Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft
File: lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft (raw, json)
Hash identifier: Jr7mJjWN5ZMXpcOK+W7JaNQtQalQ+wwJPVFedgtxcv8=
Subject key identifier: E9:40:13:12:91:6D:25:56:30:18:A4:FD:F5:C2:8B:44:0E:41:EB:38
Authority key identifier: 94:D1:61:59:3D:A8:15:CA:C5:8D:34:79:65:2D:04:84:80:D2:67:13
Certificate issuer: /CN=94d161593da815cac58d3479652d048480d26713
Certificate serial: 01969D879693EF6ECA8603EB1DD0BD9286E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft
Manifest number: 1524
Signing time: Sun 04 May 2025 23:00:30 +0000
Manifest this update: Sun 04 May 2025 23:00:30 +0000
Manifest next update: Mon 05 May 2025 23:00:30 +0000
Files and hashes: 1: bdAF9viIHB5V5FhTALS-owQhcks.roa (hash: lPv9YsuyVHwxqfP/RRJpZeMDZjwRG/d34AhteS5V7Ew=)
2: lNFhWT2oFcrFjTR5ZS0EhIDSZxM.crl (hash: o+35v5enCaXTvAvGrijfrYpbIa6XS39lq8s43Ut9C54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:96:93:ef:6e:ca:86:03:eb:1d:d0:bd:92:86:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d161593da815cac58d3479652d048480d26713
Validity
Not Before: May 4 23:00:30 2025 GMT
Not After : May 5 23:00:30 2025 GMT
Subject: CN=e9401312916d25563018a4fdf5c28b440e41eb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:ad:44:33:c0:c4:f4:2d:48:36:1c:ce:3d:
7c:e5:43:48:9a:9f:03:90:ff:0a:1f:c6:38:d5:66:
a2:d4:d2:65:89:b6:0e:c8:a4:3b:b2:1d:63:bb:28:
19:8c:ce:8c:77:8f:41:90:43:58:1a:54:7d:a2:39:
53:4a:3f:53:7c:19:3e:a0:df:7a:91:17:0e:1c:c8:
4d:a6:06:12:5f:0a:d8:63:a9:97:9b:12:44:51:d1:
4c:9b:99:7e:e2:b0:09:24:00:f5:d7:c9:3d:04:e0:
4c:36:78:c4:55:2c:98:f6:61:4d:e4:a2:17:81:89:
0f:5e:5d:2f:ae:e2:b9:1a:18:16:7d:e5:74:0c:50:
1e:17:e5:6f:f5:90:d6:82:49:d5:d5:3e:06:c7:0e:
c7:04:ed:db:aa:21:ca:fb:dd:96:39:00:ad:05:4e:
9a:ef:cd:ef:06:0c:4c:b1:16:83:0a:b8:94:63:1e:
37:e4:84:d1:ef:13:f3:85:6e:53:31:61:65:b7:ac:
e4:af:f2:ab:61:46:c4:44:ca:66:6c:dd:30:7a:c2:
06:56:32:c8:2d:97:14:11:c6:4f:1a:dd:48:24:9d:
c7:8f:69:74:18:b4:e0:b9:56:d8:eb:e5:d7:68:44:
22:e9:34:30:b4:c8:b6:c6:61:78:ed:4d:4d:18:6a:
24:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:40:13:12:91:6D:25:56:30:18:A4:FD:F5:C2:8B:44:0E:41:EB:38
X509v3 Authority Key Identifier:
keyid:94:D1:61:59:3D:A8:15:CA:C5:8D:34:79:65:2D:04:84:80:D2:67:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:72:c0:98:df:83:dd:a4:90:b7:6d:90:58:ac:10:5c:ac:36:
d2:0c:10:d9:c0:27:61:50:60:76:22:53:6e:c7:f6:f1:bf:8f:
21:5c:72:ea:0b:3f:27:e5:c7:56:50:f5:dd:f7:b6:c1:33:44:
4a:79:16:7c:b9:a6:3a:c2:46:17:14:10:89:0d:bb:a9:a1:ce:
66:a8:5f:06:62:d4:8e:da:18:61:7f:02:bb:98:b6:49:7e:1b:
4a:6a:6c:25:26:b8:3c:e3:e3:5c:c9:88:e8:a9:b2:52:6a:8f:
26:e2:5e:58:25:49:bc:0f:32:46:22:c4:9e:a8:6b:67:da:bf:
82:34:99:1e:59:5b:9a:24:0d:4e:cf:de:5f:50:49:c9:51:8b:
b5:96:c3:61:37:1b:d9:1c:8c:3d:c2:ed:13:d7:09:c3:1b:fb:
85:b9:75:7a:ad:9c:9f:50:40:4e:71:13:2d:78:3b:65:68:62:
68:24:a6:72:a8:f1:37:8c:e0:0f:fa:8c:ec:0c:f8:97:5d:4c:
2c:7b:46:90:99:01:db:4e:fa:5f:ba:06:23:40:1c:41:7e:bd:
04:5b:dd:b5:48:6e:b3:89:c7:cc:1e:fb:e6:0d:30:de:ff:3f:
b0:6a:c1:30:c1:5c:c5:75:f8:9d:45:f8:d3:be:56:36:ed:5a:
bb:b9:15:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:55:29 2025 by rpki-client