Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json)
Hash identifier: bpqoOc/YrSije0HbgdsalcyOPYzQwGal39BR0xzhm8M=
Subject key identifier: 14:7E:09:7E:94:E4:C4:3F:99:0E:41:B3:93:FA:8F:01:63:90:BC:CE
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial: 01964CA2250CEE8B831D22FE437158D3C55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
Manifest number: 04AF
Signing time: Sat 19 Apr 2025 06:00:16 +0000
Manifest this update: Sat 19 Apr 2025 06:00:16 +0000
Manifest next update: Sun 20 Apr 2025 06:00:16 +0000
Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: kRlp62RAjaJP2GH1RQ1V/T1hPZow4C9Z2WPKru9qg1Q=)
2: gHq9MWf0hbMmILKUMKXWOxVNz_8.roa (hash: WUjQnD6G2qjaHXGAi0bK2NbXe4/t3hrnEoAgLC0ACio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:25:0c:ee:8b:83:1d:22:fe:43:71:58:d3:c5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Validity
Not Before: Apr 19 06:00:16 2025 GMT
Not After : Apr 20 06:00:16 2025 GMT
Subject: CN=147e097e94e4c43f990e41b393fa8f016390bcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:e9:22:d9:fc:88:9e:27:a3:02:a0:18:ce:
7e:ec:9d:74:b8:9f:0c:a8:98:37:5c:f1:18:f3:40:
7a:17:27:95:e3:87:ef:16:ed:d2:75:2e:cc:7d:7b:
72:d4:6f:ef:5d:5c:73:2c:9e:d4:ec:72:a1:c5:92:
2e:c4:b7:69:27:aa:2d:c8:60:fb:21:f9:a7:e0:88:
5f:3d:cd:0c:6a:7c:fd:c5:a5:12:f9:bb:dc:d8:20:
b0:66:f5:d6:e2:55:ba:19:ba:35:cf:e0:4c:6a:a9:
ff:a5:32:7e:c3:61:6f:ce:f3:37:08:5d:75:5b:cc:
4a:eb:7d:28:7c:3e:23:e6:0e:39:f1:64:5f:f1:4c:
bd:f2:09:a5:d5:90:db:2b:16:eb:cc:e9:b8:89:3c:
a4:4d:f2:f9:2d:70:a1:62:01:08:67:2c:4a:5f:f8:
95:50:4c:3b:68:32:03:11:94:c8:1f:33:6b:50:02:
72:06:0c:ea:e6:35:27:c8:17:89:2e:d5:02:ac:e2:
78:dd:c5:29:07:56:a7:74:19:2b:1e:10:36:8c:a8:
6e:25:63:ed:a6:6e:df:72:6c:25:f6:22:eb:2e:36:
bc:b6:7d:9c:6c:15:4f:55:18:e7:9f:cf:b3:05:3e:
41:57:72:8c:71:cd:3d:f4:bd:a8:9e:79:07:6c:13:
50:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7E:09:7E:94:E4:C4:3F:99:0E:41:B3:93:FA:8F:01:63:90:BC:CE
X509v3 Authority Key Identifier:
keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6e:2b:75:fb:54:9b:5f:0e:4f:64:2e:ba:44:26:99:a6:3b:
2e:29:af:2a:78:1a:d0:ae:6f:cd:51:2c:e9:d8:1f:ff:88:dc:
11:a3:a9:12:d4:ab:3d:55:d1:0a:52:13:ad:88:ed:75:11:00:
f2:6c:d0:20:eb:73:bb:71:c7:2d:b5:2f:c8:5d:a3:59:fe:63:
23:c7:e5:45:36:9b:e8:92:bd:92:a4:c5:27:af:7e:72:a3:f2:
52:91:32:1a:ba:0f:68:cb:88:7c:dd:9c:1c:af:69:ba:54:3a:
aa:7c:0b:69:0a:d4:cf:4b:24:e4:d9:dc:0d:2e:e4:dd:80:02:
1a:27:8c:1a:3a:75:08:1e:24:e7:59:15:39:4e:95:60:c5:32:
79:90:04:38:01:7a:aa:43:3f:4a:27:91:ec:38:de:e9:a2:4d:
0e:5e:29:fb:e3:23:14:0e:3c:cd:dd:a3:66:2f:5d:e9:ee:4e:
05:21:7b:a0:a5:4b:1f:19:b9:46:bd:77:4c:5a:5d:bc:1a:22:
3f:2b:51:24:c2:a7:16:c8:2d:fd:97:f1:e2:ec:8f:8d:af:ad:
7d:3c:db:63:1e:9a:7f:7e:c1:54:a1:79:cc:6d:47:27:e0:23:
8f:63:de:e9:22:1f:fc:b8:07:47:fb:c4:c8:7d:40:4f:5f:00:
89:07:75:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:11:37 2025 by rpki-client