Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
File: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft (raw, json)
Hash identifier: Rbpp2XsIrEOLUHwm3MOJ0vHwWhgJ9YcQUWdok1n+edY=
Subject key identifier: 97:C7:65:C2:7E:6A:C1:90:71:79:D8:66:8E:7F:14:9F:1A:76:FA:4B
Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
Certificate issuer: /CN=d0baab9bd8c69d07b6501147543df74270a33a21
Certificate serial: 0196387745FED470ECF1B5BAF0AE5FB38601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
Manifest number: 14F0
Signing time: Tue 15 Apr 2025 08:01:02 +0000
Manifest this update: Tue 15 Apr 2025 08:01:02 +0000
Manifest next update: Wed 16 Apr 2025 08:01:02 +0000
Files and hashes: 1: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl (hash: 6u7rAuGMAjQEpHT4sJ6U1OjahYlCer/28o4/fH7/o9c=)
2: juIbMy-ZOag5FvgvGV0o5yTeEN8.roa (hash: +hUGE34YMtW1+houvKxGq1sllVhVFyMUSU1KkXLa0fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:77:45:fe:d4:70:ec:f1:b5:ba:f0:ae:5f:b3:86:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21
Validity
Not Before: Apr 15 08:01:02 2025 GMT
Not After : Apr 16 08:01:02 2025 GMT
Subject: CN=97c765c27e6ac1907179d8668e7f149f1a76fa4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:e0:29:68:03:2d:d6:42:29:50:b2:0d:21:
87:c2:18:e0:17:85:5b:ee:4e:8e:18:f1:6e:c6:f9:
5d:5d:3d:b8:94:77:36:b2:fd:2b:13:14:4f:d0:45:
b2:01:65:9a:0e:60:93:40:33:2e:67:89:46:68:fb:
ab:2a:7e:83:22:64:bc:3b:c2:ba:12:ae:c8:d9:45:
47:eb:a6:bf:c1:25:2d:57:73:12:a0:53:bf:02:92:
00:69:30:d1:3c:7c:fb:b4:5e:02:3a:28:20:e6:c2:
cd:8c:e2:df:56:ac:9e:3a:33:a5:28:cf:8c:e6:13:
c9:b1:93:08:2d:85:e0:20:87:76:ea:61:88:31:07:
7a:73:9e:dd:3b:0b:90:4e:dd:a9:fd:f6:06:5b:c4:
0e:98:47:44:55:a8:19:e9:d8:3b:75:d6:83:3f:5e:
a0:4f:94:96:82:99:65:fb:9e:9c:38:6a:da:c3:d4:
96:8d:68:22:69:d8:5c:94:4e:2d:47:8e:d3:67:b7:
b1:4e:1c:8b:20:06:50:c7:d9:0e:16:20:40:25:e4:
33:d3:5a:4e:15:2e:5b:b3:b6:fd:1c:3d:b2:61:96:
30:06:af:bc:e3:43:50:75:67:d6:97:b1:fd:84:54:
af:ea:08:fa:2f:be:cc:0a:84:3d:75:fc:81:2e:5a:
0b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C7:65:C2:7E:6A:C1:90:71:79:D8:66:8E:7F:14:9F:1A:76:FA:4B
X509v3 Authority Key Identifier:
keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ad:e2:fe:a1:dc:b4:ac:6a:a5:b9:2d:67:97:01:90:1e:50:
90:60:f0:f4:00:cb:93:db:71:f0:55:a2:e4:65:c5:22:63:d2:
c1:be:eb:39:66:bc:33:7d:83:88:fb:8e:8a:5a:61:be:50:47:
29:8e:c6:e3:4a:14:e2:11:84:35:7d:0f:6d:bf:cc:ea:d1:17:
55:24:ca:7e:11:28:04:b2:89:b7:3d:8d:11:8f:e4:ee:65:7e:
af:a9:bc:b8:86:81:06:fc:44:25:15:20:fb:39:43:37:3a:b5:
be:20:7c:15:9d:00:1f:f8:0d:52:52:8c:b2:79:c4:46:05:f4:
35:da:5f:22:ef:67:7e:9a:77:6f:5b:00:e8:55:9b:cb:b8:38:
b6:fa:b7:0f:dc:d5:4f:f8:06:5b:3d:06:0f:56:bc:d7:21:70:
c8:04:91:67:9e:d3:a2:27:de:30:bc:80:ad:e7:15:60:2a:ba:
42:c3:e6:22:bb:c5:9a:53:82:be:d0:c1:57:c0:cf:b6:fb:be:
ea:e6:cb:4c:35:bf:b3:12:c7:d0:f9:e7:4b:16:38:dc:e7:92:
2f:d7:57:f4:5c:bc:6d:ee:20:cb:d3:6d:4e:87:90:2b:16:89:
b5:e8:45:21:c3:98:16:51:98:cb:a3:4d:92:29:c7:54:fd:f7:
41:ff:01:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 17:49:43 2025 by rpki-client