Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
File: l3C_I3XVm6gamVXAei8KIyZLYag.mft (raw, json)
Hash identifier: 6jADU2RgczbZjdJuSxAohYObwkEnO/JveqWdfZhEoL0=
Subject key identifier: 55:85:A1:52:D3:AA:05:18:ED:51:DD:4B:8B:2C:23:6B:3C:C3:C2:AA
Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Certificate serial: 0196A541592DB2B8B1463BA306D7D5F93D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
Manifest number: 06D5
Signing time: Tue 06 May 2025 11:00:45 +0000
Manifest this update: Tue 06 May 2025 11:00:45 +0000
Manifest next update: Wed 07 May 2025 11:00:45 +0000
Files and hashes: 1: 1cgE3uMD9UQj0N9D1NwFutRDIfE.roa (hash: sz+QlLmzVk2yB4VM7ft/t4trcbfch70ucXLho0/P3wo=)
2: Ps7ItdcqBOZwFy7JAglhbkmvgec.roa (hash: Yq/VfNMV/+Kg/XB3DpV+ctEtAUoBDR8xyYarG7XLgw4=)
3: l3C_I3XVm6gamVXAei8KIyZLYag.crl (hash: PHoCIUv3pQeFxgiPPk/v8x4YSq3wGRgdZsb3NxLPxxg=)
4: nn8N_U11uSgPsYKzqfF8emHLewY.roa (hash: UE2WeYKjsQLQDIQ6fpdM8tvgC0pZW+64uPlpd0Qrdgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:41:59:2d:b2:b8:b1:46:3b:a3:06:d7:d5:f9:3d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Validity
Not Before: May 6 11:00:45 2025 GMT
Not After : May 7 11:00:45 2025 GMT
Subject: CN=5585a152d3aa0518ed51dd4b8b2c236b3cc3c2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ce:e9:f4:98:90:4f:f9:4a:09:84:52:f8:d6:
d0:6e:06:24:9a:2a:32:7b:a5:cf:43:f0:0d:3e:a6:
08:d2:ad:56:b1:19:51:22:32:a6:aa:ff:89:3c:63:
df:c0:77:ad:92:1f:47:11:36:00:78:d6:ca:d8:75:
33:6b:27:02:cc:71:e3:e0:8a:ff:17:b0:30:be:a3:
fe:6b:1d:91:7a:5c:38:ab:a4:23:c6:43:51:ce:9a:
64:ce:23:37:96:2b:d4:cd:64:9a:8e:7f:3c:c1:9a:
c2:85:d7:9c:dc:56:cf:87:0f:a9:2c:4e:5c:e5:22:
51:3a:de:95:9f:2c:1b:9b:26:71:e9:66:39:d5:33:
b7:b9:9b:4b:b1:a9:8f:bf:2b:55:77:66:d5:0d:aa:
11:bd:00:d3:89:e3:09:1f:19:22:4c:05:39:bc:52:
69:77:28:04:3b:e8:91:f6:93:45:c7:09:2a:31:fa:
da:11:ca:a7:03:1c:3e:8d:e1:c1:ac:49:c9:3c:13:
99:49:6d:16:a9:2c:c4:a0:91:db:b1:17:22:9b:b5:
8c:ba:df:8c:63:0e:e6:b0:fd:e7:64:91:6e:c7:18:
f5:7d:15:a2:77:3a:4a:7c:22:12:da:31:42:04:e3:
26:62:98:93:1b:0a:81:9d:11:ce:d1:4c:b0:58:af:
a5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:85:A1:52:D3:AA:05:18:ED:51:DD:4B:8B:2C:23:6B:3C:C3:C2:AA
X509v3 Authority Key Identifier:
keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4f:40:77:07:49:fb:71:22:54:34:62:23:b9:dc:08:d6:5c:
33:45:22:1f:bb:1b:4c:e5:05:a6:1d:c1:e6:2a:b6:88:b4:e2:
af:82:2c:3d:84:91:f7:3e:c9:14:25:be:e1:56:51:03:cc:85:
48:f9:e0:16:21:3b:56:ff:a3:14:72:7f:60:25:b1:9e:ea:17:
6d:40:4c:11:95:45:35:97:11:44:2b:74:ff:c0:c8:ff:08:e3:
65:5e:36:c9:79:ef:67:87:9e:94:99:53:9d:8c:26:8f:e8:07:
d4:4d:8b:a4:06:a1:b0:c6:16:e1:e3:57:a2:6b:5c:e3:9a:87:
b3:6a:f6:35:b5:5b:c3:70:68:8b:d9:bb:a7:c4:39:e0:f3:71:
27:78:fa:d1:9c:89:08:1a:ec:e6:70:53:8f:6d:b4:51:ce:dd:
53:93:32:20:3b:4c:71:5b:65:7c:5a:17:c9:06:dc:e8:cc:f9:
44:35:2b:18:51:4c:7f:ce:cf:7b:07:80:37:cc:c7:c0:91:10:
dd:ef:5f:5b:54:ff:99:c9:c2:f6:ba:e0:a3:7e:23:85:e9:3f:
31:d0:04:6d:e2:e0:70:df:cc:9a:a0:d5:bc:dd:76:b6:10:64:
96:3b:4b:c0:af:74:75:2b:0a:f6:62:35:f3:bc:f9:5c:c7:bb:
dd:69:f9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:47:59 2025 by rpki-client