Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
File: lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft (raw, json)
Hash identifier: 3aHrjmcYYewQn/v5oxmzd5bQ9CTtqK/wfi/Twgap0JM=
Subject key identifier: 71:D3:E6:39:E6:E2:00:39:E8:89:10:89:32:B3:9B:44:85:6A:78:36
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 0196AD31A2D510570ACB03B9EA9108D99DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
Manifest number: 1533
Signing time: Thu 08 May 2025 00:00:33 +0000
Manifest this update: Thu 08 May 2025 00:00:33 +0000
Manifest next update: Fri 09 May 2025 00:00:33 +0000
Files and hashes: 1: 391q0ORxT4xG9OJulnRyuopOqJ0.roa (hash: NrXAEo8vyldYYMy7S8MG4TYkAjpck2o/sTniVV0WKZE=)
2: gZNBZHUNo59qARNssN6m5IMjb7o.roa (hash: uIXZRoS8fbZYf6us/pbypI+cc76xlAIVdXka2LOBm1g=)
3: lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl (hash: 6z1oHeCZNm2ZpZO+VFrhzN7qYNT+sNdFOS8Q7GS4bu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:31:a2:d5:10:57:0a:cb:03:b9:ea:91:08:d9:9d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: May 8 00:00:33 2025 GMT
Not After : May 9 00:00:33 2025 GMT
Subject: CN=71d3e639e6e20039e889108932b39b44856a7836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1e:88:84:5a:19:9e:2e:2d:de:13:2e:4f:0b:
d2:5e:a9:37:4d:bc:4d:6f:fb:19:3b:6f:3b:84:a9:
6b:70:8f:0e:e0:e0:6e:7b:ec:85:3b:20:28:3b:c2:
b6:f0:33:fe:7e:aa:3f:93:32:89:bb:0d:b8:89:76:
6d:bc:89:fc:f0:20:95:e5:b9:3b:79:d5:da:f4:88:
a8:fc:cb:e7:82:40:c5:5c:af:32:e0:da:8f:78:2d:
86:b3:a0:6e:b9:6c:b7:e8:ed:49:c4:0d:3b:18:39:
44:8d:7f:1c:ac:f3:54:5a:5b:ca:50:0a:dd:d8:52:
70:51:4d:75:08:23:bf:74:ff:9d:d8:7c:0c:96:80:
c5:21:99:d2:5e:cd:c6:34:03:4c:cc:d8:0a:f5:0f:
c1:9d:23:ab:c7:6b:75:7b:8b:31:1c:ae:e8:93:09:
43:20:f6:ae:89:97:89:be:06:ae:d2:22:d6:9b:8f:
3c:42:b9:71:7b:5e:d3:19:48:98:7e:1e:c0:e1:98:
bb:2e:fb:48:ac:1a:c9:90:55:54:1e:35:3d:1f:d5:
94:08:8d:3d:41:8e:1f:01:cc:f3:cc:8b:07:f8:95:
60:9b:80:72:36:e8:eb:82:e4:4d:7c:52:0b:d2:52:
38:2c:2c:d7:15:91:49:6e:0d:b5:40:d7:24:45:b6:
7f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D3:E6:39:E6:E2:00:39:E8:89:10:89:32:B3:9B:44:85:6A:78:36
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:78:f4:8e:13:95:22:cc:39:62:ca:98:eb:3f:f2:40:4c:26:
d1:e4:be:38:15:ce:ae:9d:3e:91:cd:18:ee:94:43:83:2d:be:
2a:04:07:64:d2:10:19:b2:01:68:37:bf:b3:6c:0b:d3:18:11:
9e:8d:4e:74:31:33:24:b4:22:02:9b:dc:3d:80:2c:86:ef:68:
02:0c:07:61:15:1a:56:2e:b7:4c:52:df:b6:d3:51:2d:d5:39:
60:6e:57:47:35:2d:67:19:ae:7d:bb:76:cd:10:a7:9d:9b:fb:
db:82:02:14:b6:92:5a:0e:69:c8:97:ee:d0:7d:5c:a6:65:a8:
2e:fa:86:01:33:c5:4f:bc:54:58:6b:ef:8d:4f:ec:fe:ba:54:
35:38:5e:ae:79:4a:4f:8a:41:51:86:95:0c:52:5b:09:6f:4b:
1d:3a:5e:ff:4c:a2:e7:f0:18:51:be:8d:b2:12:a4:cc:bc:1c:
1f:e3:4f:4e:f5:84:92:1b:ae:4c:8d:ee:01:a8:4a:68:0b:c5:
34:ed:cc:05:58:25:da:21:28:fa:0c:ef:4d:4c:fe:c0:2a:2e:
e9:6e:73:b3:b6:36:3a:d3:75:f8:69:5d:5e:58:f9:eb:19:23:
df:0e:c2:6b:64:9f:81:c4:e4:e1:0a:3f:3b:f7:20:43:cf:f6:
ef:0c:8d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:44:31 2025 by rpki-client