Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
File: lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft (raw, json)
Hash identifier: EnWkuudG5lZhdYM48FZc+7wVLmFpLUBRuSfQRIFawA0=
Subject key identifier: 44:3F:7C:FA:F9:EB:28:3C:A5:3B:EC:48:0C:14:79:39:69:3E:76:4C
Authority key identifier: 95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
Certificate issuer: /CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Certificate serial: 0196BD12746A32171853F7C23400A954C615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
Manifest number: 153A
Signing time: Sun 11 May 2025 02:00:25 +0000
Manifest this update: Sun 11 May 2025 02:00:25 +0000
Manifest next update: Mon 12 May 2025 02:00:25 +0000
Files and hashes: 1: lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl (hash: FhOO1Q0cAHrf0Oi547MxACCvyRu25/IYhmfVSoHOKUw=)
2: sQyECaaIBBJuTWR_GAKRUGY2zLs.roa (hash: a7MHGEIK7Syni3DpYI0UPL4y49isayDX/P6hkOd4qq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:74:6a:32:17:18:53:f7:c2:34:00:a9:54:c6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Validity
Not Before: May 11 02:00:25 2025 GMT
Not After : May 12 02:00:25 2025 GMT
Subject: CN=443f7cfaf9eb283ca53bec480c147939693e764c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:c9:75:5a:d5:72:a0:44:6c:16:0b:5b:52:
e1:44:ce:56:ca:53:39:f6:c3:46:36:f0:79:35:c5:
5a:b1:bb:49:e3:42:6d:b6:a0:1e:0d:de:05:d0:c2:
ba:1d:45:88:23:50:78:2b:18:b4:c3:d9:07:f3:90:
a9:32:02:48:73:b7:0a:b0:9d:e3:2a:f1:63:ed:01:
ef:bb:c4:29:70:0d:dd:50:a7:40:18:ed:2a:29:55:
4c:b5:29:07:8b:d6:cb:b2:a3:9b:82:2f:f3:b1:98:
de:74:7c:96:69:b2:3d:0d:ec:6d:1b:07:9a:ba:64:
a6:aa:fd:f3:4c:81:fa:e2:34:c4:1c:d8:45:8e:99:
25:5f:ab:6b:45:fd:6d:e4:a1:cf:69:a9:a6:2a:e3:
bd:c5:4d:be:58:c0:9c:e8:a5:a1:72:20:e3:37:e8:
dc:d6:34:10:67:0e:3e:c4:90:2b:56:a7:b5:f0:89:
ee:bf:84:cc:4e:28:ae:1d:53:aa:0c:42:ce:0e:d1:
7b:a7:b7:1b:d0:03:ca:2a:a8:93:54:55:c9:47:3d:
52:ff:8d:70:13:f2:d7:d8:75:07:11:4a:be:60:15:
a8:27:de:64:d7:31:50:8c:ec:ef:50:5b:5a:17:ec:
6b:e3:20:68:59:43:76:fb:15:1e:3e:d8:3e:3c:f8:
4b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3F:7C:FA:F9:EB:28:3C:A5:3B:EC:48:0C:14:79:39:69:3E:76:4C
X509v3 Authority Key Identifier:
keyid:95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9f:73:c9:db:fb:54:53:aa:9a:39:c2:e2:03:48:ac:35:31:
b9:b3:d0:e3:e3:f6:39:e7:bb:fe:12:a4:50:a1:16:23:e0:65:
b5:01:07:7f:9e:d1:0f:a9:bf:66:8d:77:c5:5c:8a:37:63:0f:
09:38:97:b6:01:7b:d1:dc:48:6f:ef:93:29:26:07:79:14:27:
73:83:8c:aa:82:e5:a8:52:ab:3b:26:ab:52:db:9d:87:54:a9:
8d:25:80:b4:06:91:1f:63:55:23:82:24:47:f1:11:82:9c:00:
6d:de:77:db:7f:6b:f3:9a:c1:62:6c:4b:c3:89:5f:5a:2e:9d:
1e:fc:22:b2:61:8e:4c:66:0f:4c:59:23:cb:51:55:a1:33:15:
8b:24:bc:87:2e:60:a6:98:44:6f:c1:fc:e0:a0:37:d3:3a:6b:
7f:67:4b:b0:c4:a5:98:84:62:d1:f7:f8:2d:6e:55:15:b8:8c:
80:0d:a8:d8:1c:7b:42:29:f1:d3:42:ee:c7:31:ae:f6:e9:66:
6d:f1:3f:9a:78:d2:ac:83:03:96:6d:4e:2d:30:f8:71:20:28:
8b:ca:de:cb:21:36:47:6f:6b:bb:02:31:ca:90:85:8a:97:9d:
21:51:14:f7:08:b7:12:de:21:4f:b6:da:11:0a:8f:d4:26:07:
66:c8:75:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:36:37 2025 by rpki-client