Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: 3lTrQGkvLaG0k/fLjAvNb8eg94V4dx+ozQQCjno1Jsg=
Subject key identifier: 66:5C:D0:76:C9:53:00:2E:E3:44:62:15:81:AA:34:79:8D:15:9F:88
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 019648FCBCB359EE3083B6E06F9E3A3F9C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 13:00:44 +0000
Manifest this update: Fri 18 Apr 2025 13:00:44 +0000
Manifest next update: Sat 19 Apr 2025 13:00:44 +0000
Files and hashes: 1: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: MYY2dtSrR0RAgFGCYx2GwaR64ewWCTL070cL3zVbVdM=)
2: rK5X9NIdICE6HWbuHlM4yM6Jalc.roa (hash: YWhqfMgJTLRIqRYZxrF87FaDlWD+zYLSsh2PkoyKjDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:fc:bc:b3:59:ee:30:83:b6:e0:6f:9e:3a:3f:9c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Apr 18 13:00:44 2025 GMT
Not After : Apr 19 13:00:44 2025 GMT
Subject: CN=665cd076c953002ee344621581aa34798d159f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:f1:49:4c:cc:52:8e:ff:80:8d:8a:75:0d:
7a:cd:74:bc:cb:e3:4b:bc:af:c4:28:45:ce:c0:1e:
cf:4b:7b:f6:51:c8:55:c1:c7:b9:bf:f3:ab:31:29:
5b:5c:7d:4a:28:09:c0:ba:a4:66:2b:38:b8:a3:35:
fb:01:3d:0a:d0:06:84:31:ff:aa:be:86:3b:95:e0:
68:16:4a:9e:d4:2f:96:b6:ae:0c:eb:5c:7d:7b:1b:
25:2d:7f:64:5c:43:dd:77:45:46:2c:68:b8:6a:5b:
cc:d2:4a:6d:3f:49:d6:6d:6e:91:41:28:1f:22:3e:
a5:16:13:6c:e8:9f:5b:a7:c5:b0:69:a2:e3:ee:a7:
30:4f:c0:69:ee:75:4b:16:81:9f:ad:75:5e:c3:5d:
92:e7:a2:8b:64:9a:3c:8a:16:b8:7a:9a:48:30:48:
56:69:5c:95:aa:d3:e2:9c:cb:b3:7e:c5:dd:82:51:
2d:72:3f:b4:a8:e3:7a:c3:67:0c:2a:34:17:a4:fe:
6e:2b:82:0f:ce:cd:ad:29:93:0b:50:4f:4c:d3:6c:
fe:7f:6c:57:4a:35:8b:3d:54:a6:4a:c3:98:c9:c9:
02:98:63:5f:54:c2:6f:f4:34:34:6f:a0:c3:2b:b3:
ce:77:dc:94:8a:c8:4c:a3:d3:a6:45:91:1f:dc:c4:
79:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5C:D0:76:C9:53:00:2E:E3:44:62:15:81:AA:34:79:8D:15:9F:88
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7a:2c:47:59:55:a1:13:f9:54:41:ae:81:80:af:11:d5:f0:
a9:c5:43:3c:23:f1:e3:98:c8:e2:3f:9a:15:ff:ac:9f:14:e4:
8e:55:25:fd:93:21:a5:bb:75:a1:50:df:4d:2c:ab:15:cf:91:
a1:01:a6:3e:16:b6:da:87:a1:1e:c1:85:6f:2e:8d:fb:5e:0a:
76:55:79:e4:08:57:ef:44:66:49:34:12:06:2e:af:c0:9c:df:
7f:a8:4e:75:3d:3a:fd:dd:be:eb:ec:bc:8e:f7:d2:03:7c:af:
4f:0e:41:69:d4:33:cd:90:b6:94:82:fd:72:9e:a0:75:36:ba:
a6:21:ee:f8:1a:e8:3a:44:b4:42:2c:5b:88:97:44:9b:68:a9:
44:00:71:a8:ae:80:fb:1e:85:ba:cf:38:6e:a0:09:3f:0b:a5:
cf:37:19:99:73:60:40:dc:d7:af:a3:af:eb:e3:80:22:1d:e3:
b7:4c:78:b7:c2:92:84:88:19:4f:04:12:ab:5a:d9:9b:9b:40:
39:ef:c9:82:c6:50:61:ef:00:fb:50:86:24:51:33:fa:73:b9:
91:df:fc:b1:38:c3:fb:a2:2f:0b:a5:3a:d7:0b:0c:65:e9:a5:
11:89:de:16:a4:7b:90:51:20:6f:db:e3:ff:6c:2c:a8:b9:7a:
a2:73:06:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:20:17 2025 by rpki-client