Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
File: L45RIlad5SzVCux5NJS_HOfCX8g.mft (raw, json)
Hash identifier: m2/sVaFZKWfslB6mVHYtNl9vr2g44g5WW2kNJOQKyZ8=
Subject key identifier: 79:CF:86:09:4C:99:35:C5:D3:17:18:45:13:83:B6:7B:BB:44:1C:EC
Authority key identifier: 2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
Certificate issuer: /CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Certificate serial: 0196BE5C837CEDA1E83EFBBCC0F3ECC1DF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
Manifest number: 0BE8
Signing time: Sun 11 May 2025 08:00:56 +0000
Manifest this update: Sun 11 May 2025 08:00:56 +0000
Manifest next update: Mon 12 May 2025 08:00:56 +0000
Files and hashes: 1: 4inp3rmc8abBZrSpYG-9NzczLIs.roa (hash: qFrZA2CrZBITypnTYdQbhEuRjClc/T+Pn0jtn1pc/ok=)
2: L45RIlad5SzVCux5NJS_HOfCX8g.crl (hash: 9p65VIt1Ej7LBttAz4puATyy5tAqtuCIsVYAKidfAYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:83:7c:ed:a1:e8:3e:fb:bc:c0:f3:ec:c1:df:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Validity
Not Before: May 11 08:00:56 2025 GMT
Not After : May 12 08:00:56 2025 GMT
Subject: CN=79cf86094c9935c5d31718451383b67bbb441cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:24:5e:f6:4e:40:fc:88:0b:ec:fc:dc:0f:
d6:ea:ca:9f:47:fd:df:90:34:70:81:57:32:06:11:
72:c0:9d:4a:34:1b:04:b8:1e:f2:fb:4f:ac:15:95:
89:33:49:02:11:30:27:bd:77:e9:c2:ff:16:78:88:
29:ad:6c:7e:bc:a0:ef:5f:98:5f:90:6d:cd:35:5c:
82:a8:03:bd:a7:7e:87:7b:16:3c:9b:18:57:e6:36:
a7:c8:33:76:f6:0c:64:84:f5:2d:68:a6:e3:3a:a4:
c1:ad:73:bf:ed:46:13:80:df:6a:4c:c7:91:90:67:
56:1a:5a:51:c0:3a:b9:6d:be:38:6d:7c:83:de:05:
fc:15:f5:95:14:c8:3b:0b:b6:e0:e8:34:88:09:9a:
2b:b7:56:ec:fc:1d:d8:ab:67:3c:c4:2e:a7:4d:b1:
c8:b9:d7:a7:42:69:a3:3e:fb:bb:19:38:00:ae:15:
8a:28:bb:67:1c:90:25:7d:fd:1e:b3:81:09:c9:20:
78:9d:ba:4a:a4:89:31:26:37:fa:66:f6:4b:61:c5:
a8:89:d1:79:0c:a1:92:c9:1e:47:f2:1b:c2:f0:35:
5d:60:e1:7b:77:2e:59:a2:32:28:48:1e:56:b2:38:
25:83:21:84:33:96:92:98:dc:eb:82:c6:ed:6a:12:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CF:86:09:4C:99:35:C5:D3:17:18:45:13:83:B6:7B:BB:44:1C:EC
X509v3 Authority Key Identifier:
keyid:2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:59:c6:ec:f8:e4:1e:89:5b:85:50:1a:9c:27:8e:53:58:93:
28:0d:5a:c2:0b:7c:f9:93:cd:89:ca:22:53:c2:53:86:99:cd:
a5:c1:d0:16:7a:72:ac:2f:cd:80:a9:16:65:18:3b:a4:da:25:
a1:85:15:32:01:34:11:3f:c9:a4:97:32:fc:a2:a4:81:2a:d5:
fb:16:71:67:d2:a2:22:00:ec:ba:be:60:1a:e0:36:9b:cf:34:
70:b7:7c:9e:7e:fb:95:36:d1:5f:f2:ca:d9:60:6f:11:48:41:
c5:33:1b:b8:46:8c:d7:0f:8a:8a:b7:f9:aa:55:c1:ac:01:21:
e7:fa:ce:17:94:c1:29:65:52:20:a3:ab:9e:e4:c2:8d:a1:31:
69:8c:59:e3:0d:11:42:e9:44:bc:8e:cf:c9:67:19:08:97:1b:
6b:e1:ab:4c:f1:12:e3:e9:12:df:02:9d:8f:14:44:fa:f7:28:
6c:b3:72:ed:71:d6:aa:4e:35:60:65:05:49:12:2c:d5:9f:6d:
17:77:ca:91:c1:79:1a:f5:81:28:89:02:ec:2f:04:e7:e6:34:
24:a3:e6:6d:d7:bc:71:09:cb:85:27:c7:86:08:6f:53:9c:11:
55:25:5c:47:f3:13:bf:89:8c:6f:30:c7:f9:8e:99:20:6b:91:
74:e6:fa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:38:45 2025 by rpki-client