Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
File: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json)
Hash identifier: Ziubw+prQiCxUB7ed6yOfjQd4INRCjPLlaEuXD69tk0=
Subject key identifier: C2:72:B4:C1:00:18:DD:D0:4A:67:BB:05:DD:0A:6C:CB:01:DA:27:58
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial: 0196C3B9B8B48027F096211BE90BCE0A62FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
Manifest number: 47
Signing time: Mon 12 May 2025 09:00:50 +0000
Manifest this update: Mon 12 May 2025 09:00:50 +0000
Manifest next update: Tue 13 May 2025 09:00:50 +0000
Files and hashes: 1: em3GdHNEQBbHlpzmuunEE4q_ZI8.roa (hash: BpM0Qjg2QGSEKls9rFeKoRK4EoSJgveIU1F9DuDBB0E=)
2: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: 6NNiDfhibaJZuuBD0W7dY1WSFpuMeq5lnFfQoNF5vJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:b8:b4:80:27:f0:96:21:1b:e9:0b:ce:0a:62:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
Validity
Not Before: May 12 09:00:50 2025 GMT
Not After : May 13 09:00:50 2025 GMT
Subject: CN=c272b4c10018ddd04a67bb05dd0a6ccb01da2758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:cc:f6:ea:6e:74:6c:f6:6d:a8:49:f0:7e:
36:11:45:ed:04:4d:c4:1b:c4:41:b6:b5:01:57:36:
44:a1:9e:29:f3:bb:5b:6f:ef:5c:d1:cb:50:96:53:
c4:35:8c:0e:02:e9:41:04:7a:78:16:be:99:4a:9d:
88:bb:e7:b9:14:77:dc:73:28:8c:f0:8d:61:0c:39:
72:11:55:54:7f:be:d4:6f:34:81:fe:ce:c6:8c:d3:
ee:a6:a8:1c:b8:61:b7:f0:fa:25:b3:a7:84:c9:19:
72:47:67:7a:3a:6f:9f:32:b5:5a:4a:1b:a5:ee:84:
f9:85:ab:9a:3b:7d:a3:67:5b:41:6c:78:24:1a:40:
05:9c:09:f7:5d:4f:df:e4:81:9d:40:33:fa:73:0f:
26:a1:95:0d:b6:58:08:ce:3f:c7:83:7c:b4:0d:f0:
3f:21:d5:6a:47:0b:b1:93:e6:05:47:20:94:f9:42:
f0:a5:25:ea:3e:a2:6a:51:46:c2:7b:f5:de:20:82:
c9:76:4f:7e:f7:0a:a4:3c:f2:6b:71:4c:76:04:0b:
81:79:0c:27:42:9f:dd:fb:c6:19:2f:0b:a9:fb:14:
33:03:84:a7:13:39:fd:ae:a0:b6:61:78:c8:20:0c:
59:32:54:6f:5f:88:cd:23:99:3d:b8:a3:22:ab:5b:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:72:B4:C1:00:18:DD:D0:4A:67:BB:05:DD:0A:6C:CB:01:DA:27:58
X509v3 Authority Key Identifier:
keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0a:51:ea:f0:88:0d:ef:22:61:bb:00:6c:eb:16:a6:58:bb:
6e:cf:ff:53:56:45:08:9d:3b:e1:bb:9a:e0:01:66:61:bd:65:
30:87:14:29:91:20:68:18:b5:4e:2f:ef:9f:73:e6:82:95:77:
f2:55:4d:93:e9:48:c7:b7:c2:4b:3a:8e:5a:12:dc:c6:42:b3:
ba:c5:54:91:27:8b:3e:5f:a0:f3:a2:a0:af:a0:b1:91:c4:dd:
1e:67:0d:eb:34:8c:02:b2:af:de:af:f6:95:71:2f:79:09:11:
0e:2b:de:9b:66:e7:cf:51:3a:97:07:17:e1:88:69:bf:e8:c1:
fd:67:42:d9:bc:f5:dd:f2:52:7c:6f:a8:2b:cc:67:ff:65:5f:
6c:1a:c6:02:2e:ac:a6:34:35:cc:26:fd:45:14:5c:72:48:61:
c5:33:3e:70:a5:ca:c7:c5:e3:82:5b:82:be:ea:41:c1:82:7e:
dd:9b:71:0a:12:62:b1:dd:c9:25:c4:a2:a3:54:3f:14:9f:f8:
50:45:ff:12:5c:f2:48:05:d4:79:0e:07:f4:2b:18:ab:ff:95:
7d:29:73:c6:16:e7:d0:75:fc:c3:14:b2:e0:93:aa:46:eb:81:
f7:5b:2d:fe:33:6f:9c:9f:87:ec:88:47:20:e9:00:b3:83:7e:
a8:d6:9f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:32:43 2025 by rpki-client