Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
File: lV_PknmKnbswq9K5-im_qIBCIPM.mft (raw, json)
Hash identifier: 5XJv6s1IaLIbJCXdVv+PBcyatEwtYag+8fee/hykqII=
Subject key identifier: A2:ED:7B:AC:26:FF:3C:39:D6:41:ED:1B:5F:3E:F6:94:6E:D6:17:A7
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial: 0196B9DA67E7CCEF4EA49C6FCAB3BBB86173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 11:00:20 +0000
Manifest this update: Sat 10 May 2025 11:00:20 +0000
Manifest next update: Sun 11 May 2025 11:00:20 +0000
Files and hashes: 1: 6qs9s6ZANN0Vr7Mtzl0BbrvUZX0.roa (hash: pQeqqx4HL54a4q+hUpmIGa67TaWduN/H5CstOlna1UE=)
2: EoYtqT19_jZmc_n7cEwpjSGtOsU.roa (hash: hkkAotU6XOY6iCyCcpO+yZgNMC6GRacfrcfYwvynbjI=)
3: hFLTgVwi-T4tOA6wOS4qAN2FLxM.roa (hash: dz5XmeHfe6/lu7MZUkt8y4gu+wWol7zuYfpW+/5fyrM=)
4: lV_PknmKnbswq9K5-im_qIBCIPM.crl (hash: wjk3q6o7XsprzMJCr8XUO02oDSmhTNEdmCROvuLXF80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:67:e7:cc:ef:4e:a4:9c:6f:ca:b3:bb:b8:61:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Validity
Not Before: May 10 11:00:20 2025 GMT
Not After : May 11 11:00:20 2025 GMT
Subject: CN=a2ed7bac26ff3c39d641ed1b5f3ef6946ed617a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ff:7a:9b:df:b8:b9:1e:53:76:76:87:f2:e1:
7d:90:f4:2c:11:f1:2f:49:4b:90:07:65:8f:0a:a5:
6d:50:4f:df:c3:d9:ad:7a:52:be:44:78:72:11:2e:
73:37:18:af:bf:82:fe:0b:64:d9:bf:9b:3a:c7:43:
c4:56:67:7e:92:6d:78:a5:c2:22:42:f8:b9:59:3b:
32:45:e4:be:07:57:9b:67:e3:de:65:45:62:0b:f0:
c8:5a:bf:5f:c2:cc:d7:f8:ac:6e:c1:02:a1:ec:53:
6a:e4:b6:56:73:4e:68:f7:a9:99:df:da:c2:40:a5:
ee:e6:76:7c:a9:67:6a:b1:41:5e:8a:b5:6b:5a:db:
4d:6a:5e:b2:db:cf:d6:47:ba:50:90:5a:a1:43:60:
be:cd:de:7c:ce:28:a2:10:78:c7:5b:88:82:ae:94:
13:fe:9d:c7:a5:37:05:04:90:13:d9:45:ca:0c:3f:
21:ab:49:16:ce:53:a1:2d:1e:82:0a:63:73:56:75:
4c:05:c1:39:de:00:47:46:20:34:04:28:b9:49:35:
65:ce:b3:41:20:49:b4:cb:01:a7:cc:30:8c:79:bc:
d9:bd:f3:51:4c:98:39:48:c6:0b:f7:2e:f0:2f:d5:
78:90:00:7b:9d:f3:a0:d4:64:8b:76:ae:fc:a7:21:
15:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:ED:7B:AC:26:FF:3C:39:D6:41:ED:1B:5F:3E:F6:94:6E:D6:17:A7
X509v3 Authority Key Identifier:
keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ad:a4:13:29:29:9a:8b:d2:c8:8a:a6:f0:72:db:c2:df:5b:
5f:dd:0f:5c:77:f4:8a:58:96:89:99:9a:41:03:2c:27:ca:1a:
27:3a:8c:d3:cb:3a:43:c1:0d:6e:ac:8b:df:90:a4:f2:cd:e0:
65:f0:4d:89:28:10:53:43:8a:82:ce:f1:af:fa:d3:86:50:7f:
40:8a:c7:7c:45:e8:6e:6f:6f:f1:98:54:eb:a4:5e:2e:3a:90:
66:40:b4:81:85:5f:7b:f4:1f:5c:a3:87:20:e7:02:17:16:9f:
11:13:02:77:69:da:eb:b1:61:f5:41:b3:8f:12:76:be:4a:19:
a0:7a:87:15:b6:b1:8f:d4:46:7a:d5:7c:23:e4:bf:ad:d1:db:
f9:91:d9:39:f7:f6:8a:92:c9:ac:88:6c:a3:76:bb:0a:b4:9e:
8d:da:bf:1b:e4:76:44:68:d9:b9:be:5f:35:80:b2:37:53:e2:
3a:a1:4d:14:83:b7:06:f2:81:24:00:5d:87:71:17:73:f0:79:
61:7f:ad:be:88:33:71:64:5f:62:7b:38:b4:03:6e:70:83:58:
da:94:74:8e:66:1b:53:3d:6c:a1:8d:cb:ae:3b:9e:e9:af:6a:
77:73:7b:0b:34:37:02:b2:7a:c4:c4:52:47:f8:42:11:4a:0c:
c5:a0:39:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:10:22 2025 by rpki-client