Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
File: lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json)
Hash identifier: fUgBoyvbK8FdVEnuXJi5x0VB5Oaw9wUGSvf9qAg82Rc=
Subject key identifier: AC:AC:12:6D:AB:2D:8D:41:78:D4:0C:27:05:FF:81:89:CA:DB:96:F8
Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
Certificate issuer: /CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Certificate serial: 0196B823437010E588E5A8119D3389B7C7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
Manifest number: E9
Signing time: Sat 10 May 2025 03:00:40 +0000
Manifest this update: Sat 10 May 2025 03:00:40 +0000
Manifest next update: Sun 11 May 2025 03:00:40 +0000
Files and hashes: 1: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: IXmRM4AT6TFf3eiIX8wC9cF6IzMu/V3nrNMHFzs4iF8=)
2: t16PzAlvWekYsP-M8rbE-GQqrKw.roa (hash: 3vnPnuhk/OI+4T9XrhuO16OQVY7hpcxK0i/qFVmYQP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:43:70:10:e5:88:e5:a8:11:9d:33:89:b7:c7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Validity
Not Before: May 10 03:00:40 2025 GMT
Not After : May 11 03:00:40 2025 GMT
Subject: CN=acac126dab2d8d4178d40c2705ff8189cadb96f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9c:35:07:07:c1:d8:da:bd:4f:a3:0d:4f:1e:
ab:d9:cc:21:01:c4:54:bc:25:81:83:d5:c4:a2:aa:
99:e9:83:f9:54:e9:5f:4c:35:90:15:ed:ca:99:9d:
f2:cd:e4:01:c3:59:50:e4:d5:1f:93:2c:72:8b:a9:
e5:b0:1f:73:54:1a:03:0b:5b:9e:0b:f5:31:48:83:
20:55:b9:f9:85:3b:ae:90:31:7f:f4:c1:30:86:6c:
af:df:d4:09:88:98:3d:4e:a4:5a:11:be:a7:40:e3:
83:3b:f6:fa:2e:6d:7d:3b:1c:31:58:d6:06:d7:d8:
30:f4:e6:83:69:27:9b:8f:c8:28:49:74:50:54:00:
d3:f6:47:b8:7d:28:c1:55:eb:ea:7d:21:f6:e6:07:
83:8d:e8:ac:77:dc:b3:18:16:42:c0:71:0b:00:c0:
9a:6c:45:b3:27:fb:f1:db:a1:c0:d1:56:c2:4f:ad:
8c:7b:ef:df:e4:08:b9:ea:65:2d:01:b1:b9:12:b1:
2d:32:1e:2a:86:e8:b6:19:92:85:49:d8:23:98:54:
d8:21:17:42:e5:d2:11:e6:a1:2d:fa:1c:c9:da:2e:
ea:f6:97:85:b5:32:be:d8:e3:20:3d:73:c2:ef:b6:
83:32:ba:80:2a:30:18:62:00:2b:f2:23:fb:a3:9c:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AC:12:6D:AB:2D:8D:41:78:D4:0C:27:05:FF:81:89:CA:DB:96:F8
X509v3 Authority Key Identifier:
keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:84:61:e6:28:e5:78:9f:fa:11:05:64:b6:a4:a9:f3:ea:2b:
5b:5e:49:53:be:84:5e:b3:db:5f:cf:c4:84:e4:c9:9a:6c:ce:
56:cb:06:a7:be:10:ae:eb:50:e3:75:ce:85:1d:f3:ee:ef:f1:
93:6b:2f:ec:3e:94:fc:ba:23:d2:be:c7:7a:c3:d4:83:41:0f:
73:5e:8c:9e:bc:74:0f:6f:2e:ef:14:cb:61:96:9e:66:a3:d3:
a1:6c:d3:50:15:6a:b1:f1:df:b7:53:b2:44:fd:3d:21:86:b3:
ed:c7:a9:fd:3a:e6:33:9c:97:48:b9:64:03:f3:a1:b6:8a:27:
78:f0:c4:e9:ac:c5:af:9f:6d:e5:0c:67:0c:e1:32:8b:2d:c0:
ee:89:3f:a8:a6:e1:0f:47:c1:50:9e:65:8c:0f:f0:5e:71:34:
c3:95:8d:ee:fd:46:dc:6b:4d:96:1e:b8:2d:0b:76:37:27:ec:
8e:f1:05:9b:ab:1b:82:18:d4:3c:25:05:cc:67:cd:3e:ac:01:
f9:13:88:02:7e:8f:ab:af:c0:e1:da:d9:32:bf:76:2c:f3:57:
39:01:5d:19:73:cd:8c:8e:68:8a:24:43:24:72:4d:7e:6d:f7:
2d:2a:00:29:7a:fe:cd:1b:47:b5:b3:bd:b5:31:40:b0:a5:25:
e1:05:d6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:58:08 2025 by rpki-client