Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
File: l96FxoT8_4PsQUirX29nzRUE-T0.mft (raw, json)
Hash identifier: kT/Bx7y4AyDKONyBmFKENW+FKlUfXtfbobxEr+npXPI=
Subject key identifier: 6D:5C:F6:AE:D1:3C:E9:70:62:E1:83:21:6A:43:EC:38:70:A2:28:06
Authority key identifier: 97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
Certificate issuer: /CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Certificate serial: 01962ABC2CD835D7409096ECFCA660A92483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
Manifest number: 0FFF
Signing time: Sat 12 Apr 2025 16:01:37 +0000
Manifest this update: Sat 12 Apr 2025 16:01:37 +0000
Manifest next update: Sun 13 Apr 2025 16:01:37 +0000
Files and hashes: 1: aNefWas-v_WpGI-_669JeJcpGCE.roa (hash: AyqK/NRp/xUAyry2Wae2nQWK8xpykIL1yZ7NXpMhO2U=)
2: l96FxoT8_4PsQUirX29nzRUE-T0.crl (hash: RoexsrW7QyDtqb11hbJB0PNe5s0h84/T3NPntfVArJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:2c:d8:35:d7:40:90:96:ec:fc:a6:60:a9:24:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Validity
Not Before: Apr 12 16:01:37 2025 GMT
Not After : Apr 13 16:01:37 2025 GMT
Subject: CN=6d5cf6aed13ce97062e183216a43ec3870a22806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:48:da:b5:e7:2d:67:09:58:0c:ad:d1:0c:
05:ef:36:ac:35:c9:9e:f2:ba:66:35:37:dd:6c:e4:
bc:a3:df:c8:e2:81:af:2c:21:96:d1:a3:63:f2:4a:
34:da:95:c8:24:5b:3c:aa:8f:aa:d8:e0:4b:ae:47:
df:10:32:01:2a:00:52:c4:ab:b3:e5:36:38:d6:4f:
3a:dc:c2:d1:21:76:92:07:1a:87:a0:64:64:fa:92:
8b:ed:10:f9:d5:79:5f:32:66:7d:e1:36:76:6c:4d:
f1:5b:65:21:62:f5:82:58:b4:6a:7f:0a:a1:be:b1:
76:c1:66:64:68:93:7e:8f:3d:c0:a4:b9:27:dc:44:
c0:39:69:a5:6b:70:32:f7:f3:7d:8f:71:54:15:7e:
7c:6e:75:5f:fa:e6:d9:29:36:d0:60:1a:ab:50:b6:
b7:53:55:1d:b3:24:55:f6:85:09:69:ae:ae:e6:57:
4f:30:55:8b:28:17:0f:98:a4:4b:35:19:bf:22:4e:
ee:27:04:de:e4:9f:2a:92:c5:3f:5b:3d:c4:d6:a7:
66:4e:73:c3:1d:14:d2:f5:ca:49:1e:61:3a:a1:77:
c9:c1:ec:23:01:c6:da:03:d4:32:d5:2b:7f:eb:d1:
9d:d4:59:8a:33:d8:61:d5:27:d1:e2:11:05:bd:9f:
9b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5C:F6:AE:D1:3C:E9:70:62:E1:83:21:6A:43:EC:38:70:A2:28:06
X509v3 Authority Key Identifier:
keyid:97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:82:44:d3:b2:b2:b1:2a:d3:82:8b:f8:f3:3d:a4:a1:24:c3:
92:27:ee:80:60:44:af:48:06:2e:4f:e8:36:f6:0d:71:9b:35:
cf:87:09:3e:64:42:9b:25:cf:bd:11:ab:48:a7:50:96:02:ca:
ca:32:ed:2d:73:fb:ee:7f:fc:9d:12:6f:45:3c:8c:c4:28:1c:
8b:0b:4d:59:56:30:73:91:dd:57:84:73:af:5b:f2:eb:95:a7:
32:f1:2e:84:25:c2:46:63:0c:00:fc:fb:78:51:29:c9:65:aa:
f7:22:7c:18:96:cc:5a:ee:d5:06:c1:49:33:d0:b4:8d:4c:e2:
69:1f:d7:37:78:20:ec:33:0d:48:89:4c:0a:30:1a:69:f7:c9:
22:63:9d:86:b1:b3:0d:78:ee:3b:e2:8c:1e:f4:df:e4:ad:65:
48:17:d6:a9:dd:a8:78:a3:f5:16:fc:dd:9f:f1:f8:e6:ac:7e:
2b:d3:38:a5:ec:53:bc:fa:4e:27:b9:4e:fc:52:c9:af:ec:94:
59:46:12:e2:44:56:ed:2d:b5:fd:56:c6:7d:13:4b:30:d1:bd:
f4:ba:1c:cd:9c:3a:ef:79:a5:c3:2f:20:2c:7b:e0:69:54:79:
4f:7c:fb:f5:37:6b:b3:b0:e6:bc:4a:7e:bd:7b:43:8d:fc:d3:
14:00:f5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:48:14 2025 by rpki-client