Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
File: lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft (raw, json)
Hash identifier: RreoB3U2VAIYZT8HkLyP51GTJDJUsnvhQlgBsZlUt/A=
Subject key identifier: AB:B9:F4:DE:08:3D:3F:33:E5:AA:0D:A1:16:02:81:3D:83:5D:0D:DD
Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
Certificate issuer: /CN=96b8121d556df453456553dcb45c4143f4cdd213
Certificate serial: 01958CCEBC0B303EE0380F7A086B36CED579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
Manifest number: 0716
Signing time: Thu 13 Mar 2025 00:01:53 +0000
Manifest this update: Thu 13 Mar 2025 00:01:53 +0000
Manifest next update: Fri 14 Mar 2025 00:01:53 +0000
Files and hashes: 1: lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl (hash: 9WKLZMdi9Real0r3UVJK7eMymxHhHfX+g176C7ftABo=)
2: qP3YU_S4LUHGi-PUyOS9YdXOrOg.roa (hash: 86gRYjmoaW5iHjfh3rXQG4yuY8yHQt9SBONVBj8bSuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:bc:0b:30:3e:e0:38:0f:7a:08:6b:36:ce:d5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213
Validity
Not Before: Mar 13 00:01:53 2025 GMT
Not After : Mar 14 00:01:53 2025 GMT
Subject: CN=abb9f4de083d3f33e5aa0da11602813d835d0ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:09:bb:cc:2e:81:fc:b6:2d:a7:57:b4:ab:
2b:67:36:98:92:a7:fd:ec:cc:ec:bf:35:b9:29:05:
e9:1b:7f:77:cc:cb:da:8a:94:51:91:51:d4:a7:d1:
ea:f7:03:4c:78:ac:5d:d1:f2:89:13:09:7d:2d:33:
94:2b:2b:6c:6e:db:bd:c6:e5:d5:1b:53:f8:ed:87:
d1:af:bb:64:91:8b:d6:75:00:ea:12:47:21:c2:9c:
c1:9b:44:f3:85:20:3f:56:0e:29:2f:90:27:2b:6b:
71:48:13:a5:9b:12:ad:5c:dd:18:fb:73:cf:56:92:
18:ee:03:16:55:4c:cf:b7:17:a0:73:46:9f:41:32:
51:0c:a5:6d:de:fd:9c:29:27:d5:0c:fa:b3:c1:19:
1c:20:c1:52:cb:f5:a9:f4:7a:a7:0c:66:78:b7:4f:
d7:e8:07:59:3d:e2:f7:04:13:0b:ef:27:4a:12:74:
79:fe:aa:22:3e:43:0b:d7:ca:b9:28:0f:c3:06:2a:
c0:ff:56:f1:9d:92:0b:bf:f7:80:51:b1:a4:45:cf:
dd:b6:af:ed:d2:f5:79:1b:50:ee:c5:9c:e7:51:bd:
f5:5b:5f:c6:55:7b:8e:e0:25:5e:59:36:0c:a5:fa:
a1:90:c5:b6:4c:70:be:f4:fb:23:0c:2d:a0:7c:f2:
b9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B9:F4:DE:08:3D:3F:33:E5:AA:0D:A1:16:02:81:3D:83:5D:0D:DD
X509v3 Authority Key Identifier:
keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b6:d3:d9:f9:19:7e:37:ec:9a:4b:26:59:17:5a:47:cf:ef:
7f:bd:c7:ea:ca:18:f8:53:d5:b9:ac:5c:dd:97:97:b3:39:7c:
19:c3:18:60:f9:a6:e1:da:76:01:eb:34:71:1f:0b:40:82:31:
9b:a3:0b:46:7f:da:a2:2e:31:99:f0:55:7d:0c:a1:32:81:15:
76:cc:59:b2:14:68:8a:0f:eb:00:62:0c:9e:79:4f:42:38:f7:
e2:18:94:a5:8f:74:7f:c1:12:f7:2a:14:46:a7:69:80:f3:76:
bd:95:2a:51:c2:8e:8e:1b:2b:08:23:12:97:51:3f:08:af:e0:
73:e5:ae:f1:a5:e3:8a:24:84:e5:28:59:6e:2a:15:37:40:b0:
15:34:c3:cb:c8:f6:70:3d:d4:08:55:1e:ff:39:c2:35:63:da:
c3:2c:57:48:35:70:f8:e2:86:96:c0:38:8c:e5:2f:dd:7e:94:
03:bd:68:b6:89:5d:e8:48:46:e1:7c:10:00:c7:99:af:76:a4:
a9:84:89:80:19:4d:cb:8f:c3:13:77:2e:fd:b4:28:b6:46:5b:
7d:0c:59:89:05:99:22:f7:00:13:36:27:a7:45:37:a6:e5:c8:
18:16:48:11:77:d0:cc:32:da:34:7d:9c:99:76:28:43:85:9b:
eb:29:c6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:06 2025 by rpki-client