Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier: N/xyNMwE9gbgFHEsRS4wC09Ac+or+6tuj81dITkDP0I=
Subject key identifier: 48:B4:4E:B2:14:DC:33:F4:6A:7D:F1:45:20:79:87:BE:B9:09:DA:39
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial: 01964A464135C49EC947A9C9AEDE919CBE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number: 14DE
Signing time: Fri 18 Apr 2025 19:00:40 +0000
Manifest this update: Fri 18 Apr 2025 19:00:40 +0000
Manifest next update: Sat 19 Apr 2025 19:00:40 +0000
Files and hashes: 1: 2y9heUGpm4IABGcsawt9m5ijUw8.roa (hash: 3R+JVKPGvS+pF/oreszpE7P3zqEvUvswY+6b0jSRI3s=)
2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: EvZSPXS5BcgWS/7W75BRdi82JiJxrDbiZ8p5bMeDi2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:41:35:c4:9e:c9:47:a9:c9:ae:de:91:9c:be:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Validity
Not Before: Apr 18 19:00:40 2025 GMT
Not After : Apr 19 19:00:40 2025 GMT
Subject: CN=48b44eb214dc33f46a7df145207987beb909da39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:ef:8d:9e:99:2f:07:03:ee:d6:b0:af:da:
ab:b0:cc:6e:8b:11:cc:f7:64:79:3b:59:c1:e0:4f:
44:e3:8c:11:8d:8f:02:67:e7:2b:c5:96:a4:6c:80:
34:16:f0:d0:a5:71:5e:57:d3:e4:e9:44:33:98:47:
8a:37:4d:7e:a9:12:06:ab:ec:a6:05:41:b2:fe:b3:
18:df:56:b2:31:2b:66:99:2f:40:37:df:06:32:88:
97:fc:f7:01:4c:40:d4:dc:b9:0a:88:53:01:74:34:
f8:51:f2:a7:ae:e0:e6:82:63:33:83:0c:f2:d2:02:
84:c6:bb:b4:79:65:99:35:6c:1b:24:95:d0:de:1d:
ff:e6:eb:99:33:c2:0f:00:6f:97:98:3c:65:41:7f:
61:14:b3:94:c8:ae:f3:1d:54:3a:e4:0a:88:56:31:
ec:62:e3:c0:3c:1f:5a:48:de:a2:04:b7:9e:9d:78:
dd:2b:d0:78:68:22:92:ea:50:98:3e:be:bc:20:2e:
4f:ce:57:07:a7:e8:2a:f8:50:fa:cd:34:0e:55:0f:
05:9e:9d:24:a4:f3:c4:ed:4c:37:e6:23:46:80:b7:
1d:75:35:e4:a4:14:82:03:e7:6f:31:44:15:6a:6b:
7e:85:91:38:af:5a:09:60:f0:05:8e:3e:be:6b:c8:
4f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B4:4E:B2:14:DC:33:F4:6A:7D:F1:45:20:79:87:BE:B9:09:DA:39
X509v3 Authority Key Identifier:
keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:24:32:2d:eb:b5:fc:1b:ad:2d:26:7d:7a:51:5e:7d:35:17:
7c:1a:c5:a3:95:0e:98:bb:b4:24:85:cf:0b:a8:1b:5b:8c:c4:
31:a4:44:d2:f6:00:f8:71:6e:04:bd:77:2f:3f:0d:55:e4:86:
6a:c1:30:7a:b1:f6:02:e6:30:33:37:a8:07:58:d4:b5:45:4c:
b3:34:19:29:49:0e:7b:7f:a9:3b:30:f3:12:f5:cc:06:9b:9e:
d8:17:1e:16:43:8e:41:e9:98:7b:5a:ed:6e:45:e1:a7:c3:09:
7a:eb:0d:e6:99:6b:66:ae:1d:73:06:48:3c:cf:02:8c:90:98:
db:4d:63:a0:1b:d6:9e:4c:10:e6:39:9b:f5:8b:f5:61:2a:1c:
05:27:a8:fe:45:72:1e:e6:3c:1e:05:77:ff:01:7c:3f:8a:05:
df:93:06:08:f3:35:73:84:56:a0:5e:30:95:4d:0a:85:3f:db:
7b:76:1f:08:e1:67:c1:f4:f7:c5:21:80:bd:56:ee:1c:ef:fe:
9e:ab:fa:eb:17:65:e2:54:65:c4:3d:a5:fa:e1:30:c3:97:ad:
4d:19:ec:e9:80:fb:1e:21:e9:dd:ce:4d:21:62:cf:17:4e:e8:
f0:f2:da:0b:e9:f6:01:36:24:82:a8:bb:98:c8:9f:92:48:dc:
85:7a:47:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:28:48 2025 by rpki-client