Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
File: l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft (raw, json)
Hash identifier: Hs7S8AbQnfQ0G0weCEzw2Bfk/waLP29KPYdSE/aFTN4=
Subject key identifier: 17:F4:1A:F4:B1:10:04:49:18:B9:61:89:04:43:43:BB:FA:A8:49:FE
Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
Certificate issuer: /CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Certificate serial: 0196B10E2BC13894C71D530051B1231B2C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
Manifest number: 07BB
Signing time: Thu 08 May 2025 18:00:17 +0000
Manifest this update: Thu 08 May 2025 18:00:17 +0000
Manifest next update: Fri 09 May 2025 18:00:17 +0000
Files and hashes: 1: Dlst4zdGN0XEjaRKAVG2aUW3Zys.roa (hash: JUWMAM2lZQg8cUdPcrThF2mh7HbwsAT1N8ME9RsjW/U=)
2: l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl (hash: 2s10Kpi4DiqXDGsa6j5ySDpmzNwIUe36+ak5vdGvtiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:0e:2b:c1:38:94:c7:1d:53:00:51:b1:23:1b:2c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Validity
Not Before: May 8 18:00:17 2025 GMT
Not After : May 9 18:00:17 2025 GMT
Subject: CN=17f41af4b110044918b96189044343bbfaa849fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bc:9e:b3:8b:04:e3:d0:1d:a7:e2:8c:9d:d4:
64:99:8c:d9:20:8e:72:c0:38:80:ba:60:dd:19:ed:
06:9a:24:9f:d5:e4:4a:73:34:00:92:c5:62:8d:43:
5f:4c:f0:0f:99:85:5c:ed:45:4d:5b:61:96:58:dc:
59:d0:23:c1:61:70:a2:03:2c:b1:52:a4:a7:a8:44:
46:03:ec:d4:3f:fd:78:b9:ea:a4:65:4e:cf:2e:b5:
3b:f4:cf:1e:17:a7:3a:b1:72:17:12:8c:ca:6a:a2:
70:ec:36:34:35:dd:45:7c:c9:e9:24:c5:72:69:20:
ef:6d:fd:fc:70:92:6c:7e:6d:10:ac:4f:6a:fc:2e:
7d:ce:33:f5:39:4f:85:13:57:8a:4e:e6:bf:72:68:
c3:3e:90:97:5c:d4:1d:20:7e:87:d4:ac:15:41:1b:
cc:7f:2a:7f:70:81:3d:90:18:1e:6e:9e:df:de:1a:
2d:d6:0e:e4:ea:f4:08:e7:8e:79:a7:82:2a:63:b2:
c3:06:b4:bc:d7:69:53:f4:1f:7d:06:dc:04:5c:a3:
df:5c:f0:e0:49:3d:48:ab:84:7b:41:81:d1:83:6b:
1b:4e:a5:8b:28:51:a4:9f:0a:db:68:77:7b:ac:d0:
66:eb:6e:c3:9b:75:d2:a5:de:db:46:42:74:a8:ca:
71:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F4:1A:F4:B1:10:04:49:18:B9:61:89:04:43:43:BB:FA:A8:49:FE
X509v3 Authority Key Identifier:
keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7c:1a:7b:93:87:fa:70:1c:63:43:b4:4d:92:a4:0c:3b:03:
f2:0d:74:f2:bd:ce:b0:6a:86:c5:24:84:1d:4c:70:44:8e:8c:
35:f0:31:2f:8e:0a:5a:77:25:1e:fd:97:43:d9:47:31:62:58:
d9:66:f5:86:2a:e5:3c:e7:af:be:82:db:ae:c2:71:6d:df:23:
39:24:a3:e7:63:dc:f3:8e:59:f8:8c:03:f6:e4:80:60:db:f1:
9b:0d:df:72:ce:30:9f:fe:77:96:83:65:e1:22:11:4c:0d:c5:
58:ad:87:54:f9:4d:c3:a1:eb:31:6b:13:fd:4a:37:b2:27:e2:
51:28:c0:75:70:9f:18:79:51:8d:d9:f4:43:de:b5:d9:5a:be:
91:6f:8f:03:33:27:15:ce:de:3d:90:da:d5:14:0f:04:27:0f:
92:31:5b:68:39:6a:c9:52:78:ed:ec:6b:c4:d1:95:22:bb:55:
c0:1c:5a:dc:41:2c:84:08:54:24:f6:40:dc:01:e4:17:61:ed:
9c:95:3e:04:45:09:c9:20:d9:d1:5e:0b:57:dd:b3:5f:6b:78:
8d:eb:19:c5:24:f7:e9:5e:c9:ce:7a:4d:ae:96:9a:ca:e6:3d:
2f:b6:f8:30:04:3b:8f:39:68:6e:cb:6b:9e:01:13:1e:94:b3:
ac:11:44:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:00:12 2025 by rpki-client