Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
File: l96FxoT8_4PsQUirX29nzRUE-T0.mft (raw, json)
Hash identifier: NMBxBtzOHWBQPV/47kop5lAf1/CKiXV294n05tkUx6I=
Subject key identifier: 4A:13:80:08:B2:13:03:33:3A:2D:89:D7:81:E9:5E:E5:1B:48:AE:86
Authority key identifier: 97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
Certificate issuer: /CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Certificate serial: 01958C6027A360A8BBBD3F3556441F3B87CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
Manifest number: 0FAD
Signing time: Wed 12 Mar 2025 22:01:06 +0000
Manifest this update: Wed 12 Mar 2025 22:01:06 +0000
Manifest next update: Thu 13 Mar 2025 22:01:06 +0000
Files and hashes: 1: aNefWas-v_WpGI-_669JeJcpGCE.roa (hash: AyqK/NRp/xUAyry2Wae2nQWK8xpykIL1yZ7NXpMhO2U=)
2: l96FxoT8_4PsQUirX29nzRUE-T0.crl (hash: fZ+2br6gJDE9Ms3XnpiUFfo7HaCFBywKpSMx2OCFFHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:27:a3:60:a8:bb:bd:3f:35:56:44:1f:3b:87:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Validity
Not Before: Mar 12 22:01:06 2025 GMT
Not After : Mar 13 22:01:06 2025 GMT
Subject: CN=4a138008b21303333a2d89d781e95ee51b48ae86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f0:93:d9:43:2d:8e:88:43:ad:92:b8:f2:f2:
e1:3c:c5:f6:ab:3a:ca:c9:c5:ee:dd:d5:1a:1b:45:
09:17:cd:d6:50:f9:9f:a0:4d:88:c5:c4:89:45:49:
9f:f7:06:e9:7e:82:80:9b:50:ef:a6:c1:b8:68:3c:
c5:ec:00:51:64:2a:cd:e7:de:c6:9f:93:36:19:07:
19:c6:d4:44:b8:72:d3:fe:40:90:12:d8:2d:68:20:
b5:f6:ee:32:78:a4:fc:79:84:41:49:81:76:51:1a:
cc:00:32:f6:b1:7f:7c:67:23:14:89:a1:9f:28:4e:
27:c9:63:6d:1f:ad:75:29:94:a1:47:14:5a:48:ee:
1d:df:87:19:8a:71:4f:4a:7b:68:a6:80:37:82:b9:
c6:85:d8:cb:ce:94:be:4d:bd:4f:df:61:83:66:9f:
6e:e5:91:d9:a6:46:ad:3c:23:9d:c0:01:ef:f3:19:
f8:82:4c:18:93:fe:97:74:17:c0:d0:34:db:1a:d1:
95:fd:db:e0:9d:a0:f4:4d:ce:f6:ff:69:e6:21:47:
22:59:9f:33:0c:e9:a1:b9:dd:c7:d6:e0:a8:c0:fc:
d3:58:8e:d7:22:4b:8b:b8:da:df:56:ee:3e:fe:73:
8d:2b:2f:dc:85:b2:94:47:cd:01:77:3c:41:be:68:
4f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:13:80:08:B2:13:03:33:3A:2D:89:D7:81:E9:5E:E5:1B:48:AE:86
X509v3 Authority Key Identifier:
keyid:97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1d:22:09:13:f6:2f:09:63:ee:2e:be:04:1f:e6:78:8c:c8:
57:88:93:61:44:a4:e5:c4:2e:e5:3d:67:b4:d0:65:78:c8:0c:
ac:56:4d:43:d4:30:ba:7f:da:f3:77:77:ce:bc:74:54:87:3c:
0d:5f:c3:08:6d:75:66:78:d0:9d:e2:15:e5:1b:73:3f:36:77:
44:01:5d:c1:36:b4:9b:5a:f9:ac:fe:c0:a6:67:fa:8e:d3:4d:
db:cc:f1:74:2e:e8:b2:0b:c2:43:9f:52:0f:cf:6d:df:5e:a3:
d4:f2:a6:67:39:ad:95:49:6d:61:61:0f:05:86:e1:72:b1:e0:
67:22:be:16:d4:49:4c:95:d2:19:7b:d3:67:9a:ce:53:ba:57:
d9:74:a6:a2:f2:a5:2a:64:f6:25:06:fa:8d:93:4e:0e:42:09:
5a:51:0e:3b:25:11:b3:25:a4:99:57:0e:89:95:43:c2:f4:05:
bd:9c:6b:e8:f2:92:99:c1:ee:40:da:19:1c:7c:35:7f:b1:8d:
1c:e2:43:f7:78:d0:af:48:ec:99:e7:a3:60:39:6f:39:9e:33:
18:9d:07:cb:c4:28:96:04:e3:b2:8f:37:1d:d7:69:8a:c6:75:
38:a6:e2:cd:15:b1:59:e3:be:89:cc:64:24:28:5a:5e:21:a3:
b4:ef:90:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:26 2025 by rpki-client