Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: q1lhu/20iVqDhaZYaE9BZYc7ZmDp7SPC39ioEBwDmcg=
Subject key identifier: A1:85:82:D3:D2:DA:DF:79:A1:7D:4C:24:5E:F8:43:A3:76:55:AB:3F
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 0196BB92F2F57480DEAA991CA4325EF2CB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 19:01:31 +0000
Manifest this update: Sat 10 May 2025 19:01:31 +0000
Manifest next update: Sun 11 May 2025 19:01:31 +0000
Files and hashes: 1: 1prz6nfwB7MR42V9eL5e4pTM0a0.roa (hash: nHNcflpIKWPFe/S0qGh+RfefQb1jF3HSnY4U4fHegwQ=)
2: k2hJkZDc_xeXo7A97oeeqJQmzBY.roa (hash: KfO87HjfOnIIu1KT3PIvCkLOefmGzWA42/xP3gBOPMI=)
3: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: 6/qtqJgD2SFVo1AVAhGWJr+pmoEDjMqMixSMwe612v4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:f2:f5:74:80:de:aa:99:1c:a4:32:5e:f2:cb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: May 10 19:01:31 2025 GMT
Not After : May 11 19:01:31 2025 GMT
Subject: CN=a18582d3d2dadf79a17d4c245ef843a37655ab3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:e6:45:65:dd:17:80:22:7e:55:89:6d:b1:
fb:45:a5:dc:12:71:2a:58:b4:d9:44:6e:07:79:38:
d1:5e:84:1d:45:a7:24:01:2f:a5:6e:10:0b:eb:1a:
d3:b1:73:5d:1c:b2:63:3b:20:cb:a5:c0:51:63:84:
e5:87:ca:ba:74:b1:8a:8b:af:e6:1d:fc:f9:33:8b:
13:94:59:d3:b7:f7:9b:43:b0:35:0d:12:4d:5d:bf:
11:cf:fd:24:c2:8d:5b:b2:3e:00:ea:49:b0:76:0f:
9d:e6:d7:d4:ac:1f:ed:0f:66:96:32:f0:ef:01:c9:
be:af:e2:89:7a:60:83:b8:19:f3:9f:d1:27:a6:d8:
d3:61:2a:cc:91:28:ea:f1:89:b8:b3:6a:f7:f4:3f:
5e:19:bb:70:91:33:07:08:35:80:ed:58:6d:84:a7:
7e:d7:a5:07:d7:8d:62:68:08:3c:10:c4:a7:d0:b9:
34:1b:c7:0c:c8:02:fd:54:5d:a1:8a:93:f7:2b:ec:
fb:c0:d1:76:b7:27:d1:4e:a4:63:e8:e5:b0:03:75:
dc:e8:71:36:ce:b1:e3:e6:27:a2:2f:e2:5a:a6:50:
b8:30:25:37:ca:11:ce:ae:09:ed:75:d5:42:f8:c1:
0f:c2:3d:fd:2f:d7:e0:e0:89:43:b1:99:1d:ad:58:
ca:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:85:82:D3:D2:DA:DF:79:A1:7D:4C:24:5E:F8:43:A3:76:55:AB:3F
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:48:73:e7:80:2e:6a:50:25:f7:63:6a:2e:24:dc:e4:38:b0:
41:2a:cb:4f:65:0b:b3:71:c2:5c:63:73:7b:6f:e2:bd:49:ed:
4b:c0:53:b5:10:f4:a6:d4:b1:04:9f:40:8e:c8:c2:bc:bf:44:
b5:3f:97:53:9b:a0:39:f9:92:ef:30:13:19:c7:6a:93:f9:70:
d6:ac:d4:1b:46:59:57:ea:eb:7c:8e:8b:1b:cd:7c:f6:2f:25:
45:18:40:8b:5b:50:b1:96:a8:73:30:5c:f9:7a:7d:94:8e:1a:
b8:de:e1:16:02:38:82:d6:1b:00:24:ef:ac:2c:4b:71:f3:6f:
82:80:50:4f:b9:3e:76:48:81:42:87:27:ec:e4:85:52:82:00:
98:2a:82:88:ee:f6:aa:ba:3b:c2:13:bd:9e:ef:29:82:df:4f:
97:6f:e0:d2:d9:ce:0c:82:e7:9a:f8:0b:fc:21:57:b5:2b:06:
a2:7e:70:97:bb:83:b7:e1:74:51:2f:60:13:dc:5a:42:ec:e4:
3d:86:17:a6:d1:19:93:9d:6b:6c:26:e6:7c:ce:0d:70:d1:c2:
5d:a0:09:6e:76:40:11:9d:52:b2:c3:2e:1e:f9:02:17:bd:dc:
30:15:b9:8d:37:d7:53:c4:38:3c:4f:25:b0:48:14:dc:ec:d7:
e5:8b:45:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:06:51 2025 by rpki-client