Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: NBrX1/AnT1c+7SmbDsW8zAQxy4QHc4qM+WbJtJ4wzgw=
Subject key identifier: 9D:62:54:CC:A9:23:9F:DB:9D:2B:36:D2:4C:22:1D:B7:9F:51:69:7A
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 0196A2E4D9F53742B8EE17BD1EB90A335DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 036D
Signing time: Tue 06 May 2025 00:00:29 +0000
Manifest this update: Tue 06 May 2025 00:00:29 +0000
Manifest next update: Wed 07 May 2025 00:00:29 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: mnoTcD9tnQqgDv6yzlE4Bj0Lx9qBeYYUrPEfNe6d7VM=)
2: WxBvM9AzXvcGUxLQO7mjVfKZ8SI.roa (hash: MlBmuxBYdT/UhZRE0mpsF297g9H8Aa5t6UDiR3XGbFU=)
3: hGYvey0NL7kedoZnW8NGK9NdHUE.roa (hash: j/gjt7b1AkCBiDU1S/YvmfcXT2lTvik+0pgkIhPCV+w=)
4: zhUAq4pe-9N-dxfCl2d78EjPTb0.roa (hash: uyxGbVsUozb8CGUZeB9rmoW8CVbBZTPJHf+JK7e+rn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e4:d9:f5:37:42:b8:ee:17:bd:1e:b9:0a:33:5d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: May 6 00:00:29 2025 GMT
Not After : May 7 00:00:29 2025 GMT
Subject: CN=9d6254cca9239fdb9d2b36d24c221db79f51697a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:ca:5a:e1:07:8a:e3:a7:2d:b5:ed:64:c5:
c4:65:54:e1:f0:37:d6:24:87:f4:76:fe:f4:b6:ef:
a2:f3:55:80:b9:e0:fc:ea:d8:fe:2e:87:94:d8:28:
9e:44:64:c0:83:0c:07:a5:8c:d0:82:e1:cc:11:b0:
99:7d:68:4c:47:bd:2e:f4:33:8f:dd:92:af:cf:f4:
27:4d:6b:b5:80:71:79:cf:d8:d3:38:fd:a7:84:54:
01:89:1f:0a:53:91:a7:3b:36:fe:75:dc:9e:a2:ff:
4e:be:0e:f8:2e:b0:fb:c1:bb:0d:75:a1:42:c1:5d:
50:93:03:39:37:92:a4:e3:0b:98:c8:1b:b2:14:29:
a6:46:0d:be:ed:5f:97:58:3c:f2:2b:84:73:3b:7f:
28:62:b1:7f:76:9d:75:84:7f:78:17:8a:83:2c:9e:
29:a0:a1:10:7f:19:bf:d5:94:8a:05:c2:91:35:c2:
f8:c2:67:07:71:19:f8:88:ff:37:27:19:4c:3d:7d:
97:df:81:03:30:ad:2f:90:e0:47:0f:83:94:13:31:
2e:b2:db:6e:91:a7:82:b9:f4:d6:b2:5b:68:9e:1f:
9c:94:25:5f:ac:de:37:48:94:32:c3:43:86:c6:1f:
9c:22:e7:ec:86:e2:20:45:65:94:21:f9:43:2f:0e:
41:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:62:54:CC:A9:23:9F:DB:9D:2B:36:D2:4C:22:1D:B7:9F:51:69:7A
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2d:e5:c4:39:ec:e4:9b:82:57:7f:cd:d1:95:f3:bc:51:be:
64:a8:fa:8a:2d:c1:3f:1f:9f:7b:67:37:ba:b6:d3:d7:74:5f:
6e:71:10:97:d6:f8:a5:16:3d:6d:65:96:f7:72:7f:8b:70:ad:
e6:11:58:18:71:19:a7:3e:2a:af:a8:18:6b:fa:86:95:bc:d6:
0b:47:f0:e2:ca:c5:6b:01:28:2f:08:27:0d:67:ee:87:5f:8f:
6a:7d:11:5a:41:04:35:82:ad:53:59:03:55:46:88:6e:f3:71:
42:e3:53:e2:7f:3f:be:d2:05:c0:d4:79:94:f7:de:d0:88:b8:
dd:a8:46:bb:4d:13:43:46:94:a0:72:a6:c3:1d:e2:0a:98:39:
d4:0f:51:37:9d:10:da:54:d5:8a:7f:5e:9f:be:2b:7e:eb:9a:
d3:98:d8:54:6c:a6:ff:44:f9:a7:25:b5:ed:06:e2:b6:4e:b2:
96:80:ab:55:20:07:c7:b9:90:e1:32:01:66:93:51:4c:46:cc:
a2:4d:10:e5:28:1d:d5:e7:ef:eb:8d:36:9f:7d:43:ad:19:d4:
a2:8f:86:b0:f1:21:9e:5d:df:d9:31:d5:74:a2:c4:28:55:da:
4f:29:83:ae:e3:49:be:ec:26:7c:ec:00:7c:0c:e0:4c:4f:10:
f5:c6:9e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:04:18 2025 by rpki-client