Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
File: l-y52NNIlBZmfumV9fTiGje2-fg.mft (raw, json)
Hash identifier: 8032tgqZbyBqranU8vKrUWAhpi2vo3X+vHw8/PDwd3k=
Subject key identifier: 61:64:47:08:09:A5:BB:76:89:97:D4:88:EE:84:9B:77:8D:3C:D8:E8
Authority key identifier: 97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
Certificate issuer: /CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Certificate serial: 0196BD495F4FBD8CE11D2AC737FEA7520F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
Manifest number: 05BD
Signing time: Sun 11 May 2025 03:00:24 +0000
Manifest this update: Sun 11 May 2025 03:00:24 +0000
Manifest next update: Mon 12 May 2025 03:00:24 +0000
Files and hashes: 1: YEAGUvq4a0uBKUxsvBxbjQaBFyI.roa (hash: GNqYAmNWNIrSRNz7fZ+tj/pHZ5I/AkpnVRtGA7RbM20=)
2: l-y52NNIlBZmfumV9fTiGje2-fg.crl (hash: ATlFtq2pkY2zSKOAK9gq715oOxQKvbIQRpjdyvaGXvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:5f:4f:bd:8c:e1:1d:2a:c7:37:fe:a7:52:0f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Validity
Not Before: May 11 03:00:24 2025 GMT
Not After : May 12 03:00:24 2025 GMT
Subject: CN=6164470809a5bb768997d488ee849b778d3cd8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:3d:52:4c:c4:2d:13:6f:42:61:46:4f:93:
a5:8a:f7:7e:c6:c4:1e:10:d2:02:21:48:fd:a7:2b:
d9:d9:68:ce:b6:4d:22:83:cc:03:3e:1c:72:7b:85:
fd:c8:51:a8:77:e8:2f:06:90:94:48:61:3b:5f:36:
21:28:a5:70:0a:82:35:a1:49:87:7f:90:0c:d9:9a:
9c:c7:ee:5b:4d:54:7d:91:52:35:96:38:91:83:64:
fe:d9:87:7b:08:37:55:69:23:54:ac:ac:81:d1:02:
49:20:d4:fd:63:79:98:3c:62:d1:32:2d:3b:e4:00:
8b:62:6c:bb:f7:dc:8f:af:aa:24:26:c9:ae:81:41:
ad:30:c1:ed:e1:6d:db:68:d6:16:dd:d6:85:68:16:
12:f0:85:31:be:42:c8:e6:b9:80:78:74:e2:ce:d7:
d6:54:09:de:24:7f:4a:b5:b5:21:d5:65:aa:11:c2:
05:91:39:91:da:41:3e:e5:fc:2b:da:b1:14:8e:bb:
13:92:aa:6b:a7:2a:68:25:07:92:6f:59:11:06:b1:
2f:3a:70:4d:0c:69:d3:f7:b4:56:d2:c0:bd:4f:89:
fb:b8:ec:d0:9e:1c:77:be:7b:03:aa:7f:a0:d6:69:
f4:46:e0:11:de:a9:af:25:89:84:7e:58:41:0f:29:
28:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:64:47:08:09:A5:BB:76:89:97:D4:88:EE:84:9B:77:8D:3C:D8:E8
X509v3 Authority Key Identifier:
keyid:97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:cd:bf:e7:8d:e9:3c:de:89:d2:ed:6b:7f:67:08:fb:91:1c:
67:85:38:19:59:21:5b:84:f3:e5:68:61:cf:fb:8d:41:c1:41:
39:9f:42:8e:aa:af:f3:23:1a:35:8c:32:4b:cc:5b:ff:0e:33:
5f:7d:63:57:4e:72:83:50:83:7b:bd:b0:cb:b0:9a:5f:99:bd:
dc:4d:83:27:cf:8b:02:4d:ee:c1:15:d9:6e:7b:fc:d8:dc:3b:
2e:2f:29:43:b4:f3:3e:15:1b:68:4b:61:b2:3a:c2:d6:8b:e6:
fb:9d:cb:a7:f6:40:3c:40:78:ea:7d:8b:8f:32:cd:27:c2:da:
4b:59:4e:c1:ee:d9:43:a1:6d:ba:3e:3d:a5:79:cf:ef:a5:b3:
b2:2e:35:2d:1c:37:43:de:c8:05:8a:f1:94:bf:cd:c9:da:9f:
c0:3d:18:4e:f1:f7:43:43:63:c8:e0:50:5f:dc:8e:b5:52:28:
cf:c6:5b:b1:07:28:b7:5a:2f:1f:83:eb:f5:69:dc:59:9b:ad:
ff:ab:11:51:af:d8:8f:1f:23:bd:98:6d:2c:b2:4f:e4:cd:e8:
c8:34:7c:04:67:bc:15:a3:d0:e0:42:01:d0:44:a7:19:5f:fd:
f4:41:e8:18:7c:b8:b7:b4:12:fe:6e:fe:f7:a3:1b:cf:76:30:
25:46:16:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:38:04 2025 by rpki-client