Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft (raw, json)
Hash identifier: aApdKKsBJR0UuZULZPdkCwT5xNNL2NWpHV3tqdwvzvA=
Subject key identifier: E1:62:86:E7:02:EA:D4:0A:90:F0:DE:CF:2F:02:42:60:80:8C:1B:62
Authority key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Certificate issuer: /CN=97c60d4d458cec3b8d618a01300642b588c3173b
Certificate serial: 01969E630D1F789B0CC686D0CC2E0EFEA463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
Manifest number: 1334
Signing time: Mon 05 May 2025 03:00:13 +0000
Manifest this update: Mon 05 May 2025 03:00:13 +0000
Manifest next update: Tue 06 May 2025 03:00:13 +0000
Files and hashes: 1: 48AsG-LjGtdTKSRHyXXwuNMjcms.roa (hash: Jom94X0Y2GD2G7Zghq086XBn+Rajbf0i7he27dJdYgU=)
2: l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl (hash: NAP0H8x0DKFw7onZ7XnZlUc0ymB/15q6sSV9oPcaPfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:0d:1f:78:9b:0c:c6:86:d0:cc:2e:0e:fe:a4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Validity
Not Before: May 5 03:00:13 2025 GMT
Not After : May 6 03:00:13 2025 GMT
Subject: CN=e16286e702ead40a90f0decf2f024260808c1b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:d2:b9:77:5d:bd:bc:a3:71:dd:1c:17:c2:
5b:21:94:e4:95:fb:7f:e0:fc:a5:8c:3f:dc:17:49:
00:8d:84:d4:4c:cf:22:a9:fc:8e:07:25:ca:b7:71:
eb:9a:cf:dc:a7:07:02:42:32:31:b1:dc:b4:da:e8:
80:f6:59:27:dd:7a:d2:90:aa:0d:50:d2:c6:20:16:
db:06:46:a4:a1:22:30:76:98:5f:7a:70:b5:17:ec:
f4:b9:31:ae:44:48:c6:5d:97:90:26:9d:de:e8:21:
b5:f3:28:8e:b4:d6:50:78:bd:10:7a:f5:3d:4e:34:
1b:1d:9b:aa:f1:54:80:6f:ab:a0:0a:63:e4:52:93:
58:8d:ad:c2:9a:ce:dd:0a:fa:cb:c0:5d:29:6b:7f:
8d:f2:d8:07:02:5f:92:b0:c6:ec:78:9e:aa:9d:04:
fc:42:c3:f7:24:57:39:0d:96:89:a8:23:ae:fd:20:
45:67:de:db:dd:b6:9b:70:6e:ab:b8:5b:4e:c5:69:
48:7f:37:31:33:a5:f2:25:bb:cf:e1:52:58:e9:3d:
d7:01:58:45:0d:35:05:17:58:59:e1:1b:79:17:01:
b9:8f:32:84:fd:78:b3:8f:41:75:03:fa:89:fa:b7:
5c:2b:d7:07:af:05:bb:46:08:dc:b4:e4:01:60:1b:
f8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:62:86:E7:02:EA:D4:0A:90:F0:DE:CF:2F:02:42:60:80:8C:1B:62
X509v3 Authority Key Identifier:
keyid:97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:44:c6:57:7f:5e:fb:fb:3a:5e:34:44:6a:dd:11:32:6b:23:
ac:02:c0:90:70:06:70:76:37:3f:06:57:7c:52:94:b2:fd:8a:
fc:67:fe:0e:a2:c3:41:53:20:04:5d:94:2f:bb:bf:19:d7:b8:
c4:cc:8d:08:82:c3:26:f5:28:cb:3b:ac:ae:9b:3c:1e:7c:ac:
bd:94:16:3a:fe:cd:86:6c:1c:20:4e:4b:06:00:94:ee:c9:2e:
57:56:57:fe:a7:5c:2e:81:f1:8d:c2:38:05:05:79:75:c0:e8:
dc:da:a5:cf:c1:dc:f6:9b:9d:33:bd:7d:3c:6a:91:b2:17:4a:
6c:7d:6b:89:93:8e:f9:a5:ca:e6:1d:ab:74:17:58:f5:a8:06:
6a:d2:6e:a6:15:c9:b2:f4:f0:ca:7f:0c:be:d5:5e:7d:95:53:
7f:c2:4d:ab:42:3a:e9:56:ac:e3:88:3a:93:5e:f5:ae:16:b4:
7c:b3:0e:00:55:08:94:44:98:5c:4f:c0:9d:29:07:51:0c:7e:
4a:ea:c9:64:17:09:28:4c:8f:dc:92:da:b1:f6:8c:84:46:f8:
6d:09:93:d4:02:ac:ce:1a:21:2e:db:c2:d3:4e:2e:b1:f5:82:
17:0e:47:2f:1f:3a:f0:60:a7:07:5e:80:5f:66:32:f8:ef:24:
d5:e0:ad:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:52:26 2025 by rpki-client