Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
File: Li9t2XmfpOoIT9VJ1xDGiW364pE.mft (raw, json)
Hash identifier: RIhm/iyTCT9ZcekAnsV+tRxKcoNqRBSbmej1eWI2ljk=
Subject key identifier: 47:F1:AC:3D:E7:1C:DF:E5:1A:E3:4E:59:D2:44:A4:5D:0B:A6:BA:8A
Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
Certificate issuer: /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Certificate serial: 0196C8044CC1A2B13E6EA093113758F858F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
Manifest number: 0786
Signing time: Tue 13 May 2025 05:00:47 +0000
Manifest this update: Tue 13 May 2025 05:00:47 +0000
Manifest next update: Wed 14 May 2025 05:00:47 +0000
Files and hashes: 1: 1KuevLKOXin1b0wgf0GWz0r6nwg.roa (hash: ASw2YdXHtzStc1C+SsPAtANeLSe13bWPdtXsO3TzYqc=)
2: Li9t2XmfpOoIT9VJ1xDGiW364pE.crl (hash: 8IBVYcrjCpT4kMwqDm8OtPdNueFuroVIoQKeJE23YZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:04:4c:c1:a2:b1:3e:6e:a0:93:11:37:58:f8:58:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291
Validity
Not Before: May 13 05:00:47 2025 GMT
Not After : May 14 05:00:47 2025 GMT
Subject: CN=47f1ac3de71cdfe51ae34e59d244a45d0ba6ba8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:18:84:2f:3d:cf:70:2f:2f:c3:48:cc:da:
a8:49:77:d0:81:b9:f6:55:82:bd:86:a4:6c:5b:d7:
fa:0c:5a:24:58:53:1c:2e:c2:b5:cd:8e:32:cc:7b:
31:ab:b9:64:0a:04:0b:7e:8e:19:67:81:a3:22:3d:
0d:64:e5:c4:3c:0f:37:eb:60:2e:dd:35:75:5d:ee:
cc:29:8a:05:2d:6e:7c:ec:d5:66:9a:73:b6:74:d6:
79:2f:d4:91:8f:69:a3:5c:4d:4f:97:77:ae:69:7a:
52:b6:57:c7:c1:6e:e9:23:a7:d3:2a:f8:1a:26:11:
64:aa:0a:0a:1f:55:45:22:1d:ba:2d:3d:cd:65:f9:
74:49:0b:22:d0:85:0c:7e:aa:35:a4:e9:44:66:1d:
05:51:ec:bf:e3:23:51:97:5e:4e:62:01:1b:ce:8a:
29:5a:a7:d2:7b:fa:20:02:8f:ec:2a:64:b7:e7:5f:
ee:84:12:e2:14:1c:61:3d:5c:fe:a3:d3:17:c3:d5:
ad:b2:f9:89:c4:88:09:91:0e:0e:53:72:c3:aa:8e:
9f:92:ee:1d:f7:69:69:b7:e9:85:81:b6:72:03:b1:
7b:e2:02:3b:de:df:d4:cc:9b:c9:8a:a1:de:7e:48:
83:6a:44:d4:72:4d:2f:49:28:cc:6b:6e:94:e6:92:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F1:AC:3D:E7:1C:DF:E5:1A:E3:4E:59:D2:44:A4:5D:0B:A6:BA:8A
X509v3 Authority Key Identifier:
keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:47:d3:4c:25:a4:db:6a:0c:fa:3d:5e:51:11:ec:0a:40:95:
2a:9b:d6:33:d5:d8:ce:72:6e:d6:12:58:91:62:71:8b:aa:b6:
46:69:88:41:d7:91:ba:16:91:7c:8e:34:71:7e:01:cf:d5:d6:
22:3b:01:40:b6:b9:e1:f6:77:30:91:88:84:2a:5c:e9:c5:9b:
26:27:01:43:4d:62:a1:04:51:0b:16:4e:a3:d6:8b:a4:47:42:
3f:63:b4:c2:1e:39:f8:78:b5:5c:07:07:62:5e:44:90:f4:d5:
d1:1c:35:23:43:0e:54:c0:d5:4c:f3:ea:8b:c3:6f:c5:5f:fc:
59:cc:95:af:ec:b6:8e:e3:f1:48:ff:9e:d6:bc:51:f1:fe:61:
91:2e:f0:78:85:c2:4a:99:08:c2:1a:bc:b5:2d:d2:2e:12:7e:
93:9b:cc:0e:71:53:eb:52:72:21:bd:22:ca:b6:bc:f9:7a:e2:
4d:72:bb:5f:49:f2:01:92:4c:b0:bd:d9:73:76:b7:0d:05:7b:
15:12:a8:ad:11:41:8c:b0:57:a6:34:bc:d5:29:c4:7d:fd:0d:
f6:f2:d6:6c:55:e9:f0:00:f1:ee:22:d7:9a:a7:cf:cd:df:5a:
4a:9f:b5:43:c9:db:32:6a:d4:8a:18:c4:9d:6f:39:00:c9:2f:
f1:66:e1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:02:03 2025 by rpki-client