Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
File: l-vxSo5U8S3YskU1PfaD4YKglsU.mft (raw, json)
Hash identifier: 9K7OFd3XkV5jG4pA1j/7fBRxn2AcFH+dYFEe2iA97Bg=
Subject key identifier: 8B:34:02:50:29:E7:09:01:1A:F9:66:5F:BD:83:B8:AD:80:26:00:07
Authority key identifier: 97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5
Certificate issuer: /CN=97ebf14a8e54f12dd8b245353df683e182a096c5
Certificate serial: 0196BFDCF3F43E83B14C75CA9E57BD8858FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
Manifest number: 0C68
Signing time: Sun 11 May 2025 15:00:50 +0000
Manifest this update: Sun 11 May 2025 15:00:50 +0000
Manifest next update: Mon 12 May 2025 15:00:50 +0000
Files and hashes: 1: WOmDR0gkDYsuG9Soke-w2reYe2g.roa (hash: qNbo7JrQ2MwJmZEbIhGXbA+hRsU9tW8mGt+CExNZuso=)
2: l-vxSo5U8S3YskU1PfaD4YKglsU.crl (hash: Gqng3C/+yNqkyJlfUEdPkydnszZ2yuQsX6Ik6LKJVPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:f3:f4:3e:83:b1:4c:75:ca:9e:57:bd:88:58:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ebf14a8e54f12dd8b245353df683e182a096c5
Validity
Not Before: May 11 15:00:50 2025 GMT
Not After : May 12 15:00:50 2025 GMT
Subject: CN=8b34025029e709011af9665fbd83b8ad80260007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:23:af:8f:f5:da:82:29:c5:7f:af:9a:52:
2d:46:30:56:65:ac:d6:7f:f4:61:94:79:31:70:2e:
2d:07:b7:af:a1:9c:8d:c0:1b:1a:b4:bb:e4:e7:ab:
fb:7e:0d:b7:b3:fc:77:3d:9a:5f:62:0d:e4:ef:8d:
37:6c:f8:bb:a1:87:e0:60:6a:8f:ec:b6:2f:06:e0:
fc:aa:76:45:78:e9:cd:bc:f3:53:c4:5a:a6:1a:f8:
98:64:8a:2c:54:48:5c:17:5e:52:54:93:33:35:06:
a5:39:15:77:58:88:83:fd:87:89:54:8e:0f:c4:14:
8c:f4:02:8b:66:51:30:21:bd:79:b1:88:d6:37:63:
fe:30:ad:2a:5d:e2:dd:32:12:85:78:7f:af:34:76:
26:2a:28:35:9b:2f:99:10:5d:f5:b7:ca:34:89:74:
4a:a2:28:9a:f6:28:ff:f9:fa:5d:c4:14:8e:11:27:
0d:de:b9:a2:22:98:d9:d4:71:e1:02:6e:c8:16:51:
bb:4c:2d:ef:85:17:a1:5f:70:2e:1d:3f:b1:5f:c8:
8e:b4:a2:94:94:3b:e3:02:ae:67:04:71:ac:7e:fb:
fb:5a:9a:8f:28:60:cc:82:93:c4:f3:ea:1b:7c:b8:
51:e8:25:78:31:eb:79:0a:84:91:37:7a:f9:f6:cd:
16:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:34:02:50:29:E7:09:01:1A:F9:66:5F:BD:83:B8:AD:80:26:00:07
X509v3 Authority Key Identifier:
keyid:97:EB:F1:4A:8E:54:F1:2D:D8:B2:45:35:3D:F6:83:E1:82:A0:96:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-vxSo5U8S3YskU1PfaD4YKglsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/092b11-1622-4556-8e65-2409aad081d2/1/l-vxSo5U8S3YskU1PfaD4YKglsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:88:08:d9:b5:fa:84:79:bb:d8:f5:e0:76:25:66:45:6c:4b:
f9:b2:f8:5e:09:38:62:3d:49:5c:b9:93:d4:d6:e1:da:1d:fa:
b1:e1:4a:5d:3a:87:b8:76:fe:45:b8:1b:e7:2b:cc:18:f4:56:
03:61:b4:22:b1:f9:5f:91:b1:51:82:c0:89:82:27:bb:e0:53:
42:ea:dc:a1:7a:ed:60:6c:44:c7:87:69:05:1a:de:5b:46:30:
bc:4d:4e:9e:c2:29:bc:6f:9e:d8:70:2c:4b:99:84:31:b3:a6:
e7:28:62:02:db:16:f9:ff:05:76:98:5f:88:12:21:22:eb:f6:
3f:dc:5e:6b:16:38:95:6e:62:4c:26:7e:3e:5d:7f:bb:b3:61:
24:1b:f8:f8:2b:14:71:81:b0:0a:f3:d4:6b:b7:f3:27:71:0f:
1e:ce:38:96:67:75:84:4e:0f:10:7f:c1:2e:61:e7:6d:bd:b4:
e5:ea:82:e1:3c:01:ec:68:a4:70:10:6b:f2:a3:34:85:fa:5f:
21:e1:15:ab:69:cf:5d:a1:f9:58:73:40:66:69:4d:90:53:05:
9f:7b:e7:63:9c:6d:57:fa:24:eb:bb:a2:7a:df:89:c9:9e:f5:
7d:10:e7:98:83:47:fc:17:70:38:d8:a3:19:04:56:b4:cf:38:
cf:c2:91:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:37:14 2025 by rpki-client