Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
File: l5FbqA0-1wRSRoFIinK-mR-mcNw.mft (raw, json)
Hash identifier: ffcwc0cc04HOQ3MeX2WnSvOaPvwn4lIJrToXTqm4R+Q=
Subject key identifier: 34:82:45:AD:E0:C2:63:C5:78:94:97:2B:9C:5C:DA:80:A3:09:DC:66
Authority key identifier: 97:91:5B:A8:0D:3E:D7:04:52:46:81:48:8A:72:BE:99:1F:A6:70:DC
Certificate issuer: /CN=97915ba80d3ed704524681488a72be991fa670dc
Certificate serial: 0196C5DF0D7CF6858D8CA6F09B42DB9EB5AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
Manifest number: 042C
Signing time: Mon 12 May 2025 19:00:51 +0000
Manifest this update: Mon 12 May 2025 19:00:51 +0000
Manifest next update: Tue 13 May 2025 19:00:51 +0000
Files and hashes: 1: l5FbqA0-1wRSRoFIinK-mR-mcNw.crl (hash: r0YNCdNijTQ3a81rcoErogRIEEA9L/Mei7AKVy4ZQ1c=)
2: qo2vOLLpvqAX5XPyfjQO2wLnHqA.roa (hash: ngupliw7DsEh4VFD2q0dSrJhCE7Y9aSPjgmNKBH+xq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:df:0d:7c:f6:85:8d:8c:a6:f0:9b:42:db:9e:b5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97915ba80d3ed704524681488a72be991fa670dc
Validity
Not Before: May 12 19:00:51 2025 GMT
Not After : May 13 19:00:51 2025 GMT
Subject: CN=348245ade0c263c57894972b9c5cda80a309dc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:58:77:f0:2d:16:f0:29:1e:39:4f:56:47:
77:e9:da:b2:1a:56:b8:26:de:9d:3e:fb:6e:8c:75:
bb:d4:c5:fd:ca:29:ec:21:a3:10:8f:09:b2:c6:25:
5c:76:f2:d3:46:d9:e3:03:ad:68:24:71:9f:6f:4d:
cf:8b:2d:69:39:a5:0e:5d:76:4a:5c:33:58:17:8b:
41:14:3e:37:74:61:60:b2:bc:0d:c2:86:2b:4d:40:
57:0e:d1:11:dc:18:78:f3:83:a3:e1:0c:a9:7c:ba:
e7:ee:b6:12:8a:04:ea:aa:e6:c1:04:d8:11:e9:d8:
ca:44:b5:96:59:1b:fc:f9:4f:1c:86:5d:ab:13:42:
c9:57:67:87:50:67:c1:ec:94:a8:df:e9:2a:39:1f:
3e:5b:3e:03:8f:6a:d3:12:c1:7d:a3:c5:46:18:64:
0a:1e:af:b5:95:2e:4b:88:b3:85:48:09:e6:97:36:
3c:94:bf:46:f6:ab:65:7e:30:4c:68:88:ba:b1:b3:
12:53:c5:61:a9:1b:e7:04:15:d2:43:23:96:d3:2f:
67:aa:71:ec:c4:8d:d2:5e:e8:2f:35:19:42:8b:a7:
b0:73:a7:df:13:50:95:1c:3d:bf:34:27:07:62:ff:
12:3f:2b:8a:45:e5:38:00:65:1c:fc:b3:ad:0a:7f:
0e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:82:45:AD:E0:C2:63:C5:78:94:97:2B:9C:5C:DA:80:A3:09:DC:66
X509v3 Authority Key Identifier:
keyid:97:91:5B:A8:0D:3E:D7:04:52:46:81:48:8A:72:BE:99:1F:A6:70:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:55:fc:7c:49:6d:df:22:44:9f:95:2c:06:94:f1:8f:24:a1:
bb:c5:ee:28:91:8d:b5:0b:d4:50:5d:39:d8:db:ce:02:d6:8d:
51:12:6d:9c:9f:1f:ad:7b:af:ee:42:13:55:75:a2:14:e1:80:
7d:29:41:00:27:0b:71:de:93:07:80:5d:a8:0b:b3:04:81:3f:
e5:0b:2d:33:03:af:80:9d:87:34:d3:f7:5a:8b:be:6f:47:40:
d5:7a:af:51:67:a5:f3:e8:82:a2:6e:b8:54:2a:1a:18:8f:e0:
f9:3a:ae:2f:fa:a0:c7:c2:a3:df:bd:2e:b1:82:1f:c2:fc:c4:
00:0f:fb:56:4c:b8:a7:03:19:ed:9f:cd:aa:d9:f0:21:4d:cb:
9a:7b:bd:0a:49:31:da:6c:04:c0:ec:e1:c4:5d:8d:6a:28:75:
20:7a:dd:fb:7f:dc:7f:c8:4e:da:11:35:bf:35:ea:42:46:28:
c5:b4:05:db:75:e0:4e:5e:b4:29:22:12:5d:97:14:11:84:3f:
6b:1b:17:17:c4:34:10:3d:a5:12:bf:3e:a2:c9:66:23:24:10:
77:71:c4:08:f8:8a:d8:4a:1f:4a:11:1d:29:70:bd:3b:f5:3f:
30:ba:f9:a7:a2:84:f5:18:ba:3d:d4:44:f1:09:23:4f:6f:88:
77:46:9d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:58:10 2025 by rpki-client