Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
File: l2umIpxFnXaV01KbEgfiwpsIQrE.mft (raw, json)
Hash identifier: S+BgZxkHFZvOUY8uw3sLVeTH+2SBHhrhodnTLaKz5co=
Subject key identifier: 65:CA:B3:59:4C:25:FD:23:FA:D1:8C:97:BD:2D:F3:71:FF:E8:E8:E2
Authority key identifier: 97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
Certificate issuer: /CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Certificate serial: 0196CCF330E7E69B4A130D9A044C42EF55A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
Manifest number: 153C
Signing time: Wed 14 May 2025 04:00:11 +0000
Manifest this update: Wed 14 May 2025 04:00:11 +0000
Manifest next update: Thu 15 May 2025 04:00:11 +0000
Files and hashes: 1: 8i_tvPtWf70i2EmSEMpvUHFIlh0.roa (hash: 5i+xKeAIrkPv9y5KV9LM5WC3PSC5H7SyU1nhMQB9nho=)
2: l2umIpxFnXaV01KbEgfiwpsIQrE.crl (hash: yFmnHpmaaEvzrfUg7nS8cqp8a/weyWGPCXz9mO64SlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:30:e7:e6:9b:4a:13:0d:9a:04:4c:42:ef:55:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Validity
Not Before: May 14 04:00:11 2025 GMT
Not After : May 15 04:00:11 2025 GMT
Subject: CN=65cab3594c25fd23fad18c97bd2df371ffe8e8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:f6:3c:52:dc:77:a1:cf:3b:31:11:23:79:
11:7f:16:32:9a:5b:91:84:9e:b7:4f:04:19:02:c3:
fc:af:02:72:05:d3:84:b4:f1:e7:1a:83:b9:bf:49:
a9:e7:6a:f7:58:55:26:6a:d4:80:4c:a2:38:19:78:
db:78:6b:92:f3:80:df:53:af:b8:69:67:61:05:e0:
ca:6f:af:e7:88:ab:d9:68:a8:ea:27:74:9f:d5:8a:
49:01:19:92:b0:1e:23:24:46:7e:8e:4c:55:5b:e8:
05:26:ba:0f:5c:f2:6f:8a:bc:71:2d:7e:55:d7:ab:
9c:64:df:9d:f1:ad:b5:01:48:00:16:5f:67:7d:80:
5e:ac:86:93:65:4b:46:f1:43:b5:66:9b:a0:55:2a:
86:ee:ec:71:28:55:c9:a6:e0:85:2d:74:40:57:03:
9b:9c:c9:83:a6:88:b0:dd:cd:a0:38:bb:3a:73:02:
f9:48:c0:28:ed:a8:93:64:0d:1e:c9:a5:86:0a:af:
df:d8:02:94:2d:a3:2c:50:14:7f:b6:c0:70:82:7f:
65:5d:08:9a:7e:06:03:dd:c4:c3:2d:6e:37:bd:49:
da:7e:46:fb:40:52:b3:e8:0f:7d:82:8f:62:e3:cc:
c1:e8:40:9a:f3:75:b2:73:35:73:36:7f:f7:d6:42:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CA:B3:59:4C:25:FD:23:FA:D1:8C:97:BD:2D:F3:71:FF:E8:E8:E2
X509v3 Authority Key Identifier:
keyid:97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:83:62:33:b6:a1:e0:50:ae:ec:e6:1b:e5:95:78:60:df:37:
01:10:0d:9b:1a:6b:58:b3:42:50:30:b9:9a:c9:1b:2b:84:2d:
08:fe:89:60:24:94:99:f0:74:f0:30:5b:0e:09:da:de:b8:fa:
42:58:0c:b8:a8:57:f0:88:39:9e:b9:66:36:eb:fa:6e:96:17:
9a:31:f0:30:e7:cf:95:19:3c:cc:5b:ce:0a:12:9b:bf:c4:af:
f3:c5:d9:0d:97:8c:e8:0d:94:60:72:21:24:fb:41:a7:43:4b:
9c:45:91:e8:dc:46:41:5d:26:cb:c8:c6:a5:c0:d8:8f:0a:ea:
99:72:36:b3:ab:5a:25:97:74:ff:63:65:d6:1c:01:8a:d6:79:
04:63:5b:00:03:8a:54:0b:0e:71:e8:3f:73:96:47:00:e5:64:
7b:36:17:5e:a5:f8:e1:1f:4a:6b:a5:9d:2e:3e:66:e5:6e:8f:
10:9c:23:2f:a2:69:80:9b:a6:4a:79:f0:a4:5c:7a:41:25:01:
46:62:c0:c3:9c:ed:6f:26:77:5e:96:bf:59:a9:e7:ee:f2:53:
8c:fe:73:8d:46:cb:66:cc:c5:db:68:cb:40:bf:02:4e:17:76:
3c:f3:0d:06:6f:dd:20:47:de:b0:4b:2a:4d:0f:ce:ea:5e:1d:
18:7a:bc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:12:08 2025 by rpki-client