Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
File: lIlI8N1eL7CpArl5ypxcGkT5j6E.mft (raw, json)
Hash identifier: DwPdEKbyPqVbHXnscp0LMvpFd8TpdCOLqwefUKWgJd0=
Subject key identifier: F2:9C:7A:82:24:98:0D:6D:4E:EB:9A:81:A7:48:0A:0C:0C:A5:AA:A6
Authority key identifier: 94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
Certificate issuer: /CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Certificate serial: 01963F8BC3A05C189BAF315898E606778A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
Manifest number: 1181
Signing time: Wed 16 Apr 2025 17:00:46 +0000
Manifest this update: Wed 16 Apr 2025 17:00:46 +0000
Manifest next update: Thu 17 Apr 2025 17:00:46 +0000
Files and hashes: 1: PqIFggzIk_ANiqqFNJr1_Xaymmc.roa (hash: EhtNg//JemmQlKzA50IitdtWxLjPUBVE2aJwJpTUs+g=)
2: lIlI8N1eL7CpArl5ypxcGkT5j6E.crl (hash: NhL4LcfNpQLepPeRorjqca6Mf7c+EFEQl+GPmEQik+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:c3:a0:5c:18:9b:af:31:58:98:e6:06:77:8a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Validity
Not Before: Apr 16 17:00:46 2025 GMT
Not After : Apr 17 17:00:46 2025 GMT
Subject: CN=f29c7a8224980d6d4eeb9a81a7480a0c0ca5aaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:f4:20:3c:c0:c9:e1:f0:32:99:f9:9d:20:
81:54:8f:fb:77:c2:fb:1f:d6:8f:63:7d:2f:aa:a3:
22:61:f0:ba:2b:2f:2e:9f:d8:14:d6:b5:a1:b4:17:
b4:c3:2f:77:62:a0:59:50:90:69:24:ed:ea:a3:36:
22:91:e3:94:10:ac:1a:90:d8:28:2e:ee:d3:49:3e:
d4:d6:54:08:9b:a5:4e:99:74:14:f5:ed:0e:a8:e7:
81:f1:57:26:d5:cb:49:2a:3a:fe:83:21:61:72:d3:
62:7d:73:be:50:f1:b9:8c:d9:e1:dc:ce:ed:51:56:
43:61:e8:a5:ec:97:67:90:f0:a0:5f:58:79:16:d4:
df:d5:ba:8a:d8:7e:5a:e7:85:50:32:4d:de:2e:13:
62:69:f9:df:25:d9:91:e7:54:02:ae:d0:0a:ac:ca:
09:f2:79:ea:a2:42:c9:a7:a8:77:e7:6a:f0:27:67:
73:f5:d4:cf:14:4d:3d:4c:80:53:cf:84:75:ce:b2:
10:1e:b7:4e:a1:ff:de:f1:77:0a:12:03:88:2c:9a:
f4:2b:84:ba:24:cc:f8:ed:da:ff:5a:9b:e4:7b:2b:
96:73:5d:b3:bf:42:de:d0:14:3d:57:44:97:12:2d:
16:41:cb:3c:99:8e:d2:0f:f8:1f:b1:f9:f6:14:66:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9C:7A:82:24:98:0D:6D:4E:EB:9A:81:A7:48:0A:0C:0C:A5:AA:A6
X509v3 Authority Key Identifier:
keyid:94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2c:1b:cb:01:4e:66:d7:6f:42:e0:f5:4f:1a:bf:c2:03:e2:
f8:41:ac:fc:fd:3e:cf:0d:49:ee:2f:3e:51:51:50:8c:15:85:
96:77:41:68:49:f0:14:6e:20:36:c3:8c:97:e0:5d:aa:25:a3:
4e:00:d9:ff:76:1c:47:a1:44:c3:82:7a:98:6a:94:c5:ab:56:
ad:f3:16:21:d7:ba:9a:4e:4b:8d:52:17:df:01:06:e5:03:6c:
05:17:0d:07:c0:8f:b6:c8:42:94:b5:07:29:22:13:01:10:58:
33:b0:24:c1:bb:b7:d3:31:76:c2:88:33:78:32:34:12:8a:63:
44:f3:fe:8e:29:81:93:80:c9:1c:b0:58:8f:ff:c4:e5:90:70:
b3:4e:af:e9:08:89:33:1f:8e:22:05:8f:15:91:ce:31:44:6d:
fb:0b:d6:0d:8f:4e:23:ab:34:6a:48:88:84:09:4c:0d:2d:0c:
41:5a:7d:aa:c7:4f:48:cf:f9:eb:cf:38:d9:b5:a8:b8:f1:54:
ae:5e:14:c5:29:53:63:81:8e:d6:22:47:25:0e:a8:55:4d:d1:
38:c3:c6:1e:07:71:ae:e7:ab:4c:bc:07:56:91:9d:5e:48:a5:
15:ba:14:1f:bb:9a:2c:df:05:7e:da:76:23:0e:f3:53:93:6b:
1d:29:ca:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:21:05 2025 by rpki-client