Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier: auZkZVmNEmi8ps7J/+bCNPRorCw+bc+FLLEIPyISt/4=
Subject key identifier: DC:62:89:1B:05:16:83:79:26:25:92:71:5F:E4:46:40:58:81:7F:2F
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial: 0196421E7F1FAAB87836F1F05F3771A13333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number: 0BD5
Signing time: Thu 17 Apr 2025 05:00:16 +0000
Manifest this update: Thu 17 Apr 2025 05:00:16 +0000
Manifest next update: Fri 18 Apr 2025 05:00:16 +0000
Files and hashes: 1: Sf5t6YxNuVy_QmmCDlAJFdLydbs.roa (hash: 84pXBKdWUeBM3XRDHyhAVZXwwfPh9reL6aBdIjVrlKs=)
2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: YgnbA0I3vLjTpSOfJhbDAIE8vbLa7pEPtObRJs5adHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:1e:7f:1f:aa:b8:78:36:f1:f0:5f:37:71:a1:33:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Validity
Not Before: Apr 17 05:00:16 2025 GMT
Not After : Apr 18 05:00:16 2025 GMT
Subject: CN=dc62891b05168379262592715fe4464058817f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ec:ba:0b:34:3a:af:16:2c:d8:b5:d3:87:fb:
43:12:4e:61:38:9a:55:1b:53:56:4f:a0:99:aa:33:
d9:b9:75:32:ca:bd:30:37:e8:2a:ca:97:f9:a2:d4:
8c:c6:4e:33:a6:3c:4f:5f:d4:dc:52:0e:62:d7:6b:
51:80:3f:d2:65:61:7d:83:03:e7:e3:d3:d2:41:69:
98:bb:d7:e7:a4:7e:00:50:b5:e8:2f:98:d5:5d:1e:
c1:02:be:f8:05:a9:67:d8:f9:83:79:04:8b:b7:1c:
86:9b:2f:8a:3c:c9:52:f6:ee:76:07:89:36:ee:9d:
1a:c3:23:c7:b0:a9:2e:b6:ef:25:94:e8:ce:ee:4c:
1a:85:9f:df:95:4e:e3:b8:54:f2:19:d1:eb:09:29:
39:1f:28:31:36:24:5b:af:88:0d:c9:e1:eb:e6:2b:
89:6c:cc:73:03:51:0d:79:b3:b0:fa:06:23:c6:31:
c2:23:e2:93:81:cc:fd:4c:11:2e:de:c1:5a:a7:13:
2e:66:9b:73:72:7f:64:16:01:8d:a5:d8:30:8f:fd:
6d:01:ba:3a:e2:a0:6b:ae:7c:ed:61:e0:05:d9:47:
f0:51:1a:4c:d7:6c:7d:d4:70:c8:10:83:a6:92:8d:
15:06:dc:ff:e1:d6:c9:77:fb:7c:1c:37:56:6c:d3:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:62:89:1B:05:16:83:79:26:25:92:71:5F:E4:46:40:58:81:7F:2F
X509v3 Authority Key Identifier:
keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5f:c0:9d:84:9d:0d:19:88:7e:f5:7d:ce:c1:95:e0:cc:b1:
22:9d:45:c2:d4:98:ef:fc:fa:9a:a7:24:d2:1f:62:61:61:e9:
89:4d:7e:53:56:a1:57:11:f5:c4:45:bd:94:7c:f4:b1:56:e0:
48:90:de:84:ef:f7:76:10:c0:97:6b:0b:9a:f6:97:a3:9e:69:
9c:78:35:94:fe:fd:40:b4:14:b9:9d:4b:25:33:85:36:a4:7e:
29:04:61:57:5b:14:f2:c2:c7:d1:ca:64:df:8f:ff:b2:f7:78:
b7:fd:72:56:14:97:0b:53:37:4e:0d:f6:89:29:95:ae:c1:4a:
60:fb:50:51:7d:5d:46:da:a6:e2:e3:fe:36:64:d8:b8:01:3d:
ca:d6:58:57:ae:5a:f8:36:b1:6c:f9:54:3d:81:01:26:b4:6d:
e3:12:a2:80:40:ae:75:5a:76:e0:fc:64:a1:be:3b:f6:22:9b:
7a:61:3b:0d:4b:cc:41:f1:17:fd:d5:42:8b:b0:b1:a8:e3:e6:
d9:a4:47:34:68:83:2d:83:38:51:af:4b:ce:7d:50:08:be:86:
00:06:23:dc:d0:e2:e0:23:b1:f1:2f:ef:fb:e5:d3:f4:85:2e:
2b:43:09:55:53:b5:a3:df:1f:7b:d7:f4:c3:38:56:aa:12:83:
43:77:b3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:36:28 2025 by rpki-client