Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
File: lBb6apDtlOIh22nSH83afGbRPJE.mft (raw, json)
Hash identifier: zjEPrK6orWw4rDsosC78qP05CB6Bt9zEG6gQ2Up+Sro=
Subject key identifier: B3:90:5B:2A:3F:E3:B6:33:4D:2B:47:BC:5B:17:01:1F:5C:49:AF:3D
Authority key identifier: 94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
Certificate issuer: /CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Certificate serial: 0196BA1170B8D3E691FA62ACCDA077CF6B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
Manifest number: 12D3
Signing time: Sat 10 May 2025 12:00:27 +0000
Manifest this update: Sat 10 May 2025 12:00:27 +0000
Manifest next update: Sun 11 May 2025 12:00:27 +0000
Files and hashes: 1: 1-zf9ZQZT2xUgEblVxx2k6xoE3Oc.roa (hash: J6Mj0qs7STVl56/TudBQhf4GIVoZij0kDMBUdFZiWTw=)
2: j0079Gdow0tNd5CU-iJwLzd7i5w.roa (hash: jQOc91e0vtBGc9svQgrVHCBuuuVKwjHcOWkr8bE2xq8=)
3: lBb6apDtlOIh22nSH83afGbRPJE.crl (hash: FMG4foBh1R7MbiCaYR1YVcyqlNpCSlbWXbS7GRK9phM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:70:b8:d3:e6:91:fa:62:ac:cd:a0:77:cf:6b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Validity
Not Before: May 10 12:00:27 2025 GMT
Not After : May 11 12:00:27 2025 GMT
Subject: CN=b3905b2a3fe3b6334d2b47bc5b17011f5c49af3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:92:0d:a2:23:72:d2:4f:e9:33:5a:0e:e4:
81:44:86:df:6a:01:64:73:3b:73:ef:61:89:3d:66:
8f:b5:5e:65:97:7f:f9:49:4f:28:0e:f3:90:84:df:
51:40:74:8c:74:65:0d:ed:c4:e9:ea:45:00:2f:04:
67:b6:e2:c8:07:db:0d:fb:ec:3b:9e:d1:99:82:c7:
d1:0a:9d:61:c7:34:b6:91:7d:3e:95:81:88:7e:79:
ad:9f:3f:3a:df:ae:12:c0:5e:ea:71:f5:30:4a:84:
ea:c2:af:de:57:cd:3a:0a:e5:fb:44:9a:4b:49:43:
70:fa:b7:82:8b:af:5d:5b:30:36:ab:2f:4d:5c:76:
cd:ec:03:71:12:e7:ad:41:81:94:24:7b:cd:46:a4:
1c:9a:0d:0b:78:c0:5e:a3:81:dd:40:8b:91:c7:ac:
3f:c7:3b:bf:8c:9c:68:a9:15:50:9b:93:83:48:b8:
17:f2:14:38:79:ef:17:33:cb:2b:98:b3:34:3b:7e:
6c:71:5b:7e:f6:7c:7c:f6:d6:3b:13:7a:29:ad:d2:
70:29:b7:45:20:40:c5:ab:9d:06:24:bb:fa:3d:86:
ce:37:b6:33:49:03:52:b1:f9:f5:ef:3e:67:1e:bd:
bd:ff:0b:da:2f:35:4b:a3:f1:76:0e:50:c5:bb:45:
23:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:90:5B:2A:3F:E3:B6:33:4D:2B:47:BC:5B:17:01:1F:5C:49:AF:3D
X509v3 Authority Key Identifier:
keyid:94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ea:1a:04:3d:b7:19:5a:30:79:fc:60:9a:02:15:f8:7f:99:
3b:81:50:a1:5c:c9:98:80:2e:41:d6:be:15:f5:50:a1:50:ec:
2b:0f:78:3c:a9:fd:ae:fb:3d:5e:3e:07:d2:88:93:72:5a:19:
ec:4d:7c:0f:e5:c3:45:6e:27:1b:41:dc:93:a4:6e:f1:11:2d:
3e:e9:c7:c3:06:fd:54:31:75:ff:1c:19:ca:39:43:36:18:df:
8e:26:c4:ac:75:b7:50:00:f3:a1:40:5c:36:7b:c6:dd:16:ea:
1d:f3:93:86:d1:98:d9:e5:9d:b7:98:82:22:31:ff:65:3f:81:
ce:8b:cf:d6:7b:44:cd:47:13:2a:21:09:b2:60:1a:74:a9:a6:
ba:7c:c3:db:7d:5b:0d:bf:ba:fc:b9:cc:1e:7a:e6:9d:d8:bc:
4e:b3:79:79:4a:76:69:73:76:fc:27:a3:c5:49:ad:58:56:ee:
a4:b0:74:54:15:dd:e1:71:0b:a0:94:25:68:46:7a:4c:8a:f9:
db:7c:e2:9a:a6:0b:40:28:b5:c4:c6:67:a3:8f:8e:99:78:95:
d7:d4:49:f3:65:c7:db:41:10:ff:a3:80:97:dc:92:20:22:5e:
87:03:ad:87:2d:31:f8:f9:2f:59:95:e1:b2:be:52:1e:6a:e0:
83:3e:73:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:38:18 2025 by rpki-client