Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
File: _L65swLOtvWNMntJTYFFlDO-c40.mft (raw, json)
Hash identifier: 7VpyaHTvAvWBqrIFa335wSywkkRGQmJCkO3KCTY6C5U=
Subject key identifier: 40:A6:64:78:D3:98:AC:83:D0:02:E1:E9:C2:6E:7D:2B:55:7F:F8:7D
Authority key identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
Certificate issuer: /CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Certificate serial: 01969CE2AD8C7CD8752DEEED2EDF02EE65CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
Manifest number: 0EEF
Signing time: Sun 04 May 2025 20:00:23 +0000
Manifest this update: Sun 04 May 2025 20:00:23 +0000
Manifest next update: Mon 05 May 2025 20:00:23 +0000
Files and hashes: 1: 4FgyXjSTtWGyFOXdnX2-aAmOOA8.roa (hash: InpaFw/32Nb/Zr2vPmUWS5J9SJuIWTtmwm6Og2V6cjc=)
2: _L65swLOtvWNMntJTYFFlDO-c40.crl (hash: uOAUFgjEi2BpNLTXCkVfWX9B2atrobyXTbhragTfoj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:e2:ad:8c:7c:d8:75:2d:ee:ed:2e:df:02:ee:65:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Validity
Not Before: May 4 20:00:23 2025 GMT
Not After : May 5 20:00:23 2025 GMT
Subject: CN=40a66478d398ac83d002e1e9c26e7d2b557ff87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:98:8a:cb:07:10:a0:1a:d5:26:d2:41:4e:
b9:26:46:ca:51:c0:a8:8b:18:ea:81:a5:60:81:9d:
29:c6:89:d9:70:57:ac:98:18:06:7f:0e:08:99:61:
5b:28:1e:c0:f5:4b:3a:9a:e5:be:66:46:b7:b3:38:
5f:d6:24:1a:ec:b1:72:84:a1:f7:c9:dc:b3:6b:59:
35:b8:e6:e3:66:80:15:8d:8d:63:1d:11:83:9d:38:
7a:f2:4a:e7:59:7c:1b:01:75:34:c6:7a:38:0b:ca:
e9:da:ce:8d:f4:91:f6:2f:dc:44:1b:1c:b4:63:ae:
45:a9:23:52:34:88:80:0c:7a:9f:7a:16:0c:10:60:
cd:2d:b0:35:fc:c8:c7:59:33:95:1f:05:30:d5:ab:
07:93:36:c8:28:12:91:eb:50:96:a9:94:3f:4e:c3:
b2:df:08:d1:df:b6:bf:b5:fa:2a:33:13:d5:e6:ad:
89:4d:e5:b2:61:74:bc:ec:14:cd:aa:1f:b1:40:ca:
58:c8:81:e1:ae:2c:e3:1b:8c:b0:76:cd:15:00:0c:
8d:e2:0a:22:61:3f:1b:ec:ea:82:cc:b9:80:5a:d7:
04:b5:ac:d5:e8:cf:c2:56:36:e6:b2:6b:d6:95:5e:
91:b5:4a:2a:73:b3:19:85:d7:d8:19:20:95:02:52:
de:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A6:64:78:D3:98:AC:83:D0:02:E1:E9:C2:6E:7D:2B:55:7F:F8:7D
X509v3 Authority Key Identifier:
keyid:FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:87:61:08:83:c0:94:01:9d:6a:9c:5a:db:6d:31:81:67:75:
32:84:73:67:e9:71:ac:fd:54:7b:b1:76:60:ec:53:d1:00:b4:
73:4b:fe:43:04:5c:09:6b:35:b8:97:b7:e8:c0:b9:6c:e2:a0:
42:82:ee:20:3d:cd:a1:9e:32:84:51:c5:da:8b:3e:20:97:61:
46:d4:d1:34:bf:56:05:8a:10:28:a4:ef:a3:ad:28:00:ec:74:
19:17:bc:71:21:13:8d:a6:47:62:b1:e9:8d:f2:59:a4:b9:35:
a2:bb:e9:ac:d0:ca:02:9f:55:5c:65:9f:a3:f4:4d:ea:5e:1b:
fb:d5:4c:73:d7:e7:54:00:9e:b1:01:a6:ef:5b:46:88:c6:82:
35:62:ba:b6:9a:24:60:d6:99:31:2b:64:cd:af:d0:4f:78:87:
fa:35:d8:65:db:c5:63:c2:fc:34:96:0b:28:e9:e5:e1:3e:07:
bb:7f:66:8b:24:9b:bc:90:ef:50:88:2b:f9:6a:30:6d:20:5c:
69:71:ee:1f:9c:35:f1:66:67:b8:c6:b8:fd:4c:54:a9:75:38:
c4:4e:17:48:53:89:84:c4:6f:19:7c:47:85:21:39:be:0c:45:
ac:b9:80:90:09:1c:4f:4b:a8:ab:49:a6:5d:fc:41:3c:1b:43:
b1:3a:65:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:38:44 2025 by rpki-client