Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
File: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft (raw, json)
Hash identifier: kfuKX4YPN4dmv1gPUEVa66Xl8Bz1STNhW18LcR+Pcgs=
Subject key identifier: 46:1D:C4:B0:D4:98:56:C7:77:8F:1D:4C:5A:3D:BC:0F:45:1C:75:D1
Authority key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
Certificate issuer: /CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Certificate serial: 019616C69AB5D115FEFCFBA58E4640EF4DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
Manifest number: 042A
Signing time: Tue 08 Apr 2025 19:00:36 +0000
Manifest this update: Tue 08 Apr 2025 19:00:36 +0000
Manifest next update: Wed 09 Apr 2025 19:00:36 +0000
Files and hashes: 1: 5ODJwRdnQa13oezz5TNTCEyKtws.roa (hash: zQdrgcuE5ymqxo+lmUXMohaBUr8MekfjfO1peWkuPsk=)
2: 8PEWFaitqsUZ6z1cmHuAHUZb0BQ.roa (hash: eQE9VX3LaUVY9e8uyeXfzxRtJvjbxOh0QvDdkJtI1qM=)
3: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl (hash: 9CA7Vz6fultRy0KVwZx8bx16ZdHOTHX0qE47HqT12cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:c6:9a:b5:d1:15:fe:fc:fb:a5:8e:46:40:ef:4d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Validity
Not Before: Apr 8 19:00:36 2025 GMT
Not After : Apr 9 19:00:36 2025 GMT
Subject: CN=461dc4b0d49856c7778f1d4c5a3dbc0f451c75d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:da:d2:36:fe:39:ef:18:d3:23:85:a6:8e:
2e:a5:04:78:40:a6:a2:7b:b1:58:91:ad:8f:9a:b2:
22:bc:1e:ce:f9:cb:55:42:ea:45:d0:05:ad:4f:02:
07:e5:4e:5d:d5:aa:6e:4e:89:81:24:d4:d1:4a:e7:
c7:c7:12:db:b0:0a:10:a9:7f:9d:ee:74:1f:f6:84:
d7:83:5d:97:df:ec:7c:ab:8f:3f:ee:4b:e7:5f:a5:
1d:ff:8e:e3:12:d5:57:36:ee:b5:95:b4:8a:a7:09:
fa:74:18:f5:11:47:c9:98:bb:39:e6:72:6c:65:ce:
c3:97:bd:ea:1e:f3:46:23:97:18:56:ba:57:d3:f2:
ec:eb:70:29:10:3a:8e:d7:9c:b0:d4:74:35:a3:88:
ce:57:49:bc:31:f4:a1:c9:e0:85:1d:c1:e0:f9:a7:
c0:2a:a6:75:70:e6:40:e1:48:f0:8a:88:2a:3d:6d:
ad:f3:f3:79:52:9d:84:f2:c0:db:21:75:94:22:36:
ef:81:f2:15:3b:87:94:48:4b:92:d9:90:51:a0:a4:
d6:e5:41:08:10:f9:14:03:44:d7:7f:05:f4:3e:f1:
d4:23:62:15:79:84:f1:38:35:16:f3:a2:b9:b3:5a:
a1:b2:28:17:bd:12:ca:f8:84:79:17:00:41:25:9f:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1D:C4:B0:D4:98:56:C7:77:8F:1D:4C:5A:3D:BC:0F:45:1C:75:D1
X509v3 Authority Key Identifier:
keyid:97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:10:81:cc:5d:83:ce:d9:e5:48:e3:b2:b6:f5:2a:34:e2:5e:
f0:52:4d:01:0f:4a:90:b3:17:2d:85:df:24:14:92:24:af:e2:
16:05:ab:50:d3:ca:ab:0b:73:81:5d:f5:b6:8c:04:e9:e7:71:
bd:55:bf:1e:c9:91:8a:50:d0:e4:d3:08:f3:d3:a3:07:a0:75:
c6:26:48:2e:02:95:50:ec:86:6c:07:0d:b3:52:99:e9:6d:2e:
8c:f6:6f:f7:99:b1:c2:cb:e5:12:52:35:98:c3:9e:85:f0:a1:
12:15:f6:17:0e:0f:13:a0:7f:c7:f6:e4:e9:0a:d1:f3:6b:9c:
c6:0f:a2:87:d9:69:71:1a:6c:7f:63:0b:13:b7:85:73:be:43:
11:b4:fe:74:1f:f4:74:6e:41:cc:ca:08:4f:3b:01:19:bf:fa:
11:e6:7d:83:90:c8:30:66:f6:ad:4e:1e:3c:1c:0f:ab:db:c7:
e8:0a:07:80:89:2a:61:a3:d5:9b:88:7c:34:21:12:d2:f1:ca:
9f:47:90:c7:d1:ca:30:92:b9:8d:a7:f9:88:01:62:23:35:9d:
3d:be:f9:e8:b6:af:25:e2:3e:46:89:a0:54:0a:87:20:2f:e5:
2f:01:31:df:ec:30:29:da:8d:a5:ab:75:2c:de:ad:18:85:01:
66:fa:2c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:25:31 2025 by rpki-client