Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: pNws75puEnZP+To4Wfo9rLu05UAyzisBhMxYd1lrO/I=
Subject key identifier: 8C:10:3D:D0:65:AA:8F:60:26:F3:4E:C4:D5:E2:E2:17:D5:A1:CD:10
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 0196BE5C18290DDE636B5877863060961BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 10EF
Signing time: Sun 11 May 2025 08:00:28 +0000
Manifest this update: Sun 11 May 2025 08:00:28 +0000
Manifest next update: Mon 12 May 2025 08:00:28 +0000
Files and hashes: 1: SH4rDP4bziCb5bkV8rhoTxfuNjk.roa (hash: vVCfK4MgaGYgFq117gziTiwL0UcNweWxSUnO8MCkGI8=)
2: SpTXo1fwWeGOWpTg6Zsx5tHHgL8.roa (hash: pd+04X0269GarNL7eAEgGDcIT45S+rvIYMVZpLeD2m8=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: f5Or8QCHuFzOhaX8mkePO6ydqr9owUBOcWmEk/O3E4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:18:29:0d:de:63:6b:58:77:86:30:60:96:1b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: May 11 08:00:28 2025 GMT
Not After : May 12 08:00:28 2025 GMT
Subject: CN=8c103dd065aa8f6026f34ec4d5e2e217d5a1cd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:94:60:f3:2a:0c:eb:64:76:00:d2:f5:09:
e1:a5:48:75:99:6b:8b:e9:a5:93:47:62:c1:4d:bd:
85:0f:f7:47:94:93:43:6a:86:d7:25:f4:f8:19:aa:
eb:e1:4d:25:78:da:75:fc:bc:36:17:2b:e5:9b:31:
73:fb:69:3b:6c:6e:ef:c9:c7:07:39:5a:44:08:7d:
30:ac:dd:d8:eb:21:d6:b5:9b:15:5f:9b:97:39:d4:
09:55:6e:44:35:80:90:67:eb:75:86:4e:ac:51:2c:
52:bd:bb:63:94:b0:9f:51:1e:45:86:5c:3c:a0:80:
94:29:62:b3:65:f5:b9:2d:9c:c1:de:1d:41:cc:1f:
08:66:7c:99:12:37:73:1d:04:34:21:92:0a:50:a4:
00:af:da:a7:e8:c0:63:86:4e:f5:1b:17:48:a5:ee:
6a:f5:2d:55:03:00:54:da:7b:a9:7f:5d:ee:d5:12:
46:f9:97:dd:86:25:6e:45:48:30:6c:5b:ed:70:b6:
17:d2:91:fc:46:66:56:a1:b7:9e:27:ed:2a:1e:e2:
45:66:b1:d0:d8:7b:96:6c:c3:98:2f:b5:fc:2f:12:
9d:55:75:1c:27:bc:0f:54:f1:fc:af:d8:86:0b:93:
d5:1a:22:fe:2f:c9:b7:82:12:68:bc:77:6c:2b:e3:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:10:3D:D0:65:AA:8F:60:26:F3:4E:C4:D5:E2:E2:17:D5:A1:CD:10
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:23:c0:01:d2:33:9f:c5:2b:28:d7:a5:c6:4e:2e:5c:64:76:
b7:09:0e:f9:fb:c6:b0:05:43:55:5b:85:5c:b5:23:42:d4:03:
a0:e6:79:99:62:96:68:a9:47:1a:6a:ac:54:34:80:f7:1c:47:
de:5b:80:63:31:1f:70:b0:25:11:ed:c7:fa:e3:0a:da:e8:5f:
33:8a:fc:df:ba:53:46:be:cd:bb:cb:98:6d:2a:ea:c2:ed:33:
4f:62:81:f5:67:bd:2b:7c:9a:64:7b:43:4f:05:f1:ee:0e:2f:
84:dc:af:d9:0d:73:ba:82:28:80:21:98:7e:a7:50:9a:da:2b:
d1:92:44:67:e2:6a:a2:d0:6e:ef:e5:9c:01:95:09:b7:bd:68:
94:46:d9:1c:4a:97:8a:eb:69:d0:7a:17:69:12:bf:1a:ec:38:
1a:0a:2c:77:ca:48:3d:11:e1:3e:a1:21:44:f5:62:c9:df:d7:
92:d1:12:88:a6:0d:b5:6a:5d:7b:f1:68:9c:8e:a6:90:3e:6e:
a3:05:af:de:ab:f8:c0:0a:91:ca:74:3c:47:8b:44:d2:4b:be:
ea:ba:f7:c1:43:d3:57:f5:1c:a8:dd:a3:1b:16:d6:d9:45:9a:
dc:fe:00:9f:af:00:91:a5:ae:50:da:ca:ff:cf:4b:31:82:df:
d1:14:0e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:25:36 2025 by rpki-client