Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier: ZPwPqK8hMLI4ua/+a5NOZnT7RPtJKw5BVuDQoPLfcao=
Subject key identifier: D0:D3:61:C2:F1:34:A8:E4:DB:6E:48:2D:AE:D0:03:71:3A:35:45:2E
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 0196BAB6784DD9B7BE0647326A86776EA3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number: 0647
Signing time: Sat 10 May 2025 15:00:42 +0000
Manifest this update: Sat 10 May 2025 15:00:42 +0000
Manifest next update: Sun 11 May 2025 15:00:42 +0000
Files and hashes: 1: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: Jc0rWNj0gUox4m6+xLIF2BPfmIXCezq+1aHTomCtzbc=)
2: jCfDa1o9-67BNQODivTRRldEbdY.roa (hash: 8Y6qhIf9Ka0kdUNg/SnNbfjipainSlycgW7SSV7AHSU=)
3: om141KzkG2-4eMZ-f0PthIkpE80.roa (hash: cw3Iskxz7drppI2oVPr2KEtsT6+wW7KALNNnzpIfPOQ=)
4: vA4JTCZBPjorS9CM--5uNxgqUOI.roa (hash: C8BQR0NQXngOUVQVK+k99B0pWs9mjN+aAreX6gH4h2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:78:4d:d9:b7:be:06:47:32:6a:86:77:6e:a3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: May 10 15:00:42 2025 GMT
Not After : May 11 15:00:42 2025 GMT
Subject: CN=d0d361c2f134a8e4db6e482daed003713a35452e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:bb:06:f3:f7:2a:c4:fe:26:47:b1:42:08:
da:3d:ba:72:89:64:36:5c:98:4c:50:9f:70:b9:35:
c7:5a:b6:17:37:67:43:e1:9c:ba:af:cf:d4:ce:a7:
54:cd:cd:a6:d1:b5:f4:d8:69:f0:34:b6:66:57:36:
c4:51:81:c2:5b:4d:01:63:8d:3d:c8:f7:fa:d1:c5:
2d:22:35:6f:09:b5:df:fe:1f:76:5d:7d:54:62:3b:
db:49:1f:31:15:cc:9d:83:06:59:5f:13:57:ae:9d:
91:a5:fd:df:ef:0e:59:86:2c:0f:7d:e7:ae:cd:72:
ee:64:fa:cf:00:11:df:4c:30:ec:1b:51:55:c7:67:
b7:a1:fd:ea:0a:d7:01:eb:ac:6a:c5:d7:93:eb:23:
67:98:8a:7a:50:2a:83:23:c3:dc:b6:a7:2c:b0:46:
4a:91:f1:d9:5d:f1:6e:47:58:c4:87:90:09:4f:dd:
6a:25:44:de:b5:e3:9b:6b:e3:6e:92:38:6f:95:c6:
03:34:7f:f9:a7:ea:ef:3e:c1:20:8e:d0:8e:40:47:
48:9f:3d:d6:80:89:06:e9:e4:b5:bf:43:38:75:fe:
06:37:01:f4:65:04:78:c1:bd:b5:f5:31:57:70:8b:
cf:cd:69:f9:eb:41:e5:9f:ea:b7:12:6b:6b:62:d4:
e0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D3:61:C2:F1:34:A8:E4:DB:6E:48:2D:AE:D0:03:71:3A:35:45:2E
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0f:68:16:3e:7f:83:40:98:01:3f:1d:db:e1:7a:41:b0:3e:
07:8a:1f:21:26:27:ac:78:8d:39:01:c6:c4:70:a5:63:1a:bb:
34:b9:f9:a7:db:fc:95:89:ec:36:fa:2b:9f:2a:5b:fd:99:b5:
99:c9:f9:e4:f7:37:f3:0c:d1:24:41:60:5b:37:9e:63:8e:2e:
66:c5:67:1d:37:a5:60:72:93:6d:2e:a1:20:61:54:c7:68:22:
8b:bb:e1:94:ae:6d:dc:e3:6b:04:c8:13:19:e3:fa:b7:c2:1c:
81:3d:84:6d:6b:1f:95:14:0b:ee:09:73:25:b8:b6:d2:80:63:
3c:22:c3:6b:f2:ed:c4:76:5b:9e:1b:a3:a1:4d:d7:f0:5f:30:
3c:b3:91:f2:60:ac:4d:1a:c5:69:ee:31:fe:a3:27:99:d2:67:
68:eb:9a:f8:95:a0:1e:ac:97:b6:f3:29:5b:5a:44:77:c0:f3:
77:26:2d:be:22:ce:f8:dc:bd:4b:80:fe:82:28:d8:76:e5:11:
39:b6:61:70:68:e5:07:95:33:c1:19:bf:38:85:5d:fa:ff:8c:
76:37:d9:cf:da:41:ba:6d:62:25:34:69:56:18:25:d2:2d:d5:
9e:db:8d:61:31:5c:9c:25:c6:86:8e:ec:54:dc:fe:40:b9:c3:
95:c5:95:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:49:36 2025 by rpki-client