Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: W8Cm1CLdv+hwtLGeZWLp2klsp/k9xVnRELcpUR4V0N0=
Subject key identifier: 48:4D:3B:4C:DB:21:E6:AC:77:2B:7B:EE:E3:49:86:AE:54:F8:19:00
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 01964B90365E3917A3581E78AC660E1FD586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 01:01:04 +0000
Manifest this update: Sat 19 Apr 2025 01:01:04 +0000
Manifest next update: Sun 20 Apr 2025 01:01:04 +0000
Files and hashes: 1: 8sEeUpZ4L2z7RPtSPsfM7zrXG4M.roa (hash: mpcNRDaaoRvH9rywJlovNltKEUBpKG8cjm1Uf7rVmic=)
2: b0eHpcDmofhiq2yDQv5L8LhktMQ.roa (hash: n+x8ttc272B8eeajhUuy0X0SsSR7O/WsKWjyViKV6hg=)
3: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: cfszSK+qMdQpFHpx9QxbGl6GOnn0gf3eB3UYRkuBEm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:36:5e:39:17:a3:58:1e:78:ac:66:0e:1f:d5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Apr 19 01:01:04 2025 GMT
Not After : Apr 20 01:01:04 2025 GMT
Subject: CN=484d3b4cdb21e6ac772b7beee34986ae54f81900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:7b:27:6f:64:09:4a:49:fc:d5:00:12:84:
37:f5:56:d0:28:62:01:f6:ae:b0:eb:9b:ce:da:0a:
7c:bd:6e:3f:c2:12:ad:bc:fc:7c:90:38:8b:31:94:
5a:27:74:e0:44:0b:24:a2:d1:3d:f1:9d:a6:de:41:
99:85:9d:b4:10:10:5f:0f:b1:c6:2c:39:95:bd:62:
b7:2a:de:15:e9:c4:9a:00:c4:c4:e6:62:31:76:e1:
2c:4d:d8:24:da:01:aa:81:8e:10:a3:af:29:1e:1f:
cf:71:bf:b4:62:09:96:b9:fb:1a:45:23:96:03:47:
36:c5:c3:6c:90:33:76:5e:cd:ec:b9:9f:a5:15:f1:
70:b1:39:46:e9:12:b9:b2:d3:d2:8f:cc:a6:89:8c:
c6:98:d1:c7:e6:cd:74:ff:0b:b0:24:4f:b9:72:3f:
d1:2b:24:23:3a:38:2b:c3:bf:77:d7:39:22:15:9c:
5e:a5:a3:d6:c0:99:ff:89:e3:78:5f:70:16:fd:29:
87:5a:22:91:fb:6c:8d:0a:d6:f4:f1:3d:35:a3:a9:
cd:96:e5:96:1a:f2:95:85:ab:41:3c:87:1f:76:86:
bd:2d:5c:37:d5:18:39:ba:68:cf:df:40:61:59:6b:
a4:31:3a:85:6e:e3:7e:e6:66:c2:09:f9:30:7a:01:
35:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4D:3B:4C:DB:21:E6:AC:77:2B:7B:EE:E3:49:86:AE:54:F8:19:00
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:04:59:08:b9:77:74:ac:2e:9c:4b:91:f8:41:f6:ec:17:a4:
cc:ac:31:cc:54:d0:24:e6:3c:ad:e7:79:f9:cf:94:8c:82:1e:
b9:e0:8b:62:bd:3c:4e:51:d2:e0:e2:1d:fe:4c:b8:97:53:0b:
f9:33:ca:2a:6d:fc:99:45:76:65:de:73:a3:ed:39:b6:e3:0a:
09:c3:ea:17:e1:b2:44:03:a8:1e:bd:47:82:26:bf:87:1e:ea:
6c:63:1e:49:8e:1e:ca:2a:19:ab:d0:e0:8c:62:80:64:67:8e:
e3:40:dd:71:f1:50:51:d0:0d:a8:00:d1:19:c9:c9:a0:60:89:
39:2f:99:16:4d:27:c9:2a:0a:67:67:92:cf:3f:57:1d:b6:b0:
3d:05:e1:71:6d:77:2a:b4:ec:e3:b6:f1:2d:8e:7a:d1:df:57:
1a:69:8d:d9:54:c9:9a:20:cd:da:6c:b4:4e:c8:22:3c:cd:6d:
87:03:a0:55:87:1a:d8:14:9d:c7:41:a3:a4:04:34:68:16:7e:
a3:39:96:7f:59:3c:9b:a0:67:74:eb:fd:a2:13:5c:98:dc:59:
52:91:ba:dd:f8:ba:6a:61:d1:b7:15:02:fb:f1:f5:1c:cb:0d:
2f:b0:cd:b6:b5:55:cd:9c:22:42:6a:f3:46:9f:c1:28:14:73:
a7:14:4f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:04:13 2025 by rpki-client