Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
File: lDyQO00Og7yLLUVDE26c1fOYZPU.mft (raw, json)
Hash identifier: uCvFrCWFI7AY5Ld6F7ME5yu2h1iW9nFJWDM0ZXi+1ug=
Subject key identifier: 66:C0:E8:40:9A:8C:5B:43:D0:C1:0F:99:B8:55:FE:2C:9B:B4:BD:EB
Authority key identifier: 94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
Certificate issuer: /CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Certificate serial: 0196B5C7224B7463C16468F1F784C9684DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
Manifest number: 065F
Signing time: Fri 09 May 2025 16:00:48 +0000
Manifest this update: Fri 09 May 2025 16:00:48 +0000
Manifest next update: Sat 10 May 2025 16:00:48 +0000
Files and hashes: 1: cj4zWw5xq9EoEtqlLeBFl4S5Tw8.roa (hash: juaSzbzMDJ0sK0T5VgO//FmV7+h5xttoXCzQBonEpPE=)
2: lDyQO00Og7yLLUVDE26c1fOYZPU.crl (hash: u1cUjII4F6TeFPBQjiQ9eAqvBlg4SzmHp7gvK2/OH4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c7:22:4b:74:63:c1:64:68:f1:f7:84:c9:68:4d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943c903b4d0e83bc8b2d4543136e9cd5f39864f5
Validity
Not Before: May 9 16:00:48 2025 GMT
Not After : May 10 16:00:48 2025 GMT
Subject: CN=66c0e8409a8c5b43d0c10f99b855fe2c9bb4bdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:b6:b5:d9:1c:2e:74:1a:84:cc:49:be:ac:44:
31:02:46:0c:e7:07:60:20:b0:69:39:f7:6d:91:db:
8d:a6:96:7b:08:b8:5a:f4:0f:5d:60:73:37:7b:3e:
8c:67:1d:8c:a6:bb:51:6d:61:2a:bf:5b:37:e3:5a:
8e:18:32:7f:d2:ea:36:0d:bf:34:19:af:41:d7:9d:
e0:93:09:0b:e1:e9:7a:19:76:85:b0:1c:8e:67:49:
ab:e7:b8:35:11:9b:a4:0e:b7:4f:81:91:47:0b:9b:
56:c6:8c:37:b8:42:2d:ce:b8:52:4d:2d:a1:b4:d0:
2d:b7:bb:9f:f9:86:3a:26:70:e2:97:9f:22:11:66:
e2:1b:b6:2a:2e:1a:2f:2c:6d:ec:b8:32:59:03:f8:
3b:21:2a:a1:67:87:3c:19:34:f3:1d:3a:83:fd:52:
f2:51:86:d2:82:16:1f:33:02:1c:9c:05:3f:3c:3d:
ac:ef:82:2e:61:1d:bd:f4:7f:7b:fc:28:6b:a2:b0:
b7:ce:a6:c5:f8:07:2d:a4:49:e7:f5:91:67:b6:9e:
83:68:45:bb:ad:e3:58:cf:06:6c:5d:11:3f:c4:8a:
25:c0:61:8f:2d:8f:a4:7d:d5:70:cd:64:6d:d7:f1:
70:87:1a:d4:46:f5:b0:ce:d0:5e:b3:00:da:8f:0a:
4f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C0:E8:40:9A:8C:5B:43:D0:C1:0F:99:B8:55:FE:2C:9B:B4:BD:EB
X509v3 Authority Key Identifier:
keyid:94:3C:90:3B:4D:0E:83:BC:8B:2D:45:43:13:6E:9C:D5:F3:98:64:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDyQO00Og7yLLUVDE26c1fOYZPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/508a26-e199-41b9-9e19-f98c75dea292/1/lDyQO00Og7yLLUVDE26c1fOYZPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1b:d3:cd:9a:8c:a1:db:d7:3e:c6:0d:57:f1:92:6b:cf:4f:
f2:50:7a:b9:ae:74:60:e8:56:d3:dd:e2:50:c9:b0:f6:c5:6f:
05:c3:54:be:d0:2f:f1:a9:87:01:95:15:db:7b:25:53:da:da:
b0:0b:6c:c9:49:b6:69:7c:ec:de:87:26:17:ed:c7:e3:d1:3c:
f6:f7:af:04:69:e6:da:81:a9:8e:4e:fd:a9:e7:14:2a:b5:73:
d3:3f:14:db:cf:44:e3:d0:70:e0:d6:95:5c:b9:39:3c:cf:b9:
3d:96:b6:76:6b:38:04:87:a5:b4:88:b0:01:29:b3:92:f6:06:
4d:0e:ee:76:eb:4f:6e:7a:e4:15:b7:e3:b7:82:ed:87:2f:30:
a5:c6:ea:dd:c9:7b:cf:5d:f2:23:36:ec:ee:25:0c:81:18:67:
d9:c3:a9:3e:36:52:45:7c:a7:4d:bd:c5:a4:07:38:1a:31:0c:
e6:69:5c:e7:cc:a7:8a:4c:1f:a4:a0:28:e5:3d:7c:fe:d9:b6:
ed:f4:63:e7:12:63:92:ba:cd:b1:20:ff:5c:d5:d3:9e:23:06:
23:d8:2e:46:1d:0d:4f:68:41:27:9d:24:34:0b:15:c6:06:f8:
55:16:f4:a7:03:56:8e:be:dd:f6:33:10:c9:d6:25:29:97:81:
37:aa:00:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:02:28 2025 by rpki-client