Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
File: lQLYuCacawf4FKzwx-1ymz9LWYQ.mft (raw, json)
Hash identifier: Pk0luC/Ecavtv5JzRLJdclg6v7Aa6mNaVmLkYmugHSY=
Subject key identifier: 14:19:9D:09:4F:DC:8D:4E:4E:28:83:74:2A:B7:86:C9:10:25:81:17
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 0196CB72C2989F9F7E78FC0729A8A28D1E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
Manifest number: 0B17
Signing time: Tue 13 May 2025 21:00:17 +0000
Manifest this update: Tue 13 May 2025 21:00:17 +0000
Manifest next update: Wed 14 May 2025 21:00:17 +0000
Files and hashes: 1: 8eAv8sSKqCobRHi1pPcWZI3QV5o.roa (hash: me5Ypddt6zuTrOyc9m6TejNlArKlNxDqSv65dSh/DKk=)
2: W3qS8ccHplCENHnAWCXalJ4Lxq8.roa (hash: h3ysUJyoiR9Pxj5SMBpAdJdk3U65tHclFMzHCEEhX4k=)
3: dNgsJxplyBIdN0aFghsbI0uLoiA.roa (hash: CotLpiY9ZJ1LzZdIjbzRKpHMH68ToWHXGhtpPv2E3iM=)
4: lEBj_UwUplOdey7hYZVGhtt7f2c.roa (hash: z/KEoxchf9RVTBMsvFAyziRDdzuolM10ZmoiGr8Esu0=)
5: lQLYuCacawf4FKzwx-1ymz9LWYQ.crl (hash: VOk/UygXminau3euSySWQvDbPqzwcpJE0R1XtavuQJQ=)
6: nzaW7aFzNZWZ3s1WL84iARdReAc.roa (hash: tcY1jL8rHcVFx+anuSB4DW5VRR2l1AU/8uCjHxYTjls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:72:c2:98:9f:9f:7e:78:fc:07:29:a8:a2:8d:1e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: May 13 21:00:17 2025 GMT
Not After : May 14 21:00:17 2025 GMT
Subject: CN=14199d094fdc8d4e4e2883742ab786c910258117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:69:81:78:90:84:c2:60:27:56:0e:56:92:da:
97:b0:a0:b4:96:1f:db:d4:63:1b:08:89:ca:3f:d3:
67:31:07:fc:ba:82:82:3d:d8:5c:94:11:ee:c7:8d:
c8:97:11:be:50:f1:34:a0:9b:0e:3b:ea:35:ed:6f:
ec:05:a6:d8:3a:b8:f4:74:cf:6b:77:1d:22:37:5d:
93:6a:23:47:33:a0:52:ca:c2:a3:9b:8c:8a:13:76:
18:02:8e:67:cd:13:e1:b5:9a:22:99:26:93:26:2f:
5d:7d:49:5c:c9:06:b1:70:93:f1:9d:bd:90:27:8c:
7c:e7:2c:d0:b4:40:14:f6:ae:95:ca:64:0f:2c:d7:
ac:36:eb:fd:cf:24:d9:b6:70:fc:cc:17:9c:2f:29:
91:c4:68:95:66:3d:83:38:f6:07:26:2c:ed:ff:88:
84:3f:0f:39:c4:03:3f:79:55:dc:ac:25:00:79:48:
ae:d1:e9:b7:8d:c6:ce:11:12:b8:36:dc:5d:c9:87:
23:e8:51:e0:86:08:0b:93:1b:fe:59:04:b4:c1:a3:
da:7b:0f:37:0e:41:40:f5:42:72:8b:4b:25:a5:86:
42:c4:24:10:f3:3a:f2:71:0f:34:ed:65:93:16:d5:
e7:2e:e7:bc:e7:8d:b0:33:45:f3:18:77:08:b1:08:
39:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:19:9D:09:4F:DC:8D:4E:4E:28:83:74:2A:B7:86:C9:10:25:81:17
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:99:c7:49:1c:58:f2:64:5e:b2:df:55:da:80:ba:f5:cb:a3:
50:d9:02:84:35:b1:34:e9:ac:2c:26:da:58:96:3b:37:2c:73:
b2:2e:d7:9a:e0:9e:2f:be:0f:1e:33:86:21:72:b0:66:34:92:
c5:71:07:d6:41:0c:33:27:eb:a9:33:60:a6:6f:37:87:18:36:
22:32:17:41:96:db:0e:3f:4f:74:ee:6f:1e:cf:74:c0:8e:91:
ee:20:19:47:8b:a3:29:45:57:26:bf:e6:50:0b:e5:9c:6b:1b:
82:99:3e:74:c8:3d:10:31:cf:0b:8e:f3:32:cd:9b:5b:36:97:
49:a2:24:c9:c6:9e:82:2a:f2:d1:a6:fe:86:0d:d2:38:6e:42:
71:f4:33:f6:19:6c:12:18:c5:3f:00:cb:a5:56:5f:31:ef:0d:
a2:b3:cb:08:fd:36:4e:c4:f4:e3:c0:e1:a9:d7:12:8c:90:04:
89:55:09:fc:df:29:d5:22:38:9c:02:b3:e4:1e:45:8a:6b:90:
1f:09:d1:a0:96:24:e5:71:7b:5f:af:5a:1d:31:ad:1c:32:26:
f5:24:22:2f:c5:68:d3:c2:e3:ab:7e:74:d3:e6:6b:f6:77:b0:
af:31:30:51:6d:77:47:af:b8:8a:30:e1:8a:17:a0:0c:43:39:
21:1b:56:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:30:48 2025 by rpki-client