWekYsP-M8rbE-GQqrKw.roa (hash: 3vnPnuhk/OI+4T9XrhuO16OQVY7hpcxK0i/qFVmYQP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:97:ee:ae:25:d6:9b:9c:1d:59:26:bd:7b:23:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Validity
Not Before: Apr 19 03:00:32 2025 GMT
Not After : Apr 20 03:00:32 2025 GMT
Subject: CN=07d29e907a1cc7fe4fc956911873d2ea8d8b394d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:04:d5:e9:99:98:70:52:7c:5f:c1:91:23:b2:
d8:e4:a9:7c:3d:36:32:56:c0:d1:b7:40:66:07:ba:
27:f3:a0:9f:2e:37:1c:cf:ac:fb:4c:52:43:04:b3:
66:a1:dd:65:13:63:d9:c8:1f:aa:12:46:b1:a3:81:
f9:22:37:02:fa:37:4b:5a:03:82:25:98:9c:3e:47:
c2:e8:cc:e6:d7:56:5b:b6:50:3c:9f:81:01:68:00:
6f:8b:98:ac:91:46:57:2c:24:5c:07:50:61:37:db:
0e:c4:0e:c3:ca:cc:23:bd:6d:02:f1:cd:6d:03:b8:
8a:ea:8f:b8:33:de:78:21:ef:e4:d2:74:9b:01:05:
6a:43:46:38:95:71:f0:b9:44:6e:fd:06:56:b9:6f:
7d:8b:c9:69:b8:b0:13:fb:27:22:da:ba:6e:0b:47:
16:1f:dd:28:78:8d:f4:3c:b1:92:9d:cb:37:bd:e6:
5c:a0:df:35:54:04:69:48:3b:71:f7:b3:98:74:fb:
52:05:be:f5:5b:8a:86:e0:cb:6d:45:8f:0a:52:89:
c3:c6:d0:06:6f:bc:03:c9:ac:96:e1:fd:48:92:69:
4f:26:4c:2e:3f:b8:e5:5f:f8:b1:3f:95:c6:0a:18:
31:07:59:f3:18:c7:75:94:63:72:0b:22:63:8f:6c:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D2:9E:90:7A:1C:C7:FE:4F:C9:56:91:18:73:D2:EA:8D:8B:39:4D
X509v3 Authority Key Identifier:
keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e9:d9:33:6b:ac:12:ce:3f:0f:40:1e:b6:f9:fb:8d:d1:22:
82:9f:fc:7f:c3:77:20:57:dd:e6:e5:89:8e:ea:23:5c:73:85:
0e:bb:47:cd:c9:29:01:63:99:a4:4a:64:5c:0d:91:19:ad:24:
10:0d:a3:d7:8c:d6:04:b8:c5:c0:4c:00:b0:f8:88:d3:d6:62:
98:ee:56:c3:05:b1:1a:64:05:a2:24:af:82:98:5f:18:97:69:
76:d0:68:39:09:48:cf:4d:aa:f6:50:5b:93:49:30:77:d6:d0:
be:d5:90:10:c0:8b:c5:07:fd:a5:27:8e:0e:82:5b:dc:98:ca:
c5:d2:8e:fb:d9:21:df:b1:03:d2:fa:88:fb:ef:77:51:42:40:
56:77:3c:68:a3:c9:e9:84:92:e6:e2:35:f5:c0:31:63:34:40:
39:e5:21:1f:d1:7c:32:9e:6b:2c:27:f6:9d:17:03:5b:41:43:
74:ae:da:65:1d:dc:90:ab:1b:f1:ca:12:f3:73:7c:b0:47:11:
ba:0d:8f:5b:14:25:4a:49:f5:fb:cc:17:8f:cd:5e:b5:b4:24:
f6:7a:2f:87:2a:c8:4d:2f:99:ad:66:99:63:43:c7:ed:ce:39:
27:57:39:c7:62:93:b9:5b:dd:0b:0a:5b:69:65:f8:54:40:d4:
a9:84:02:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:33:32 2025 by rpki-client