Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: hQjA4mKCE9rF0jozsOOzrH5ErUVZLkJz/cRHpTIu74o=
Subject key identifier: D5:9B:F3:10:AB:87:2E:BF:0B:33:C6:64:F6:D5:10:A6:FA:34:A0:A0
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 0196157E066E04C61A8ECF792B4EDAC267AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 03B2
Signing time: Tue 08 Apr 2025 13:01:42 +0000
Manifest this update: Tue 08 Apr 2025 13:01:42 +0000
Manifest next update: Wed 09 Apr 2025 13:01:42 +0000
Files and hashes: 1: V2RodRkZh7eC6bXk6s50iKPnz20.roa (hash: flwyJ5HDdlUN6kAnMIhAje5bgLCjv6WkxqxL4dovgJw=)
2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: AfpCrmBN2jmxQTCI5k9VKEtG5kkqklIO2UDKBFfgc2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:7e:06:6e:04:c6:1a:8e:cf:79:2b:4e:da:c2:67:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Apr 8 13:01:42 2025 GMT
Not After : Apr 9 13:01:42 2025 GMT
Subject: CN=d59bf310ab872ebf0b33c664f6d510a6fa34a0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:ed:ab:03:89:0e:3d:6f:72:a5:af:75:98:
05:2f:bb:c8:d6:0f:de:7b:0b:d2:3c:ea:e5:71:16:
6b:79:27:e1:73:00:c3:9f:f5:3f:7b:49:9b:8f:2d:
41:76:77:88:80:1d:16:e4:d1:03:6b:b2:82:7c:d5:
50:7d:0f:c8:c5:5f:df:b4:7b:9f:05:c4:6c:54:b1:
60:ea:fa:c6:f4:48:fc:f1:5a:34:9f:8a:25:f1:70:
93:68:35:a3:64:bd:65:38:6c:4b:27:f8:ce:15:c4:
05:24:f0:3a:f4:0e:bf:4a:21:7d:29:bb:bc:ae:1a:
55:b9:17:95:5a:e3:e0:4d:4c:df:3b:00:96:44:bc:
b8:75:cf:68:72:58:19:d8:f8:3b:7b:3a:83:1e:58:
bb:75:a2:4c:eb:e0:72:af:bf:0a:1d:e9:be:6f:7b:
73:86:79:34:49:6a:1b:8e:35:53:ee:50:df:56:69:
c7:df:b4:fb:a3:a6:b2:f8:de:54:95:c6:d1:4a:f8:
ed:16:b7:2b:42:9f:2f:b9:bf:64:d3:bd:00:36:77:
a8:e2:3c:1c:14:42:cc:43:a3:bd:8b:ed:34:d1:63:
22:a6:b4:4e:96:d1:1f:77:36:1c:db:9a:4e:99:13:
e8:e9:d5:5c:4f:d2:a3:ce:e4:19:41:27:89:ed:e0:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9B:F3:10:AB:87:2E:BF:0B:33:C6:64:F6:D5:10:A6:FA:34:A0:A0
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:32:c2:58:38:a6:52:a6:b9:19:aa:08:d5:b3:49:f9:45:d7:
ac:63:5a:f1:c3:5c:56:0b:4b:d4:00:90:b0:cd:50:1e:c6:54:
19:66:71:e2:c7:77:99:84:7a:92:f9:4f:83:c5:89:0d:80:eb:
23:64:10:5b:10:fb:48:83:0d:2e:99:d3:28:e7:f8:20:ab:5c:
92:e7:ad:52:f7:30:ea:9a:79:c5:b4:a0:6e:3a:0e:76:5d:19:
84:b2:79:df:4d:53:0f:fb:4d:7f:c7:a3:dc:18:e8:59:3b:52:
9b:8d:3d:c4:fa:98:36:b4:8a:4d:8d:f6:5f:5b:51:93:b9:67:
49:01:98:91:dc:78:d8:61:ee:87:88:c7:7f:24:f4:6a:06:20:
8c:99:01:8c:1e:aa:83:2c:d5:f4:8d:4e:78:cd:a0:58:46:cf:
36:5e:73:f2:5a:a8:65:d1:32:48:ea:a2:22:73:46:57:1c:9f:
c7:22:ba:64:d7:8f:52:df:4f:53:c9:24:7c:2d:e3:95:e1:2b:
a7:ac:5c:fb:d8:c0:e8:27:12:4a:ec:d9:3e:de:94:9e:80:a5:
44:50:ed:93:0b:5f:76:83:c5:f6:a1:4d:37:07:ab:e8:87:9c:
c7:b1:07:b2:ca:26:70:a3:cf:ee:05:fc:6a:ba:0a:b4:43:97:
20:48:05:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:31:19 2025 by rpki-client