Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
File: lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json)
Hash identifier: TytDRoi14hmDvu6s1xJkBp3qg8l3uaN8Y49Mqn1iTwU=
Subject key identifier: 07:E8:B6:A3:62:6E:56:9C:DD:A0:66:F9:C8:46:56:4E:35:C9:1E:1A
Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
Certificate issuer: /CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Certificate serial: 0196C15DA007D540FA88720D3FAAB24A087C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 22:01:00 +0000
Manifest this update: Sun 11 May 2025 22:01:00 +0000
Manifest next update: Mon 12 May 2025 22:01:00 +0000
Files and hashes: 1: __MYyid4GtIkDzQxVkfCnSU_9K0.roa (hash: wGfHIHi66rHTs2wGskl+w+/VWjBeUlcRI6guMD/KMNQ=)
2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: eZeaMSdTcTywcObCB/48DPi4gcu0ZzYykojUkBn9MAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:a0:07:d5:40:fa:88:72:0d:3f:aa:b2:4a:08:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Validity
Not Before: May 11 22:01:00 2025 GMT
Not After : May 12 22:01:00 2025 GMT
Subject: CN=07e8b6a3626e569cdda066f9c846564e35c91e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:bf:88:6d:28:51:dd:9e:ff:97:f2:d5:e7:
4c:13:3b:3e:e2:5e:fc:0a:da:0e:ca:40:c1:cc:3c:
b1:70:40:1c:0c:de:16:e9:aa:ff:33:05:a9:eb:10:
51:18:78:93:83:4e:6c:9a:c4:07:56:e5:6d:c6:6f:
4e:d8:f5:86:fe:4b:28:80:94:d0:4b:bc:d7:c1:b6:
a2:a5:d0:d1:dd:82:9d:d1:87:1d:c4:c7:f7:6c:76:
54:1b:52:08:ea:14:7d:2e:72:dd:0e:c3:d2:7f:e6:
39:72:4b:a3:6a:29:11:c7:d0:ea:ca:d9:0a:aa:82:
7f:82:ed:f1:5d:5c:d8:50:09:f4:0d:e6:0c:fe:c6:
56:5b:da:76:26:c1:df:a8:d7:e8:e2:b2:e7:34:64:
12:d1:35:d7:2e:37:6d:cf:77:9e:37:3e:c8:ee:6e:
4d:1d:50:95:63:dd:55:ba:9c:40:84:a6:23:07:d3:
a3:c7:e8:57:af:00:16:78:6d:ed:c2:bd:36:c1:37:
d7:f3:6b:80:a7:bc:d0:d3:fb:1a:d3:ea:5d:47:38:
d7:83:f7:86:37:7e:48:46:7a:e2:dd:50:c4:b1:c1:
1c:0c:85:42:18:2c:f5:66:72:c5:03:09:81:40:43:
5e:dc:f2:52:16:83:0d:a5:d4:f1:10:29:be:23:79:
30:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E8:B6:A3:62:6E:56:9C:DD:A0:66:F9:C8:46:56:4E:35:C9:1E:1A
X509v3 Authority Key Identifier:
keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:95:ea:96:a1:78:20:ad:74:06:c6:36:f5:7e:97:4e:a1:75:
8d:7f:1d:eb:9b:9c:6b:61:14:4d:6c:71:09:c9:e9:ea:59:8c:
85:cd:66:bb:63:79:c3:14:b4:e2:42:58:66:a9:dc:82:23:07:
36:b6:4f:40:15:24:7c:fc:73:44:fe:b7:a7:d8:f6:d2:43:5d:
4b:41:8f:bf:35:b7:3c:b1:6f:fe:b7:ca:a8:f3:69:8d:31:67:
db:a6:8c:3b:5a:7a:f7:45:ee:64:9f:e1:b1:fe:e3:98:6d:87:
05:d2:3c:f0:b3:a9:45:79:0a:32:02:30:f2:c5:68:cc:e1:19:
a2:60:c3:03:91:69:d3:0a:f4:ba:11:5e:36:4d:96:46:eb:79:
82:2d:f5:0b:db:6e:52:8d:33:39:87:07:32:bb:db:7c:e9:24:
15:a1:2c:8f:bf:66:13:77:58:4b:1f:3b:95:02:5d:85:d3:5d:
bd:d4:a7:4e:d4:96:2d:d5:77:e1:be:54:16:16:00:f0:53:9d:
6a:e3:00:35:b5:d2:bc:94:54:fb:75:cc:8b:4d:a3:38:8f:63:
c6:17:6b:17:ad:5e:bd:2f:af:cc:1d:51:fe:10:02:10:64:d8:
41:ab:e8:8f:61:09:fc:e2:e2:0f:99:20:4b:e3:77:03:0c:b9:
83:91:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:19:43 2025 by rpki-client