Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
File: L1SHXb4wvk9_xEoEaLUbF47fZOY.mft (raw, json)
Hash identifier: kdU5Nk3JurdR+047vOywQte4t6oO4vxEGYMesr/wnW0=
Subject key identifier: B7:7A:4F:2E:4C:0A:51:BA:83:A0:97:B6:D5:D4:3C:79:1E:39:6E:A8
Authority key identifier: 2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6
Certificate issuer: /CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
Certificate serial: 0196BDEEAFCE9803E6011F131C6EE8C59757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
Manifest number: 113F
Signing time: Sun 11 May 2025 06:00:58 +0000
Manifest this update: Sun 11 May 2025 06:00:58 +0000
Manifest next update: Mon 12 May 2025 06:00:58 +0000
Files and hashes: 1: Db8JmQFrHbrslQy_0_sI8qPfsLc.roa (hash: h9edWzGv+GirDt6SdrQhWfZqKoYQaPxuFx4R8MWBJlc=)
2: L1SHXb4wvk9_xEoEaLUbF47fZOY.crl (hash: qHEwsiAAxLYHVKN/WSmt27OtNSsAu3LyLwyw/KmF2dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:af:ce:98:03:e6:01:1f:13:1c:6e:e8:c5:97:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
Validity
Not Before: May 11 06:00:58 2025 GMT
Not After : May 12 06:00:58 2025 GMT
Subject: CN=b77a4f2e4c0a51ba83a097b6d5d43c791e396ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:20:3a:36:4b:9d:83:ee:03:ff:a7:ad:0b:
63:ff:46:22:08:6b:83:4a:f0:25:5a:11:a4:48:38:
fa:06:29:23:d0:1c:68:d6:bc:cb:97:8c:3f:7c:6f:
0d:6b:d9:58:f3:b1:13:55:81:fc:35:b5:e1:e9:7a:
a9:53:8b:c4:01:b4:fb:13:ef:fb:15:08:a7:69:42:
79:48:66:b4:6b:bc:b4:37:54:a0:13:f1:94:06:31:
b9:6d:00:4c:be:16:3d:31:15:08:fb:fc:89:b4:e7:
2e:f6:8e:e2:e5:63:36:bf:53:b0:57:0e:25:a4:95:
f8:95:01:51:cb:c0:c6:90:9c:98:b0:ab:08:a3:46:
d0:0c:b4:ba:59:61:1f:ec:64:83:ba:48:c0:c4:44:
72:af:2d:64:22:13:e9:59:b6:c1:09:79:a9:af:da:
b4:33:0e:b4:4f:62:fe:55:05:37:82:44:7a:8f:dc:
bd:fb:a3:68:12:4f:ad:0e:23:24:31:a8:6e:27:f0:
72:0f:cd:df:f2:b9:ff:3b:50:53:e1:be:b3:1f:b8:
16:39:4c:f8:8a:cd:1b:f3:7b:fd:b9:4c:f4:8c:2b:
11:06:d7:8d:4d:79:de:c4:26:64:4e:7b:d5:34:62:
ed:7f:2b:dd:69:6a:e7:28:3c:cc:80:f8:83:8b:c6:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7A:4F:2E:4C:0A:51:BA:83:A0:97:B6:D5:D4:3C:79:1E:39:6E:A8
X509v3 Authority Key Identifier:
keyid:2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:61:5a:a0:33:70:a6:09:62:e6:fd:f9:fc:af:fe:73:8c:4d:
89:8c:a9:99:c5:1e:27:57:cf:76:ab:17:c1:bb:f0:19:fd:89:
9e:37:d5:80:d7:43:60:e0:7e:d1:24:65:dc:83:fe:3f:ba:6e:
ce:b8:59:90:55:91:14:d7:b0:d7:7a:31:a5:13:e4:dc:60:ce:
7c:59:b7:48:33:35:ef:4b:93:76:00:e9:33:4a:19:83:30:a2:
66:b7:70:24:ac:7e:c3:1c:be:2f:df:34:16:0a:cb:91:bf:67:
96:b0:e4:5d:4a:04:c0:37:fd:c7:cf:74:20:a8:fc:f0:92:c2:
ed:c1:f3:cb:e3:75:90:f7:56:b6:c2:bf:5f:dc:33:c4:fc:3c:
08:05:5e:02:67:43:54:83:e8:a5:d7:80:b0:4a:98:ac:38:55:
b4:49:7a:00:bf:d0:27:91:f9:f5:60:61:61:d8:24:62:51:db:
2d:7c:4c:1d:0c:e6:4b:08:83:e4:aa:9d:d5:da:a2:fd:20:ae:
9d:01:4c:45:16:19:86:2a:33:6f:ad:3b:49:b8:f4:6b:dc:a2:
67:36:25:07:88:51:be:d8:6e:78:94:38:f7:8b:db:bb:ad:e4:
cd:1a:51:88:8b:5a:aa:22:db:40:02:f3:e4:92:1f:4a:ee:81:
3c:14:84:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:29:01 2025 by rpki-client