Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: A86ZylwOTEb5tdnQbHB1zw4ZF+8sgViuSHmaW8KZNgM=
Subject key identifier: A7:42:D0:41:39:F7:0B:26:70:F1:78:FC:53:2C:BD:A0:06:B4:DB:1B
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 01969B9953132EF8A64A2B53B8B3C8B76465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 0DD8
Signing time: Sun 04 May 2025 14:00:38 +0000
Manifest this update: Sun 04 May 2025 14:00:38 +0000
Manifest next update: Mon 05 May 2025 14:00:38 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: peFox/AYYB/QVYXoVr8a7/loyI02OJX+4Q8DvfnOR40=)
2: aVM2JRPGoP421g9oSUNGjf9qD-0.roa (hash: 42F126y1V8CdYKNFngkqVCoN/zI9pVlEuybIcm6uoWA=)
3: vIU4Yywm4_gH0qTtuVvYBbqi0Vk.roa (hash: 7tRCC811YWihlT+yYcIFOXhADjHxLL/OK1DaYCuI4jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 13:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9b:99:53:13:2e:f8:a6:4a:2b:53:b8:b3:c8:b7:64:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: May 4 14:00:38 2025 GMT
Not After : May 5 14:00:38 2025 GMT
Subject: CN=a742d04139f70b2670f178fc532cbda006b4db1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:4c:cd:d8:1f:52:f1:16:c8:12:23:7a:ab:
2e:50:a0:42:92:b1:47:bf:7c:da:4e:c1:32:2b:5e:
25:31:90:53:5e:ea:8d:47:70:8d:90:cd:c2:f4:a5:
51:90:f0:0e:56:0d:be:6c:96:fa:17:62:9d:87:ac:
cd:5e:0b:bd:42:be:30:f5:65:8d:ab:4e:3e:6f:8a:
27:81:87:e6:70:30:84:2e:f5:ed:5d:79:d5:8e:15:
52:cb:da:a3:29:b6:2f:94:2e:2f:48:f0:38:18:79:
d3:ba:94:39:a1:34:cb:8b:52:fa:2b:55:22:1f:6b:
09:cd:3f:d8:08:84:b6:79:02:c2:5b:47:d6:70:33:
f1:27:e8:00:38:40:68:88:e9:ea:e1:35:f7:42:5a:
fc:b8:9c:a7:66:3e:c4:8c:f0:ae:e3:34:86:2b:77:
02:50:d9:da:6d:1f:ae:4a:5d:1d:4d:f5:da:06:da:
47:3f:33:83:22:0d:3b:ea:6b:90:54:6d:47:ec:5b:
51:fe:a8:8f:ee:3e:c1:60:78:f3:97:f5:b6:99:37:
e7:a2:da:11:65:9c:88:1d:50:34:44:bb:fa:73:eb:
69:6e:b5:7a:6a:a3:b5:6f:a9:0d:92:80:39:ca:46:
96:ab:9e:74:3b:46:49:96:2c:56:78:57:d7:dc:72:
03:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:42:D0:41:39:F7:0B:26:70:F1:78:FC:53:2C:BD:A0:06:B4:DB:1B
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:12:6e:9c:59:79:b7:1d:c9:51:54:41:56:62:ff:bb:4d:ad:
29:0d:81:80:22:fa:a9:a7:9b:07:e6:d4:46:34:f7:19:1a:ba:
c5:5f:10:81:e9:cc:4b:08:6d:5d:e2:4f:9a:c2:1d:56:95:36:
a4:31:c2:15:11:ae:fd:e4:0d:38:ff:c4:a4:9f:49:4c:90:6c:
ba:b3:82:63:ef:2e:3d:2e:6d:27:62:0a:3a:63:7f:5d:df:80:
d2:27:72:1e:f2:6b:6e:c0:1c:63:f2:32:7f:20:ab:be:a1:34:
23:ce:e3:17:06:de:68:ea:2d:6e:cf:ac:6f:72:84:34:10:e0:
d7:e1:95:21:25:48:c1:64:4b:41:b2:94:3f:9b:0a:af:47:0d:
84:03:0e:5d:23:db:02:d4:67:fe:ec:39:1f:eb:32:b2:6d:fc:
4d:14:de:0e:a6:ca:89:5b:6c:01:7c:5b:d9:ab:6f:51:63:5f:
ab:2e:5f:7b:4a:cc:2e:5a:bc:d2:e9:64:97:80:99:d0:c3:5c:
61:c2:05:ff:f5:b4:96:b0:2e:ed:69:49:df:a5:e3:48:c6:7a:
42:3c:d6:3e:97:e9:43:d1:b3:50:24:fc:61:dd:6a:fe:9f:09:
00:7d:0a:25:91:d3:4b:4c:16:69:78:5c:45:25:ba:41:7f:db:
f2:a8:79:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 21:48:03 2025 by rpki-client