Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: 4mL+Sn2Sl5c7S2ksGIx8c/nwnVTIoher+0ArOhCzp6E=
Subject key identifier: EF:EC:66:3B:24:68:01:81:7C:B6:25:CE:D4:38:59:E9:23:CF:85:5A
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 0196579394B27BE4CC0912F2FFBE063D9A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 148F
Signing time: Mon 21 Apr 2025 09:00:11 +0000
Manifest this update: Mon 21 Apr 2025 09:00:11 +0000
Manifest next update: Tue 22 Apr 2025 09:00:11 +0000
Files and hashes: 1: Kvab69Fm55apwC6CNn_puTpqnco.roa (hash: SXQsTZgWdcQi8ndza2+PpabIjMyNvdIkKjFoA2OkVbo=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: 1CLHclETgenEffBkWxbzI6zZevzMBlJn2Xr3mnfwbrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:94:b2:7b:e4:cc:09:12:f2:ff:be:06:3d:9a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: Apr 21 09:00:11 2025 GMT
Not After : Apr 22 09:00:11 2025 GMT
Subject: CN=efec663b246801817cb625ced43859e923cf855a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a3:d0:09:b7:b2:0b:c0:de:29:e3:5a:00:63:
1c:ae:68:d2:7e:a8:36:8d:3f:16:98:53:1a:8b:48:
80:10:71:ef:55:c1:e7:b8:cf:5b:8e:ee:96:dd:4d:
99:0e:22:36:f7:15:46:b1:5d:63:89:43:c8:96:5f:
a5:73:9e:07:7a:38:a5:f8:e4:90:39:06:70:9f:0d:
ad:9e:26:78:6c:1d:e5:0f:5c:ab:de:af:57:f4:d8:
ff:21:de:63:0c:8f:35:64:cb:40:4b:54:14:54:16:
9b:7e:38:13:7d:16:6c:d5:6d:4e:15:f1:75:86:44:
bc:1f:0e:a5:13:b9:de:24:3e:b8:37:b0:63:e7:09:
2c:0b:8e:dd:1c:6e:36:a9:72:2c:03:02:cc:af:02:
65:cc:6f:31:41:4a:99:9b:32:bb:85:2e:27:c4:b0:
76:52:c7:a2:f7:96:17:2b:30:f3:c1:81:63:95:27:
2a:31:91:51:b4:36:ef:79:7a:c3:cc:2c:42:5d:3e:
b7:3c:59:67:e7:88:16:ef:f8:38:75:46:43:ff:a2:
a8:60:b3:3f:1c:2b:cc:62:a5:07:4c:32:f2:21:01:
ac:88:a4:81:3b:2c:38:e6:34:c0:e7:67:cf:bc:c1:
c3:7f:c1:4d:eb:bb:54:7f:5a:d4:61:fb:84:f1:76:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EC:66:3B:24:68:01:81:7C:B6:25:CE:D4:38:59:E9:23:CF:85:5A
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1d:b1:09:1a:33:35:01:26:06:91:cf:bb:1d:0f:2b:d9:e6:
e2:dc:f6:97:69:61:de:92:d5:fb:55:3d:04:d9:7f:3f:57:3a:
17:06:87:db:16:38:7a:09:02:4b:97:f2:51:7d:bf:63:bf:22:
d7:3b:e6:2a:19:f4:4f:96:a9:5f:59:b9:45:52:b8:04:d0:ab:
15:58:26:30:74:d4:b0:b1:bb:06:72:05:f5:5d:73:6f:5b:d3:
4f:ee:c6:da:fc:be:25:3b:63:2e:f8:fd:7a:3d:ad:32:9c:e5:
a1:43:a3:9f:e7:37:08:51:ec:0b:64:16:f0:94:80:7e:69:be:
37:77:d0:43:44:98:23:e9:b9:5f:08:7d:5b:d6:4e:06:8a:38:
43:ac:e5:1f:db:0c:cc:8a:0a:de:14:86:fd:04:f0:34:fa:c9:
77:14:03:b4:b5:15:7b:33:ba:0a:ef:bf:6a:a4:5f:9b:a0:8f:
fa:20:84:0e:79:59:8d:4d:b9:2c:d9:a5:6d:59:1e:9b:7e:23:
81:32:03:e6:98:2d:26:55:bc:77:80:53:98:97:28:2b:8e:2e:
83:4b:16:9a:90:96:a3:0c:77:61:62:d9:ea:0b:65:7a:37:de:
7d:c9:96:a6:cf:f5:c0:ad:da:b9:42:0e:84:cb:4a:89:4e:7c:
0f:bb:ec:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:41:29 2025 by rpki-client