Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
File: lOxdPU2xSEp34sh2PXSgvXxDTak.mft (raw, json)
Hash identifier: cZpl9rEVE4JLAJooAAEaVObvGkVtCtzMF3YGmFAUzHM=
Subject key identifier: 7E:04:E8:80:15:B8:90:2E:E0:97:AE:66:40:1F:1A:14:66:15:EA:19
Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Certificate serial: 0196C2DDA64187DD858C3CD5983AA49E448F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
Manifest number: 0C2B
Signing time: Mon 12 May 2025 05:00:28 +0000
Manifest this update: Mon 12 May 2025 05:00:28 +0000
Manifest next update: Tue 13 May 2025 05:00:28 +0000
Files and hashes: 1: 50o06An3k3A8kOiunWV55W1-Ajg.roa (hash: AcFz8bkfqTGlKpcv2q2Ys5Hm4t2OZ+46UtANIMDmoyM=)
2: lOxdPU2xSEp34sh2PXSgvXxDTak.crl (hash: u/iCBlGSWWMXYYg88rpVtPwXR6jpqYNF/5BKPTz3SQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:a6:41:87:dd:85:8c:3c:d5:98:3a:a4:9e:44:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Validity
Not Before: May 12 05:00:28 2025 GMT
Not After : May 13 05:00:28 2025 GMT
Subject: CN=7e04e88015b8902ee097ae66401f1a146615ea19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bf:a8:ad:1e:6b:85:5e:6d:6c:25:00:f1:28:
e9:28:36:ef:42:6d:e1:7e:ac:55:ab:90:d0:66:02:
05:49:c4:65:3b:84:a4:3e:3a:1b:e3:9c:72:55:17:
f3:de:ee:77:d9:55:3d:53:ea:d1:2b:70:c0:8f:da:
05:7b:1c:30:4d:c4:79:dc:c9:af:a8:0a:62:c1:2a:
be:51:02:6a:3b:8e:99:7e:33:da:b7:8e:05:5a:4c:
a3:ce:c0:d9:9d:44:91:62:f0:ea:24:e2:4f:02:64:
fc:4f:74:8e:d4:67:c4:62:ad:e2:f3:6f:b8:3f:be:
46:69:21:20:da:68:a1:97:ca:16:27:25:04:33:07:
e6:4a:16:a3:5e:c5:8f:c8:8b:92:48:eb:4c:2e:92:
68:8d:62:9d:94:ab:13:db:c3:53:4b:ff:fd:bc:91:
19:97:4d:a9:b0:fa:4b:b8:5a:e6:f4:72:67:22:70:
25:64:7e:5a:1f:7d:5b:fe:dd:33:20:d4:f1:77:3a:
06:50:b2:bc:6d:d4:04:3a:46:e3:a6:81:23:59:2c:
1c:39:f7:65:74:ec:fb:fa:7d:13:f0:c5:49:b0:ec:
dc:bc:5c:54:cb:14:77:0b:6b:c5:df:6b:4e:e2:ad:
17:27:2a:76:a3:46:59:66:4d:c4:1c:29:f8:a9:43:
09:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:04:E8:80:15:B8:90:2E:E0:97:AE:66:40:1F:1A:14:66:15:EA:19
X509v3 Authority Key Identifier:
keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0f:43:5b:ec:58:1f:26:6a:83:a9:95:e7:3d:26:e5:d3:3f:
b6:f9:13:35:15:c2:e5:71:8f:65:ae:47:4a:5b:3f:c7:c4:ad:
c9:ad:e0:08:e1:04:fe:19:17:37:25:a2:3f:18:6f:25:ed:b6:
b1:39:48:3c:fa:d1:fe:ea:69:ce:fd:c6:6e:cd:46:fa:e7:62:
43:15:b1:e7:fa:3c:e3:eb:96:05:b3:02:96:06:9f:42:c2:eb:
ff:5f:f0:54:10:1d:67:98:17:d8:ac:01:8e:4c:b7:ad:f8:de:
d9:f8:00:5e:47:78:9f:2c:e4:f7:2d:d4:f6:0c:07:57:90:13:
17:a7:a1:95:82:c6:15:55:bb:e9:5e:ad:8e:3c:2c:65:2c:f5:
da:b7:68:e1:eb:96:3d:5a:6f:8b:54:ff:44:2b:9c:cb:4c:92:
56:6e:96:da:b5:1d:3f:02:87:54:ec:15:82:48:d8:2f:93:c0:
c2:fd:6a:af:f9:51:b0:6d:b4:3c:a7:84:02:c2:63:e4:aa:75:
50:28:0a:5f:c2:51:60:bf:1f:86:5d:3b:87:4a:40:a4:5e:68:
93:05:40:80:8b:f8:3e:23:76:52:cc:2d:01:06:4a:ad:c3:63:
d6:70:5c:a0:fc:42:37:52:ed:b2:d4:ed:79:06:8c:30:b3:f8:
05:04:ee:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:45:27 2025 by rpki-client