Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.mft
File: lQ8oTPXDnybd0jUufyrfeo3GD44.mft (raw, json)
Hash identifier: eAwxNIG0fH3EX0IubDUkEkQcgVfp+cm59Vz9yv0k8Xo=
Subject key identifier: BD:38:24:17:E7:AC:73:9D:48:C6:F3:0C:CE:E0:6C:A6:FB:AE:E3:D7
Authority key identifier: 95:0F:28:4C:F5:C3:9F:26:DD:D2:35:2E:7F:2A:DF:7A:8D:C6:0F:8E
Certificate issuer: /CN=950f284cf5c39f26ddd2352e7f2adf7a8dc60f8e
Certificate serial: 01958F984BFBB5C706825C19D0EA257EFBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQ8oTPXDnybd0jUufyrfeo3GD44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.mft
Manifest number: 0A93
Signing time: Thu 13 Mar 2025 13:01:17 +0000
Manifest this update: Thu 13 Mar 2025 13:01:17 +0000
Manifest next update: Fri 14 Mar 2025 13:01:17 +0000
Files and hashes: 1: CIXcSM8wlZUJc9_olM2z-Sxe_fI.roa (hash: mDiY7MPNQSCh1DaHA5s1SG/E+/9GUkWw11IjIEdP7WU=)
2: lQ8oTPXDnybd0jUufyrfeo3GD44.crl (hash: oaLAE5tTz/iyDnO+GVjiq6uKrq3veLF5PzF+daLeDsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQ8oTPXDnybd0jUufyrfeo3GD44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:4b:fb:b5:c7:06:82:5c:19:d0:ea:25:7e:fb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950f284cf5c39f26ddd2352e7f2adf7a8dc60f8e
Validity
Not Before: Mar 13 13:01:17 2025 GMT
Not After : Mar 14 13:01:17 2025 GMT
Subject: CN=bd382417e7ac739d48c6f30ccee06ca6fbaee3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:35:d4:46:0f:06:0f:0b:4b:34:72:4e:b8:
23:d8:b9:fc:58:68:03:20:7e:3b:00:c5:24:d7:b4:
e6:52:dd:4a:5c:a3:98:9d:2a:c0:a6:b7:53:1c:24:
1b:d0:9c:a8:c9:65:9c:7c:0d:8c:65:10:48:d5:5d:
b8:72:61:a3:e3:67:a6:9d:1c:b9:22:55:df:5f:93:
1c:7d:76:d3:2c:0b:6d:ea:c5:8c:ba:78:3f:41:4f:
9e:46:94:5b:f2:c1:07:7e:39:7b:c5:b0:eb:cd:d0:
3b:31:f3:7a:78:42:7b:e8:c5:98:34:b8:2b:24:48:
cd:54:88:dd:40:da:ed:77:b8:d1:18:94:c0:63:66:
9f:78:49:ed:e5:63:4b:76:bf:41:22:a4:13:85:b5:
80:26:0b:1e:d2:ba:29:3b:1f:b1:2f:18:9e:99:ad:
2b:02:d2:a5:2f:08:e0:01:10:0b:c3:8d:7e:0b:c2:
6b:ff:3a:5d:88:03:bb:3b:24:ba:6e:86:61:43:b9:
cb:5e:e3:21:71:72:1e:04:57:a6:0e:de:35:f6:89:
1b:2f:7d:1b:5f:1b:9b:9c:95:ca:5b:19:f4:ad:15:
74:eb:d9:42:58:c7:7b:dd:6c:66:63:53:f3:01:db:
77:8c:76:19:7e:f2:6f:b7:d3:8a:cb:00:20:fa:aa:
42:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:38:24:17:E7:AC:73:9D:48:C6:F3:0C:CE:E0:6C:A6:FB:AE:E3:D7
X509v3 Authority Key Identifier:
keyid:95:0F:28:4C:F5:C3:9F:26:DD:D2:35:2E:7F:2A:DF:7A:8D:C6:0F:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQ8oTPXDnybd0jUufyrfeo3GD44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bf:bf:3d:4c:39:c3:ae:c0:c8:e9:16:0e:64:f8:a5:b3:9e:
83:51:09:01:37:96:71:10:79:6b:15:7c:f6:7c:5d:b8:0a:2f:
b8:84:e3:61:19:d3:c4:25:47:73:de:56:4d:2a:93:62:8d:9c:
31:83:4a:84:d4:4f:6c:10:c4:cb:17:b3:90:de:3f:12:eb:ef:
60:8d:be:36:92:b9:81:ea:a0:5f:dd:9c:35:c6:6b:67:db:e6:
27:fa:e4:c4:94:f9:b1:59:29:dc:df:ce:94:dc:f2:42:e2:a0:
a3:de:69:93:e8:1a:76:bf:7b:22:0d:4f:46:67:46:2b:9e:76:
b7:ee:26:1a:79:7d:df:d9:cb:49:4a:fb:6a:5d:ba:e0:d8:11:
05:5a:ed:2d:c2:c8:ea:67:67:e4:0b:58:6b:a4:9e:8a:81:08:
60:49:b8:82:04:ea:5c:5f:f1:fe:44:9a:86:42:8e:9f:c8:b0:
ba:2b:e4:e7:04:6f:7c:db:f9:9d:4c:41:b9:c3:c3:fd:f9:53:
c5:1f:1f:74:31:56:b2:51:94:12:60:7e:32:cc:13:42:a7:9c:
9e:aa:a5:c0:42:bb:b0:d6:b8:41:be:e5:d8:2e:5e:8a:66:bb:
d6:70:0f:0c:3c:30:b5:ea:5e:3d:47:e1:42:34:80:9a:79:f2:
7a:5c:dc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:28 2025 by rpki-client