Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft
File: lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft (raw, json)
Hash identifier: 6VqgCxdZM8Jl+oQqA7Ggqp3vL9OHychHi+9SZJAUQWA=
Subject key identifier: 2C:05:3D:9C:6A:55:7B:BB:A3:AD:8B:AC:C2:16:F9:A1:75:09:AC:AE
Authority key identifier: 94:3E:82:7F:66:D5:B3:95:5F:E6:D7:3B:A0:F1:5F:BA:AC:8B:51:50
Certificate issuer: /CN=943e827f66d5b3955fe6d73ba0f15fbaac8b5150
Certificate serial: 0196556E67A9A5448CCF6B12563AE1EE983A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 23:00:20 +0000
Manifest this update: Sun 20 Apr 2025 23:00:20 +0000
Manifest next update: Mon 21 Apr 2025 23:00:20 +0000
Files and hashes: 1: 7gS8nFstYvHiaaGc7IpNtagOuCY.roa (hash: 4SiUHytZpEAnR4OzG8jjEPYSBs2q4THE0R+2ggxYfSc=)
2: lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.crl (hash: 7VxnkVNG1BewQ6HGuCFpE7L/ub4zoRElPxKT8pT7nIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:67:a9:a5:44:8c:cf:6b:12:56:3a:e1:ee:98:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e827f66d5b3955fe6d73ba0f15fbaac8b5150
Validity
Not Before: Apr 20 23:00:20 2025 GMT
Not After : Apr 21 23:00:20 2025 GMT
Subject: CN=2c053d9c6a557bbba3ad8bacc216f9a17509acae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:22:2b:47:a1:3b:f5:af:39:9c:fd:94:22:
b0:45:db:d4:27:39:29:db:b5:1e:64:94:84:e2:fa:
49:07:b1:66:48:b4:16:be:76:5e:eb:87:60:d3:74:
c0:6c:36:09:66:35:7d:6a:4e:1c:b8:5d:d5:fc:30:
69:eb:6a:17:a3:12:d8:91:ee:6a:e1:cf:9a:b9:01:
78:be:31:87:58:62:ac:b9:07:9e:65:95:2b:41:ea:
46:46:b9:3f:18:8f:68:75:b5:ed:ca:ac:41:7d:9c:
88:35:db:4f:20:f9:9e:ec:eb:ce:fb:16:4b:c2:23:
91:d9:ed:e9:f2:e0:b7:02:0e:7e:de:f2:65:a5:83:
4a:c6:da:6d:4d:b6:ab:b6:0e:b6:e9:9a:05:3d:3c:
c8:ff:d8:87:4f:69:7f:3b:60:b9:2c:1b:3c:84:f4:
ae:b5:c7:a1:d6:7a:37:3e:f1:5f:22:8d:84:42:73:
f7:ae:1e:aa:a9:0b:03:71:0c:a5:5e:ac:80:b2:1d:
af:7a:36:5b:81:2d:ca:ab:12:19:1a:e0:74:fd:a1:
6f:fa:35:6e:98:d5:cd:c8:b1:9e:1f:4f:24:f6:27:
52:bb:96:74:be:af:0f:6f:59:c7:3f:29:65:b4:4f:
b2:76:02:ad:fe:11:d1:57:aa:3e:70:a5:0e:9a:b6:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:05:3D:9C:6A:55:7B:BB:A3:AD:8B:AC:C2:16:F9:A1:75:09:AC:AE
X509v3 Authority Key Identifier:
keyid:94:3E:82:7F:66:D5:B3:95:5F:E6:D7:3B:A0:F1:5F:BA:AC:8B:51:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/08b59b-4fd3-4569-9b56-1e0cc5e158fa/1/lD6Cf2bVs5Vf5tc7oPFfuqyLUVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:aa:74:48:85:ae:5b:00:37:34:d0:8a:bf:04:6c:d5:85:05:
38:38:b5:bb:83:63:d8:ea:56:50:af:d0:34:60:1d:80:2b:26:
de:ed:6f:ec:77:03:82:4c:a8:ac:d2:e7:a2:00:b9:12:40:c3:
c1:22:ed:c4:80:30:8d:96:8e:4e:04:04:30:ff:cc:20:a2:4c:
ea:c3:1d:f8:42:eb:4a:07:14:13:8c:1e:9a:77:08:b3:38:a9:
a8:6d:12:a8:30:9f:f3:c5:c2:7d:c0:cd:1e:ca:94:de:d6:06:
85:65:42:5d:5c:80:f6:42:e2:09:b5:b3:e1:5f:db:35:7a:39:
ce:49:35:a6:bd:23:82:e6:ae:0d:85:35:3c:c0:82:3d:b9:1c:
13:dc:4e:76:f7:6c:cb:10:20:55:f5:16:2f:56:13:8b:f8:eb:
0f:89:cb:b2:7a:f1:4a:39:26:0a:90:17:f2:73:5b:5e:73:9d:
d3:bf:99:30:ac:26:b2:1b:43:fe:0e:51:f8:2f:6f:c2:9e:44:
a8:ac:8c:08:c9:3a:2c:42:f0:7a:64:60:13:c5:ef:29:af:7e:
84:d5:78:01:07:59:fa:12:7d:f5:95:df:79:29:28:30:cf:e0:
bf:33:24:cc:59:e1:ec:2d:bc:b9:fc:5b:1a:65:d4:9f:11:26:
44:76:01:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:42 2025 by rpki-client