Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
File: Lo7asSIV4pvTjB2pteOWvQyWvgk.mft (raw, json)
Hash identifier: 0c4S5TGg/q2lXLiJ2J3eS7YyFqW/bzuqj+RHATd4uzc=
Subject key identifier: 9E:A0:E3:9A:66:7D:5A:71:64:07:62:4F:31:67:F9:37:A4:A3:7B:25
Authority key identifier: 2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09
Certificate issuer: /CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
Certificate serial: 019655DCD4786CBFD946D0242A020D2AA043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 01:00:57 +0000
Manifest this update: Mon 21 Apr 2025 01:00:57 +0000
Manifest next update: Tue 22 Apr 2025 01:00:57 +0000
Files and hashes: 1: 036tWscrBo3WQktUJkLutI8dnhI.roa (hash: SbRgrcoBWhT2vLik5V86VTcCJ3Ave5F15tRHkOT5qDg=)
2: Lo7asSIV4pvTjB2pteOWvQyWvgk.crl (hash: FBsCkkq6HbtTD8YUbv28oIZ1RbOa/lyIgXVoGtokCiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:d4:78:6c:bf:d9:46:d0:24:2a:02:0d:2a:a0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
Validity
Not Before: Apr 21 01:00:57 2025 GMT
Not After : Apr 22 01:00:57 2025 GMT
Subject: CN=9ea0e39a667d5a716407624f3167f937a4a37b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:79:c2:0a:d0:d0:62:80:bd:95:fb:15:87:86:
68:3b:7d:75:d9:d1:84:1a:71:cb:9a:7e:40:21:3d:
e7:b0:11:e3:95:c4:61:59:be:0a:4f:a1:b2:c4:96:
dc:a9:9b:bf:ce:c0:f5:d9:ad:12:1d:18:7a:df:31:
ae:d1:b8:00:5b:04:17:04:6f:ef:c0:50:3f:80:95:
d6:ff:5e:a5:02:34:5a:4e:2a:6f:93:c8:e8:99:cb:
bb:35:90:db:ea:c8:af:da:52:54:f5:28:ca:24:66:
b1:39:7d:3f:a9:49:67:ca:5a:1a:8d:34:da:be:fe:
2e:71:30:a8:1e:d3:5d:f9:62:92:ac:cf:ad:80:88:
10:0f:e1:dc:06:e8:71:9e:3a:43:22:c4:1c:75:95:
21:1f:d1:01:33:45:fe:3f:f0:a6:08:75:ca:bf:a8:
9d:60:1d:83:50:22:c9:9c:0a:e8:f1:3b:66:fd:6e:
69:26:fd:15:de:0c:a7:67:bb:98:4a:8b:bc:16:f3:
17:11:23:05:0c:09:83:84:af:b0:e4:45:67:10:5c:
cd:e2:b2:f4:c2:ee:23:4a:77:36:00:4c:8a:ac:7e:
da:89:62:cc:3c:bd:d2:b8:ea:17:23:3a:47:7a:83:
d3:61:16:37:5b:75:d1:fc:47:31:b3:2d:de:69:c6:
5c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A0:E3:9A:66:7D:5A:71:64:07:62:4F:31:67:F9:37:A4:A3:7B:25
X509v3 Authority Key Identifier:
keyid:2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:31:fb:9f:6b:f9:af:57:12:bd:b4:6f:06:67:06:62:14:c8:
45:44:07:9a:c1:41:b0:86:b2:17:79:f9:32:ae:88:0f:00:b7:
24:87:e5:98:b9:22:ef:67:fc:58:3a:39:69:0e:f3:74:61:b7:
82:7e:ee:34:d8:b6:09:a2:9f:9b:96:63:24:fe:69:b5:9b:11:
cf:57:85:36:fb:08:e2:b7:ba:c4:e3:bd:d3:fc:cd:8a:1c:a6:
6f:3e:33:96:45:dc:c3:2c:7b:aa:86:34:7b:42:61:10:b3:c9:
8c:01:98:bc:a4:b0:02:1f:96:bf:19:0b:ec:2b:7a:12:49:62:
28:ff:d2:2e:16:30:5d:4e:51:0a:1e:c1:19:3f:5c:f6:b1:6a:
8e:86:33:c9:03:1b:b4:cf:4b:01:b1:7d:f3:f2:53:09:22:b7:
d2:43:6a:86:cc:f5:5c:ae:6c:0c:34:9b:c0:ca:0a:08:66:db:
60:b2:df:68:df:57:f7:be:54:55:0e:fe:92:1e:5b:ae:00:11:
2f:a0:ee:cd:24:c0:1a:e5:a3:3b:4d:d0:ab:70:b3:83:b4:25:
5c:98:96:b1:ef:db:4c:05:98:e2:a9:6e:0e:2a:b2:cb:c2:5f:
83:f9:c3:4b:4b:36:1c:32:cb:ca:c6:09:de:0a:26:02:e9:54:
98:fb:06:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:14 2025 by rpki-client