Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: ldWbFyM2jeabkj6GrtBFun2vxb7wOBpRa0wWzLuIGRQ=
Subject key identifier: B1:73:E5:40:ED:DE:D0:DF:65:53:49:4B:C2:A6:71:A5:C2:D9:29:7E
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 0196C1CB0245CC34E55FFE629C96179D0FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 1532
Signing time: Mon 12 May 2025 00:00:29 +0000
Manifest this update: Mon 12 May 2025 00:00:29 +0000
Manifest next update: Tue 13 May 2025 00:00:29 +0000
Files and hashes: 1: 2iLiWe0BMpbPlHeRUZgf_7ggDIw.roa (hash: 5a6Nlx4knEH8VTjhj8RCsqY6ZT98S2ewOdcJJkdDglM=)
2: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: gYzxolFC5/jO1KYyTJReyPYK75vsA41I8zidBtlFaAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:02:45:cc:34:e5:5f:fe:62:9c:96:17:9d:0f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: May 12 00:00:29 2025 GMT
Not After : May 13 00:00:29 2025 GMT
Subject: CN=b173e540edded0df6553494bc2a671a5c2d9297e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:c7:a1:24:af:d7:8c:82:3b:59:36:03:a6:
9b:92:80:e5:77:70:0c:dc:66:88:77:ab:18:ba:37:
15:03:21:b0:b9:78:1c:1b:56:80:50:63:73:22:0e:
7a:a2:70:fa:49:18:76:8d:32:83:be:13:11:ec:1f:
90:e0:0b:2b:78:35:71:80:e8:50:91:71:8f:6c:0d:
f4:06:8f:50:5c:2e:5c:cc:66:6c:17:ec:30:2e:9e:
89:e7:c7:f1:fe:a0:da:bc:a1:6c:8b:25:cf:72:17:
ff:bf:db:53:14:30:4b:bb:7e:5a:f0:6a:fc:a6:13:
52:59:0c:45:6b:36:12:17:79:8d:cc:11:e1:42:d4:
5d:00:72:9b:fb:34:d5:e0:16:99:e7:5e:aa:98:51:
cc:3b:fa:0d:b0:17:e0:af:36:c0:70:46:b9:a6:95:
30:ea:5d:07:e3:a1:39:7f:cb:59:1d:db:58:d4:64:
4e:50:cd:3e:55:15:fd:a8:ef:39:26:d1:84:bc:bc:
1a:58:e0:a7:c1:59:0f:27:10:3d:d7:db:af:e4:d1:
9f:41:60:79:55:1b:be:73:6e:60:e2:93:46:44:09:
b7:a7:a8:e5:cf:50:c5:60:42:70:35:c9:5a:c1:f5:
07:24:68:de:13:e0:96:6f:61:fa:ff:cc:eb:22:fa:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:73:E5:40:ED:DE:D0:DF:65:53:49:4B:C2:A6:71:A5:C2:D9:29:7E
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d2:09:cf:09:00:02:2e:f9:85:02:b3:4a:c7:3c:56:35:e1:
32:ee:21:67:f1:8f:02:1c:a4:b3:bb:dd:32:66:cd:2d:e2:be:
fe:3d:22:1d:57:b7:1c:41:cd:66:1e:ec:50:c0:53:3b:1a:8e:
3b:38:d1:44:35:7d:05:92:d9:16:66:9c:04:58:f4:25:3d:b0:
0e:d3:62:61:7d:8e:7e:b1:17:aa:5d:c9:06:9c:33:d7:9b:75:
50:ab:99:d3:cd:ac:81:2b:80:3c:f9:08:b0:64:55:64:35:13:
31:2a:d8:13:d4:96:74:dd:9c:99:eb:63:f9:45:50:07:17:cb:
5b:0a:3f:64:32:2c:2e:76:f2:0e:f3:07:e5:a9:6f:63:11:ab:
a2:f6:33:d3:b8:3b:c8:f9:22:0f:2d:42:27:37:11:91:14:fc:
10:9d:51:4d:46:73:aa:fa:15:00:29:0b:bb:c5:d5:49:80:6b:
bf:c9:80:2e:37:32:fe:d5:bb:45:ce:f9:bd:24:2a:99:f3:25:
64:eb:58:49:16:7e:7e:18:54:3b:7c:2f:83:5b:49:af:51:cf:
2c:f8:42:8f:2e:a5:97:c1:e6:f5:e8:14:4f:6f:0e:3c:18:6f:
32:28:81:43:34:45:80:90:3c:f1:89:bb:f6:2f:b7:2d:f0:72:
d0:0d:32:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:42:42 2025 by rpki-client