Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
File: lISBYokoMa3VoH1DAuf8__UvAv0.mft (raw, json)
Hash identifier: jnr9sR1rp2mgVGWgrvSSacH+tqJAJGQVcsXHqlQWpyo=
Subject key identifier: DB:C6:0B:5C:78:A1:0F:38:89:9E:51:E7:71:CC:71:62:04:56:D4:72
Authority key identifier: 94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
Certificate issuer: /CN=94848162892831add5a07d4302e7fcfff52f02fd
Certificate serial: 0196B333A0392E8FD6FF550D375B3AC5F41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
Manifest number: 0D9F
Signing time: Fri 09 May 2025 04:00:27 +0000
Manifest this update: Fri 09 May 2025 04:00:27 +0000
Manifest next update: Sat 10 May 2025 04:00:27 +0000
Files and hashes: 1: lISBYokoMa3VoH1DAuf8__UvAv0.crl (hash: qIvNuwMDuMuxPVLMoUcbS3N6uXUVP35RTW4CBsXcmHI=)
2: pCjnVrP5FgTyxJCdVibTZfXsdQ0.roa (hash: 7mj8lx9tw06nsGTLuJVm0o+Fdl9vi8xRzCyfVBayZ+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:33:a0:39:2e:8f:d6:ff:55:0d:37:5b:3a:c5:f4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94848162892831add5a07d4302e7fcfff52f02fd
Validity
Not Before: May 9 04:00:27 2025 GMT
Not After : May 10 04:00:27 2025 GMT
Subject: CN=dbc60b5c78a10f38899e51e771cc71620456d472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:74:ed:b6:b6:ff:d6:3c:36:c5:c1:e9:f3:5d:
d3:44:71:2c:45:5a:d6:96:75:49:11:bf:22:c8:30:
ab:ce:31:f7:3e:41:13:78:a7:e3:4d:45:8e:a8:d9:
43:7a:80:99:8e:26:f2:b2:2a:9b:1f:a9:be:ef:d2:
f0:c4:3f:70:b5:ab:ab:87:4e:79:50:b2:4d:94:34:
d5:c3:e5:af:70:82:95:02:68:8a:b2:0a:2d:9b:01:
31:bd:4e:d2:b7:4e:b3:24:d2:6c:1c:d1:fe:02:af:
20:20:40:46:8b:dc:cb:d4:69:52:f8:13:30:b8:8e:
57:8b:04:1b:5b:0b:71:27:14:67:c1:0f:7d:38:4d:
1d:dd:6c:e7:da:60:30:20:0c:57:26:c0:a4:c5:a5:
fc:34:a7:8f:37:a7:bc:74:dd:97:ed:92:5f:85:c0:
61:5a:d5:62:07:00:51:ba:c7:0a:dc:8c:36:05:dc:
b0:4a:f0:41:e9:0e:c1:2b:14:31:b6:2a:f8:e1:6e:
1d:af:80:97:81:6e:38:c8:7c:2f:fd:5a:f3:7b:b9:
75:c3:6c:7a:d9:9f:0c:58:ad:81:8d:06:96:1d:43:
d7:b8:24:22:9c:c7:7d:8f:19:dd:14:06:03:1a:fa:
ed:c8:80:83:32:8d:67:bc:da:b5:74:97:29:28:7d:
6b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C6:0B:5C:78:A1:0F:38:89:9E:51:E7:71:CC:71:62:04:56:D4:72
X509v3 Authority Key Identifier:
keyid:94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:12:f3:c9:d0:9b:ab:fa:61:ef:95:56:c8:13:2f:c3:b1:62:
7f:de:1b:fe:d0:23:12:45:81:c3:d3:7d:fd:e5:76:d6:f7:45:
03:23:95:06:7e:21:1a:79:d3:ce:46:57:57:ff:82:f0:e3:10:
c4:02:41:78:31:79:7d:ef:d3:dc:a6:cb:00:97:c9:d7:51:84:
3d:e3:3b:81:b4:fa:26:34:0a:00:a6:35:55:47:3a:18:58:a1:
72:3a:db:cd:4a:4c:fa:8e:4a:88:fe:b7:a3:f7:95:15:82:2f:
49:71:6b:a8:49:08:c5:de:06:15:e3:8f:a4:ad:f4:4c:9e:64:
89:cf:5f:d2:76:aa:b3:10:ab:97:7e:7a:98:53:54:31:94:0a:
9c:40:7f:29:42:0a:d2:a7:94:d0:77:f1:45:f1:4c:4e:4a:16:
82:27:60:3b:16:85:69:3e:0d:7c:b2:8e:2a:82:8c:89:1f:5e:
47:39:f3:18:59:d5:a6:a6:6c:2a:a5:00:bb:5e:07:14:5b:ef:
74:81:b2:51:a1:19:b1:62:f2:98:86:05:48:a2:a5:8c:91:49:
83:b1:0a:41:93:ef:ad:4a:04:fe:68:7e:18:cc:2c:eb:57:b8:
b1:b0:65:e3:c3:b2:4b:ef:2d:9b:b4:5d:ec:24:03:3a:5a:5b:
be:8b:b9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:51:36 2025 by rpki-client