Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
File: lqKMzDCRW1xzEoCowcpn_mAJVO4.mft (raw, json)
Hash identifier: UhZ4omqlapV36gGvQNQcWztldCIMSbHO+shI4gwpv8M=
Subject key identifier: 7F:10:F5:78:55:39:82:1A:B5:88:A9:51:60:F7:6A:E4:62:58:8D:41
Authority key identifier: 96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
Certificate issuer: /CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Certificate serial: 0196AE7B1E5B303466CE720BDAABA3923067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
Manifest number: 05A8
Signing time: Thu 08 May 2025 06:00:26 +0000
Manifest this update: Thu 08 May 2025 06:00:26 +0000
Manifest next update: Fri 09 May 2025 06:00:26 +0000
Files and hashes: 1: P0vR8NFOqzUM0n5-PTdZVFTAC8Q.roa (hash: A8zEAcViYD9RWk/au7+yPQfR19Sh9DoooPV1RyNftPE=)
2: lqKMzDCRW1xzEoCowcpn_mAJVO4.crl (hash: XiLj1Nl10c/MR8z6tcUZwR7Em5vuTBdyfv5S4Kv68Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7b:1e:5b:30:34:66:ce:72:0b:da:ab:a3:92:30:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Validity
Not Before: May 8 06:00:26 2025 GMT
Not After : May 9 06:00:26 2025 GMT
Subject: CN=7f10f5785539821ab588a95160f76ae462588d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:5f:3b:00:21:42:2d:06:af:6e:2f:8a:b9:
07:f0:75:9d:6d:1b:7a:83:93:96:9d:a5:0e:09:eb:
4b:f4:2e:7c:e1:88:d9:95:d0:52:b7:48:83:6b:2e:
b8:99:bc:37:51:ef:66:01:30:d0:b6:2a:ac:fa:6d:
85:7e:05:e1:a1:ca:30:ae:8a:47:7a:a4:dc:87:9b:
1f:88:d6:72:08:b2:f0:dc:5a:3a:e7:67:d4:01:73:
da:4d:ca:29:bd:8e:61:14:dd:28:88:65:56:15:94:
0a:79:04:1a:9d:86:ff:a5:dc:3a:46:67:aa:23:5d:
53:5c:47:57:71:34:e6:5a:7c:b2:6b:7b:48:65:13:
ac:8e:ed:0a:c7:25:04:0b:d5:74:8b:37:60:81:8b:
ce:4b:c5:e7:59:9f:76:64:1f:f6:19:93:a8:28:81:
42:3c:9c:36:4c:9e:c0:68:35:14:45:c9:6d:d7:f7:
92:f5:8d:6e:79:ff:79:6c:fa:ca:64:60:ab:fd:c2:
e9:6e:4f:65:5c:70:e4:1e:05:8b:8e:04:7d:69:42:
a5:4d:9b:6e:a3:02:7e:c3:d8:f0:45:42:08:f6:e4:
25:57:ad:16:fd:2c:94:68:59:6f:a4:70:dc:b1:96:
70:a2:20:1a:10:42:f5:5e:14:a7:22:30:ef:67:0a:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:10:F5:78:55:39:82:1A:B5:88:A9:51:60:F7:6A:E4:62:58:8D:41
X509v3 Authority Key Identifier:
keyid:96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ad:b6:c7:e6:df:f1:8a:23:3b:99:83:de:e1:32:e6:e7:18:
8a:ff:57:e2:a9:d9:c5:cf:f1:dc:c7:43:ee:cd:13:10:5e:3b:
a3:58:e5:5e:20:7c:7e:c7:1c:aa:a7:c9:08:05:af:97:aa:4f:
ca:4d:64:4c:4c:12:81:d6:b0:f5:87:64:13:b9:1d:8c:06:3e:
4b:19:57:94:32:8d:2a:6d:5c:bb:9a:4c:7d:38:0a:3d:e6:5e:
2d:80:30:83:8c:41:0e:fa:36:1f:96:99:38:cf:d8:07:24:c5:
ed:3b:85:2e:7b:89:8b:bf:2c:44:ef:06:e6:9a:a3:8b:a3:09:
2e:6d:b4:e6:69:f1:a6:45:20:23:4c:c1:ab:2a:9e:10:37:1c:
9c:6e:a1:8e:6e:b9:53:d9:a9:2f:68:34:05:80:82:dd:ed:ce:
6e:ac:b3:14:a5:5e:1a:ba:a8:be:d1:ad:d1:e5:0f:b5:9c:2c:
94:65:2c:55:c1:73:43:9a:c0:de:b3:32:f6:64:8e:4b:c8:b6:
d8:c2:ae:e9:df:c0:37:eb:15:cd:28:13:bd:17:56:1a:79:ca:
21:6f:9b:84:f9:57:65:b2:c6:f8:eb:03:14:e5:77:76:6d:98:
b1:7c:47:0a:44:e4:92:9c:88:49:5b:30:23:c6:24:eb:55:ad:
0a:76:65:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:29:03 2025 by rpki-client