Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
File: l1JqhRIT5aY6wpR47RNnCCn8oaU.mft (raw, json)
Hash identifier: v1QxA7c6aBBqYoGdBVAeD9iNM1Vn8qgYEvpVC9GfGM8=
Subject key identifier: 4F:70:7B:87:72:B8:FB:98:12:22:5A:4B:7A:4F:39:B9:88:D4:61:56
Authority key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
Certificate issuer: /CN=97526a851213e5a63ac29478ed13670829fca1a5
Certificate serial: 0196AA3058A6D405F48268A6714A5EF7F8C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
Manifest number: 152A
Signing time: Wed 07 May 2025 10:00:17 +0000
Manifest this update: Wed 07 May 2025 10:00:17 +0000
Manifest next update: Thu 08 May 2025 10:00:17 +0000
Files and hashes: 1: l1JqhRIT5aY6wpR47RNnCCn8oaU.crl (hash: A2vpmEjgh4s9630sRTBdfb+o7ax/ewVxBXwMvrdaQlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:58:a6:d4:05:f4:82:68:a6:71:4a:5e:f7:f8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97526a851213e5a63ac29478ed13670829fca1a5
Validity
Not Before: May 7 10:00:17 2025 GMT
Not After : May 8 10:00:17 2025 GMT
Subject: CN=4f707b8772b8fb9812225a4b7a4f39b988d46156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:97:c3:47:c9:e8:4a:06:21:4c:76:03:9f:
14:08:8f:3a:7e:97:95:38:31:63:ea:fc:0e:a7:d9:
61:33:ed:2d:a9:96:7b:45:e7:71:50:07:83:b4:ef:
0f:3a:33:0a:82:9d:4f:2e:89:92:35:11:66:a9:1c:
57:d5:c8:b3:04:6e:ad:e2:f4:a7:65:64:4a:28:17:
68:49:3c:df:29:23:2c:8e:de:5b:b0:9b:2c:2f:c0:
af:60:7b:ac:96:61:f9:f1:ba:05:db:64:fe:a0:d1:
00:1b:f8:d8:67:4e:6b:78:01:81:7e:a3:91:ef:5c:
99:a7:07:89:0e:9c:13:77:51:f8:05:2c:c2:67:df:
c5:31:de:69:90:de:b7:ca:9d:1a:c0:45:c6:29:cb:
48:a2:7e:76:44:da:6e:23:cf:31:ac:77:6a:33:2a:
09:c0:b7:18:d5:e8:23:73:24:35:72:d4:f7:62:b5:
63:55:38:e1:b2:36:b5:50:47:70:96:d5:4f:48:93:
e7:2a:91:e7:1e:bf:8e:0c:10:62:b7:37:f2:d2:29:
18:cc:1d:e4:af:a9:e0:33:c0:31:db:43:e4:8d:af:
74:0b:ae:5f:14:c9:83:22:9f:ae:1d:ee:a6:84:75:
6d:14:5b:57:09:a2:4c:da:98:ac:0c:96:8a:d2:ed:
2b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:70:7B:87:72:B8:FB:98:12:22:5A:4B:7A:4F:39:B9:88:D4:61:56
X509v3 Authority Key Identifier:
keyid:97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:29:f4:16:ce:ac:bc:ee:48:30:8d:76:d7:f0:8d:46:3f:bb:
e4:2a:80:f1:6a:8b:1e:dc:33:b1:31:44:06:13:e5:a0:4f:13:
40:52:54:16:f3:a8:20:fe:54:8e:d6:59:cb:fc:e8:24:92:91:
11:80:e7:9d:95:6f:48:ba:41:28:e1:5b:e9:8b:dd:a2:35:90:
ca:d8:d0:d1:83:7f:db:e1:51:2c:d4:f8:c8:d9:dd:70:7a:61:
75:b2:cc:cd:6a:9c:2c:87:3e:4e:dc:d4:26:0d:98:12:19:94:
64:82:9d:f7:ef:0f:32:4d:01:b8:3f:4c:0f:2a:86:75:89:22:
6c:56:7e:a9:72:aa:1f:aa:af:37:a6:84:f3:bf:ec:81:cb:5f:
47:fe:48:fa:a0:43:4a:15:40:f9:64:e1:01:52:b8:b9:fc:7d:
db:91:a3:98:a1:64:17:f2:ed:dc:ff:d1:cf:94:9a:ce:e0:4a:
76:32:2c:b9:64:ed:d4:4b:94:56:0c:01:37:3a:3f:36:65:36:
07:a6:e3:21:4e:cb:45:64:26:92:d8:d5:25:29:eb:c1:1b:21:
46:1c:5f:5b:75:de:78:af:5a:b8:3f:d8:8e:68:e6:f3:57:c3:
a7:40:1e:80:ff:1e:30:44:78:e4:76:ee:49:de:5d:bb:bf:ec:
e7:97:a5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:07:41 2025 by rpki-client