Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
File: L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json)
Hash identifier: s1fQurLu8E1tshRHNQI1HmO9gUbRozPyLJ60b1ATHBI=
Subject key identifier: 6D:A2:29:C5:2E:BF:74:C7:DC:76:2A:3A:5C:79:23:60:95:70:62:01
Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
Certificate issuer: /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Certificate serial: 0195797E7DA6480F92BA793D16B5235E30D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
Manifest number: 148A
Signing time: Sun 09 Mar 2025 06:01:27 +0000
Manifest this update: Sun 09 Mar 2025 06:01:27 +0000
Manifest next update: Mon 10 Mar 2025 06:01:27 +0000
Files and hashes: 1: 8vDMjaVS40emmzGFVsGL0I8-fQo.roa (hash: ZQlfpvu51NDsYdzNjhzj60BOHewjbF75+WG+cK0BDP8=)
2: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: 0hodnagY+UIiY+eRtSfe0Y6yA7IGo7xOTsanLBsl2p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:7e:7d:a6:48:0f:92:ba:79:3d:16:b5:23:5e:30:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Validity
Not Before: Mar 9 06:01:27 2025 GMT
Not After : Mar 10 06:01:27 2025 GMT
Subject: CN=6da229c52ebf74c7dc762a3a5c79236095706201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:12:87:56:04:f4:58:62:d4:c5:31:3e:71:
17:af:8e:ba:78:b4:44:f6:b7:dd:30:5e:39:2c:93:
14:fd:59:6e:18:32:8b:1f:6a:68:f5:d9:cc:68:9d:
da:c6:8f:ae:32:aa:02:4b:f4:02:90:f8:d4:91:5b:
39:b5:40:da:44:3d:c9:b8:4d:9d:17:aa:da:30:06:
95:3d:31:45:d2:35:73:88:0a:f8:de:a5:e4:a7:a7:
02:94:af:7d:82:f4:34:03:fa:66:df:59:97:77:de:
1e:ba:16:7c:c5:9d:15:2d:85:be:32:27:66:84:70:
a8:d0:78:0f:a0:05:74:db:bf:bd:3d:58:84:c7:76:
a5:ce:a8:3e:e1:67:21:97:f8:9a:e4:61:54:fe:8d:
72:ec:9f:91:1f:d2:a3:87:d6:5d:de:28:90:c7:d7:
0f:8e:d4:91:8f:4a:79:44:84:1a:dc:9a:e3:92:e3:
74:53:fe:90:c0:45:bf:58:2c:3b:0b:0a:c1:f8:6f:
dc:4f:24:5e:be:34:2f:4e:a5:e9:14:11:12:d5:6b:
eb:65:16:28:b3:f5:1f:5f:57:76:ab:04:d4:e0:70:
f3:f5:4b:7c:09:23:7a:2d:e5:c2:6b:cf:f3:67:98:
ca:fb:09:50:15:e3:ad:da:7d:fd:cb:37:b9:a7:74:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A2:29:C5:2E:BF:74:C7:DC:76:2A:3A:5C:79:23:60:95:70:62:01
X509v3 Authority Key Identifier:
keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0a:22:2a:33:8f:70:88:44:99:e4:d2:3c:a2:b2:61:84:52:
41:d4:a5:55:f7:69:e2:4d:d8:ff:72:95:5e:3c:80:aa:39:7d:
0c:93:5a:d1:ad:76:80:94:58:18:b7:6d:a3:03:96:82:3e:99:
c9:9a:ad:6c:82:3d:fa:a1:eb:f8:5a:87:0c:85:f0:b5:43:09:
78:50:ba:ef:c0:0f:e7:ca:04:44:6c:82:9c:4a:64:91:f2:09:
20:7c:63:4b:5e:fe:74:9e:58:a3:cf:c4:d2:5f:4b:b9:45:15:
1e:f4:3b:87:20:18:d8:e5:4c:61:cc:ae:17:d7:8b:7a:17:c1:
0b:a7:69:45:9a:f7:91:e0:a2:77:66:4c:22:93:20:b1:a6:ef:
fd:fe:2e:ea:60:ac:68:a5:e7:5e:b2:f9:4e:3f:87:b5:21:4f:
00:ba:41:96:82:93:f2:27:af:5d:7c:10:2d:79:b0:e7:39:8f:
2b:08:73:41:f1:78:03:83:0a:e7:ca:4d:e1:36:c2:cc:bb:4c:
d2:9b:6a:3f:df:be:52:9c:1c:99:85:40:98:25:cc:15:07:e2:
14:e6:da:0b:26:d9:18:51:55:36:c0:23:a7:06:49:a3:fb:5c:
47:74:2c:d8:52:02:8e:cf:66:6b:73:75:3e:29:5c:80:49:fb:
49:8b:fb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:16:44 2025 by rpki-client