Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json)
Hash identifier: dlHt/bmBSP6AlWzra9V3UJhfzOvlO1tO6TgNGpKLHRw=
Subject key identifier: 99:38:A3:1E:73:E1:26:36:07:69:EF:8D:80:5C:C8:8F:6C:6F:D3:74
Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c
Certificate serial: 019511352AF7ADDBF1AF434A5B974A61EA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
Manifest number: 13D7
Signing time: Mon 17 Feb 2025 00:00:51 +0000
Manifest this update: Mon 17 Feb 2025 00:00:51 +0000
Manifest next update: Tue 18 Feb 2025 00:00:51 +0000
Files and hashes: 1: jEYee-uOwLf9rNeDWIsHdJ75KKw.roa (hash: /wehpCViK0XYDMQCz1eNAOOXNcexzwchRQ7CIA4o1RM=)
2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: hHgjSHJQOfoTm/NPZmz2ertf1Gsw9zigab7WiFUJzeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:2a:f7:ad:db:f1:af:43:4a:5b:97:4a:61:ea:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c
Validity
Not Before: Feb 17 00:00:51 2025 GMT
Not After : Feb 18 00:00:51 2025 GMT
Subject: CN=9938a31e73e126360769ef8d805cc88f6c6fd374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:65:a6:43:e0:7f:92:85:24:22:fc:25:bc:23:
5d:63:09:4f:26:1f:f1:c0:ec:d4:7c:d3:cc:f1:fa:
ce:33:04:42:f1:3c:e4:3f:b6:f1:09:fb:d3:a3:5d:
ac:fb:77:cf:e0:82:3f:36:ba:92:47:68:eb:a0:ed:
d5:59:5a:ac:d5:cb:cc:9b:f7:10:ef:92:fe:87:ab:
ab:41:bb:d4:94:6c:83:4a:63:c0:5c:9a:9f:8a:b1:
e2:8f:40:2e:4b:ed:96:d6:1c:60:91:4a:88:7c:2c:
ff:e3:ca:9d:1b:cf:95:33:53:91:39:37:77:d4:33:
bb:72:ef:dc:bd:3f:0d:9a:0d:c9:3d:b6:d8:39:90:
dc:16:0f:c7:82:33:79:df:9f:ce:db:59:85:c3:29:
e1:b8:37:70:8e:25:bc:02:8d:ea:79:16:99:1c:60:
ed:b6:76:85:a1:65:b2:e7:c1:4f:fc:16:7b:64:e0:
6c:76:d4:b2:d5:b3:bf:e6:3d:02:d8:23:5f:df:5c:
39:df:87:1c:d7:89:c1:03:9e:41:f6:b4:3b:6a:2d:
94:23:a3:21:5b:b9:b9:b3:04:ab:c7:c5:c0:24:8b:
fd:ca:e4:ca:ae:b1:26:6f:4f:5f:7c:f5:e8:c2:8b:
a3:cf:93:d7:04:03:8f:ff:b3:10:cc:b5:48:05:91:
7c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:38:A3:1E:73:E1:26:36:07:69:EF:8D:80:5C:C8:8F:6C:6F:D3:74
X509v3 Authority Key Identifier:
keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:16:0e:d8:c4:1f:38:7e:7d:c5:fc:95:de:52:2c:42:2a:9d:
1e:a7:5b:d5:ee:ea:95:01:d2:3d:4a:db:5a:af:c9:a7:91:66:
68:53:a5:f3:d7:d7:8c:91:b9:6a:53:6f:1e:41:d7:46:23:6f:
4b:8e:85:a9:ab:47:37:64:34:f1:0c:e9:2e:68:d1:6b:6b:2b:
1b:6c:60:1e:d8:d6:74:b5:7f:6f:48:b1:de:78:26:74:fa:f5:
50:23:d3:50:b4:f7:68:2d:7b:94:43:e6:bd:43:3a:cb:41:be:
77:f4:92:6b:e5:0e:82:51:37:f9:f4:0b:7f:a2:48:1d:2c:9e:
56:10:c2:04:bf:4f:80:74:15:1c:fe:32:42:7f:07:a6:d5:e7:
6c:2b:51:c1:80:0f:c7:a5:18:51:85:59:b8:4c:c5:74:90:3b:
43:03:f6:17:7a:37:a3:f0:b2:ad:8b:1a:47:c3:57:bb:22:02:
7d:40:e8:c8:ea:a7:d9:85:a6:4a:94:4c:55:90:c3:ff:4f:38:
c3:8a:02:c6:74:6f:d8:2d:9a:d2:96:25:57:28:ba:d6:a8:f3:
66:db:dc:34:24:6d:e9:46:21:1c:98:b6:d3:9b:0e:d5:76:77:
2c:54:fc:95:3f:8d:db:6f:0c:67:81:7c:15:23:36:b5:db:3b:
f1:36:7c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:29 2025 by rpki-client