Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
File: lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft (raw, json)
Hash identifier: COvHPEyUjTQITrOaA6jJ5MKzh6W0Gzb5I4JhwbkGwKo=
Subject key identifier: 10:4C:66:75:23:3E:10:C7:9D:A5:41:E7:97:03:29:71:71:93:BF:77
Authority key identifier: 95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
Certificate issuer: /CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Certificate serial: 01964D4724EEC9563E3AB3B68450AC81E150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
Manifest number: 148B
Signing time: Sat 19 Apr 2025 09:00:29 +0000
Manifest this update: Sat 19 Apr 2025 09:00:29 +0000
Manifest next update: Sun 20 Apr 2025 09:00:29 +0000
Files and hashes: 1: J7FeME6X_EaiBdjBEuAbDz0h-wk.roa (hash: Vo2/tm/C/KJ/j4K0JEVvCiIn5IsRx4PScob1tXJwJvI=)
2: lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl (hash: FGRE/L70DCInYfHGTfCkckqwkxWAjMVvb8lBq8T0z0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:24:ee:c9:56:3e:3a:b3:b6:84:50:ac:81:e1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9535462ebb2029a83d3eeab462ff052ecfa0e1c3
Validity
Not Before: Apr 19 09:00:29 2025 GMT
Not After : Apr 20 09:00:29 2025 GMT
Subject: CN=104c6675233e10c79da541e7970329717193bf77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:68:33:f4:e7:5c:38:47:2f:2d:37:83:8e:
d3:53:56:43:7c:4e:71:f2:e0:a3:81:29:c7:df:ba:
25:e5:ac:ef:46:23:1b:ed:0b:e9:76:52:49:36:04:
bf:ec:1e:45:b3:f3:b4:23:f0:33:c2:61:d8:c1:09:
e7:87:d1:d3:12:c0:b6:0d:f2:4a:ba:1e:99:33:77:
d3:6f:ea:fc:4c:4d:5f:d8:22:e4:94:04:92:00:da:
3a:c6:82:0c:3b:dd:ba:cc:27:7f:75:7e:63:3f:05:
72:2a:55:2b:02:9f:9c:39:5c:32:12:7e:b6:a3:2c:
fa:39:b2:1d:56:7c:07:c9:a1:71:6a:79:72:71:4e:
29:e4:35:51:30:86:bf:2d:1f:8b:91:58:26:0b:b7:
39:6c:da:c9:a2:4c:82:a8:61:e4:43:64:5c:3f:7e:
64:5a:1e:52:f7:a0:eb:f7:14:02:61:56:38:30:96:
df:88:2b:29:0a:9a:de:e2:f8:77:11:93:e5:a9:77:
b0:be:63:f2:80:58:39:e6:9c:af:bc:0d:a6:1d:42:
21:fb:a3:2e:7e:0c:92:c4:65:e7:73:5f:39:f5:94:
9b:46:2c:04:5c:2e:13:3b:11:46:a9:de:09:de:0d:
5e:94:9d:9b:c3:e3:72:3d:3a:e1:d1:d1:9a:f1:ad:
b3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4C:66:75:23:3E:10:C7:9D:A5:41:E7:97:03:29:71:71:93:BF:77
X509v3 Authority Key Identifier:
keyid:95:35:46:2E:BB:20:29:A8:3D:3E:EA:B4:62:FF:05:2E:CF:A0:E1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTVGLrsgKag9Puq0Yv8FLs-g4cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4f9f9f-30a8-4370-94e7-38abfa4fa350/1/lTVGLrsgKag9Puq0Yv8FLs-g4cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0a:f7:e9:43:28:eb:80:63:b5:1b:f6:49:0a:f8:ba:7f:7d:
09:5f:13:f8:44:3d:26:1e:27:b9:c9:a9:be:fe:74:92:64:43:
82:d6:bf:26:67:39:b7:2b:23:d0:f1:01:52:e1:c5:e5:6e:a9:
e3:3f:f1:f5:bc:3b:51:44:20:41:0d:cf:f6:39:52:87:5c:63:
4a:fb:4d:cf:9c:7f:46:bc:de:c2:dc:e0:48:6e:f0:b7:9e:77:
3b:dd:65:49:67:7d:ba:26:3d:44:d6:5a:93:5c:8b:03:ec:21:
1b:56:d9:9d:7f:4d:e1:1c:04:0f:54:a8:62:90:f8:38:f6:12:
d8:67:0c:54:0f:73:f2:a0:01:4e:35:7f:fd:58:54:da:56:46:
41:b8:03:60:a8:ca:a2:9c:d4:15:3e:aa:f8:ba:d6:cc:06:49:
c7:ac:97:b0:3c:17:bb:fc:03:d6:90:50:2f:1e:9b:10:09:1d:
1c:17:4b:11:9c:7b:45:75:e1:67:54:90:92:c9:4f:99:25:4c:
f5:47:8b:65:38:3d:3d:f4:01:14:b1:a1:b5:7b:6b:ec:ed:13:
73:13:00:10:35:ea:38:60:c0:20:be:7c:df:38:f8:26:f1:5f:
31:14:8e:37:dd:33:45:a4:cb:fe:93:36:d0:07:3a:b2:43:5a:
db:9c:e6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:10:30 2025 by rpki-client