Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
File: lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json)
Hash identifier: qGFYl59I00pMyMZ8yfYXMrsg5FtU95go1rpGYukskP8=
Subject key identifier: A8:7B:7B:C2:8D:82:B2:5A:D2:18:40:B7:56:4E:C6:10:9C:D6:03:D6
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial: 0196D88A8BE3372026B80F2A2014C72C4E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
Manifest number: 14D6
Signing time: Fri 16 May 2025 10:01:20 +0000
Manifest this update: Fri 16 May 2025 10:01:20 +0000
Manifest next update: Sat 17 May 2025 10:01:20 +0000
Files and hashes: 1: D7v-i2Em1A95E4k4o6lvGCl8mqk.roa (hash: xqtDWFhhoatEtwCz7HFHDZQmIK3iuhE2AzGVbExJo/4=)
2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: Pob1/z8Rw5OPhQI2BUonWK8UfP8ni6xiWWzdRbtsq1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:8a:8b:e3:37:20:26:b8:0f:2a:20:14:c7:2c:4e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Validity
Not Before: May 16 10:01:20 2025 GMT
Not After : May 17 10:01:20 2025 GMT
Subject: CN=a87b7bc28d82b25ad21840b7564ec6109cd603d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9e:96:03:9a:d0:a4:56:1d:f1:40:6c:5f:cc:
d5:f1:90:a2:de:58:37:f7:dc:e9:12:6d:86:6a:68:
20:06:ae:27:e8:32:e1:35:1a:ff:37:ac:74:3f:a4:
3c:78:52:c7:51:16:fb:a5:0a:46:e7:13:f6:26:1e:
8e:2c:54:63:79:4e:ef:00:03:c3:b8:7c:c1:ae:bb:
3b:a8:1c:8a:4f:cc:e4:19:a6:12:4e:31:89:3d:5f:
0d:8b:a0:46:0c:d6:b0:5c:61:a3:11:d3:c6:9c:7b:
34:c7:8b:23:fe:a4:4c:23:d9:d9:36:7a:44:cf:ca:
20:b0:b0:73:70:99:b0:db:d1:e9:bd:3c:9f:19:78:
32:90:f6:26:61:2f:ff:ea:10:a1:51:c7:5c:ec:30:
c0:16:38:40:88:b9:54:b5:19:44:be:b7:b7:c5:c2:
9e:fe:2e:22:e0:6f:f7:2d:05:fc:59:35:32:9d:2e:
2e:d6:0c:5c:0a:d9:3d:82:c3:62:af:03:4e:2e:1d:
ca:95:bf:9e:17:d1:3b:bf:95:7c:e1:87:d3:36:0d:
dd:14:d8:31:a6:af:9b:e5:70:23:e4:0a:dd:17:91:
2c:7e:d5:a2:8e:10:75:27:a5:3e:49:99:25:c5:b6:
62:e0:0b:d9:99:94:85:84:e9:c1:a7:19:6b:cc:cf:
02:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7B:7B:C2:8D:82:B2:5A:D2:18:40:B7:56:4E:C6:10:9C:D6:03:D6
X509v3 Authority Key Identifier:
keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:33:16:6e:3f:c0:9d:6b:97:e5:35:38:c2:5a:7b:ec:c6:e9:
5e:88:a6:5f:3c:ec:5b:60:cb:47:1c:ee:f7:29:77:28:59:ff:
ae:57:89:73:52:bf:1f:ca:a3:7e:20:32:2a:b1:09:ba:0c:bb:
43:b3:59:2b:1d:00:e1:bb:c9:02:2f:5e:6e:2c:ce:44:37:6b:
96:b1:0c:46:6c:d5:d4:ce:4e:e4:76:b7:97:1b:5b:2f:92:25:
2a:54:b8:3b:e0:87:1a:92:3f:bf:4c:d3:7e:34:ce:63:a6:33:
6b:85:42:a0:1b:06:e0:ce:fd:26:b9:f6:e9:f6:b4:c7:75:48:
4b:96:6d:ef:6c:e2:39:cb:cd:2e:c7:bb:19:6c:a2:33:5c:07:
db:f5:a0:36:38:f9:52:f4:32:38:c3:2b:1d:88:c8:45:91:9e:
95:5b:3c:46:d2:84:6a:fb:e4:a8:1d:e0:ff:56:91:a4:82:01:
82:c5:e6:8c:3a:99:09:80:9a:b3:c6:70:46:d4:52:38:06:f8:
0e:3f:13:ed:9d:85:95:65:f6:9f:64:69:6f:a5:ab:7b:5f:cb:
ed:0a:10:29:fc:f2:61:5f:21:2f:0d:b5:e5:99:de:89:59:46:
91:03:e2:29:c3:47:b8:04:d8:25:10:62:ba:8f:b9:cf:3e:c9:
d7:b4:d0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:30:13 2025 by rpki-client