Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
File: lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft (raw, json)
Hash identifier: L/UeueKDXAR/m92A/nv/vcwgLtyZiv6Ksbr5oCoD45Q=
Subject key identifier: E5:11:71:6A:4F:FD:D1:68:8E:63:FB:49:57:E3:CD:16:B8:AF:F1:B9
Authority key identifier: 94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
Certificate issuer: /CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Certificate serial: 0196C9F22F97D7629E7128EC75C7A629BF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
Manifest number: 12DD
Signing time: Tue 13 May 2025 14:00:14 +0000
Manifest this update: Tue 13 May 2025 14:00:14 +0000
Manifest next update: Wed 14 May 2025 14:00:14 +0000
Files and hashes: 1: 7Cbq0-9TtgLYQeu52VZUWksHnwE.roa (hash: JkpuN02DfnBu6RSAax0V6uNhARwqnNXw/JbyXJtDiJ8=)
2: lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl (hash: mXPrQveZTwG7N5IY81wxmFtGKf94q4WNW3+TKbO2p5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:2f:97:d7:62:9e:71:28:ec:75:c7:a6:29:bf:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Validity
Not Before: May 13 14:00:14 2025 GMT
Not After : May 14 14:00:14 2025 GMT
Subject: CN=e511716a4ffdd1688e63fb4957e3cd16b8aff1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:76:b7:49:f2:44:7c:16:2b:8d:51:d6:a5:
85:58:5e:83:62:d3:4c:fc:37:17:54:f1:80:d5:d7:
e8:1f:ea:4d:09:10:8a:c6:6b:91:fa:5f:e2:0d:7c:
d2:0b:f1:b2:33:d4:3c:d7:5b:cd:e8:4c:29:1c:c7:
bf:0b:05:55:92:ef:05:92:1a:cf:65:86:36:5c:5b:
17:ea:66:6f:ae:0c:3a:70:22:80:ad:6c:07:37:c2:
f0:6c:6c:29:6a:32:76:ab:d4:52:62:5c:0d:13:01:
f4:01:5c:ef:d7:9a:6e:16:e0:45:12:3d:61:f2:b5:
ac:5b:53:ad:5f:71:06:44:ed:cf:05:7f:93:f9:33:
3d:aa:fb:33:cf:77:dc:5f:80:52:72:6d:43:06:2e:
80:72:5c:cf:57:a8:43:52:09:f2:19:8a:f1:f9:81:
6e:d3:a3:c4:ad:99:86:28:f2:8c:31:39:ea:38:ae:
5c:53:47:78:89:98:33:51:2e:1f:b5:df:74:3f:dd:
03:a8:4e:22:de:88:48:3a:20:ca:5f:e8:c7:28:2f:
50:c8:b5:4d:e6:a4:f1:ff:de:86:b9:62:6e:d6:99:
64:12:25:b9:ac:0d:1b:c2:9a:57:b2:66:55:da:32:
63:da:4c:77:13:97:94:6b:ff:5d:de:39:0c:12:17:
06:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:11:71:6A:4F:FD:D1:68:8E:63:FB:49:57:E3:CD:16:B8:AF:F1:B9
X509v3 Authority Key Identifier:
keyid:94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2e:91:1d:15:de:ee:32:48:93:fa:6b:23:e0:35:ec:a8:57:
24:8b:b3:17:01:25:bc:ad:19:6e:86:61:2b:c2:8e:48:8c:ec:
af:b5:95:91:31:0e:16:37:65:df:7b:27:b1:85:03:e4:7a:d0:
5b:3b:1c:10:65:a7:cb:8b:7b:02:90:e4:fb:a2:02:de:19:12:
dc:54:40:ac:d5:ba:22:30:76:37:1c:57:73:be:17:34:f1:2b:
c1:45:e3:4b:08:7e:1a:31:1d:49:9c:d0:62:b5:05:84:8e:51:
bb:28:25:dc:b5:fd:0b:11:59:58:48:a5:38:f5:22:f0:a7:28:
88:0f:c8:8f:5b:e1:70:90:f7:97:c0:c2:e1:36:2a:da:af:d2:
b6:7b:d0:6e:47:8f:e8:4c:86:6c:33:17:5e:ba:5c:44:11:a4:
89:1f:68:e3:12:c4:55:23:2f:80:77:e2:ce:b6:ac:cd:f3:b3:
7b:76:2b:2e:df:06:85:6d:bb:aa:28:e3:9c:31:e5:34:f7:fd:
79:cc:60:07:bc:f4:93:dd:4b:b1:4b:75:55:58:ec:63:81:f0:
d2:a5:87:46:32:1b:12:99:4e:dd:03:6c:47:83:11:60:f9:6b:
f3:a5:39:52:47:f3:8c:cb:c4:c8:9e:66:f7:2c:28:d6:89:7e:
72:89:5a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:52:40 2025 by rpki-client