Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json)
Hash identifier: yiuR2csrWQXgMDskaUcQN39xmMil+49vD0bWPc0I+oU=
Subject key identifier: D3:79:9E:37:39:EA:A3:0D:D7:98:19:A2:34:57:08:B9:90:6B:10:25
Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
Certificate issuer: /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Certificate serial: 0196433138E937F1F7B2831428E1321AB283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
Manifest number: 033F
Signing time: Thu 17 Apr 2025 10:00:21 +0000
Manifest this update: Thu 17 Apr 2025 10:00:21 +0000
Manifest next update: Fri 18 Apr 2025 10:00:21 +0000
Files and hashes: 1: NWUftztBrG96_y2EzypECwRaWiE.roa (hash: iB3abFntFNLTwV5YoQUMjYIpTV58Rd0ggjc38BexLcc=)
2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: maX9o2Z65bk/T+hx5gO3XAc2eRh6BWSBj/Kj7ai79ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:31:38:e9:37:f1:f7:b2:83:14:28:e1:32:1a:b2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d
Validity
Not Before: Apr 17 10:00:21 2025 GMT
Not After : Apr 18 10:00:21 2025 GMT
Subject: CN=d3799e3739eaa30dd79819a2345708b9906b1025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dc:97:9e:a4:4d:1e:bd:13:28:54:61:03:52:
09:9f:33:c2:dc:f5:41:f6:d0:24:04:cc:9e:e8:bb:
99:fe:b8:2e:dc:39:62:02:f7:38:29:b3:98:3e:57:
5b:cc:21:c0:9d:d3:b0:c5:83:7d:ac:dc:fd:44:4c:
0f:cf:36:1b:dd:28:3d:84:9d:29:2e:a4:79:5d:66:
3d:52:94:fd:af:15:26:c6:de:30:f9:3a:7a:ca:be:
42:07:0d:2e:7d:9e:6b:c7:71:49:ab:5d:43:c3:1c:
ed:fc:ae:19:a3:29:f2:38:37:f6:32:04:b6:21:f2:
32:21:36:a8:ab:a2:1a:ac:cd:f8:08:da:83:d9:ef:
90:64:38:6d:aa:7f:f1:da:23:af:c6:88:97:c0:ed:
62:16:83:cd:33:b7:32:8e:fc:15:3a:27:f4:1a:72:
61:87:d6:87:9f:01:78:37:5d:6c:bb:b4:88:38:f3:
b3:71:92:c8:91:6a:4a:e5:c2:13:4b:f0:39:f7:ea:
23:77:a6:94:1f:be:46:fb:16:ee:73:19:86:96:0f:
f2:84:0c:bb:34:2a:65:a9:56:65:e7:b4:d3:90:b9:
82:7e:99:9c:b8:af:a6:39:04:f6:ad:02:d6:1b:ef:
8e:2e:b5:ab:92:c2:88:6a:1c:0a:88:2f:f1:bc:97:
d6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:79:9E:37:39:EA:A3:0D:D7:98:19:A2:34:57:08:B9:90:6B:10:25
X509v3 Authority Key Identifier:
keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:64:21:eb:1c:50:63:4c:e0:7d:02:16:13:2a:85:a6:eb:bf:
60:f5:a4:a3:3b:d3:64:40:d1:20:43:c9:00:10:1d:44:1b:b3:
03:36:6a:ba:ac:bc:cd:fc:11:dd:2e:9e:3e:27:0f:64:5c:31:
97:11:2f:7e:02:da:29:91:6d:a8:4c:51:b0:3b:0e:ec:a2:3b:
17:51:3d:ce:7c:39:fe:7b:ee:01:8d:88:3c:ee:53:91:3d:b1:
87:7d:f8:c8:fc:11:b1:44:ce:72:44:a2:50:47:7c:db:55:9d:
b0:71:6a:5a:0a:1e:ab:0c:19:32:44:62:10:07:d1:a0:3e:56:
a6:2f:99:98:3e:91:0c:59:86:33:a1:69:eb:9f:d5:19:6e:1d:
d8:40:a8:7b:4b:17:ef:b5:f5:ac:13:56:57:9c:c8:8d:63:4d:
8b:8a:c7:ed:3c:57:bc:2c:bf:83:7d:84:9d:bb:da:78:30:25:
93:46:e0:d8:af:de:8d:88:48:cd:52:85:25:de:c5:31:3d:56:
b7:1a:fa:63:20:0a:a8:14:77:05:a9:51:5a:f4:da:ac:1d:f3:
da:58:d9:e0:f1:c7:3f:44:de:3e:68:e9:22:f9:41:c9:8c:2b:
a4:0d:c7:05:f0:3a:7d:90:f0:20:71:0a:44:91:71:68:3e:fa:
c1:d2:b1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:56:30 2025 by rpki-client