Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.mft
File: l2bGSG3nTBPUnMo_C-AiSjXM6mQ.mft (raw, json)
Hash identifier: akahVs60bHH6Nr6dx5/ACGbePrM3F1pxulZsRjqcmZ4=
Subject key identifier: 48:53:E5:56:85:41:4E:5C:E4:D3:92:A7:E5:C1:57:12:64:41:11:75
Authority key identifier: 97:66:C6:48:6D:E7:4C:13:D4:9C:CA:3F:0B:E0:22:4A:35:CC:EA:64
Certificate issuer: /CN=9766c6486de74c13d49cca3f0be0224a35ccea64
Certificate serial: 0196A0F68D504CDD00ED2298FBF3DDA58E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.mft
Manifest number: 0396
Signing time: Mon 05 May 2025 15:00:34 +0000
Manifest this update: Mon 05 May 2025 15:00:34 +0000
Manifest next update: Tue 06 May 2025 15:00:34 +0000
Files and hashes: 1: Y48MxWheGIg90vL6QjXuK2Ri1Zg.roa (hash: oWPAM3Pv3mMEn0xEixzHycyFbvmileK5Wt76ASUYkxs=)
2: l2bGSG3nTBPUnMo_C-AiSjXM6mQ.crl (hash: 15dsrWhmebC8cql3t1NbC8Jhe3jNRl/o5qDgog3BT5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:8d:50:4c:dd:00:ed:22:98:fb:f3:dd:a5:8e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9766c6486de74c13d49cca3f0be0224a35ccea64
Validity
Not Before: May 5 15:00:34 2025 GMT
Not After : May 6 15:00:34 2025 GMT
Subject: CN=4853e55685414e5ce4d392a7e5c1571264411175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:1c:09:ae:67:95:db:89:79:3b:11:70:e9:
9e:a5:e7:4e:5b:46:dd:f7:b0:49:16:b9:00:0f:fc:
90:77:1e:5f:d2:72:49:f2:aa:da:d5:fb:9f:15:fd:
70:5f:f4:f0:6c:63:1b:2e:40:7f:e7:c7:81:10:2d:
c0:2b:92:5e:52:87:dc:71:6f:3d:39:9b:b0:56:a9:
7e:a0:9f:cc:1c:79:fc:23:ad:16:30:2b:0a:b5:30:
0f:13:87:2c:ec:e9:d0:a6:25:f1:70:d2:20:9f:fd:
72:e5:0c:14:7b:16:c2:1a:b6:0a:c2:4b:ba:f7:a2:
67:09:a2:9a:ca:34:b6:6c:97:88:f2:df:a9:1b:26:
d3:44:83:da:1c:10:65:c3:93:fa:18:19:47:b5:61:
02:1e:b2:51:c4:cf:de:e7:4c:28:c7:9d:68:eb:41:
8a:f0:72:84:8e:9c:a8:78:79:55:06:8b:3c:d6:b2:
52:21:7d:b4:cf:6c:ae:cb:6a:6e:eb:33:76:b0:2a:
8b:d2:ff:b5:59:21:ad:5f:b7:93:19:18:fb:95:1f:
65:f4:c9:ef:74:bf:be:fb:91:92:24:20:4d:83:15:
af:f9:c8:a4:58:13:77:c9:98:15:8c:3b:a7:f3:b4:
06:16:50:07:08:f3:81:1d:85:4c:9f:d6:2c:08:86:
55:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:53:E5:56:85:41:4E:5C:E4:D3:92:A7:E5:C1:57:12:64:41:11:75
X509v3 Authority Key Identifier:
keyid:97:66:C6:48:6D:E7:4C:13:D4:9C:CA:3F:0B:E0:22:4A:35:CC:EA:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f4:19:ba:0f:59:cd:44:8c:c0:d8:20:78:7c:f9:39:4e:b5:
51:ce:84:49:3a:2a:2a:e5:6b:37:67:cc:b9:ef:70:ef:6e:fa:
e2:3a:19:85:11:2b:9a:10:67:42:3a:b1:d3:c8:96:77:cb:84:
cb:52:9b:58:c9:47:e5:34:56:d3:e4:a3:5c:f8:fb:b7:35:13:
eb:fd:b7:0d:78:5b:df:2f:a6:83:f2:c6:76:24:1b:6a:d6:c4:
08:37:33:d4:c3:c6:20:05:34:75:9d:13:9c:69:7a:76:a2:49:
ee:ad:e6:86:43:63:f4:c0:6a:55:2b:c1:13:3d:e7:9f:7a:da:
b4:57:fd:84:0f:1e:1c:c7:83:38:e1:5b:b3:b2:2b:42:57:22:
a0:66:5c:70:f5:0e:54:55:63:65:60:f6:c5:05:cc:50:7f:bf:
ba:99:67:5d:2b:27:cc:85:4d:31:5f:72:eb:b8:cb:26:f9:54:
66:29:cc:66:db:72:cd:72:9b:21:2a:fc:62:61:0a:cf:95:1d:
d0:e2:2f:78:b5:af:4d:b1:f2:b3:fc:2e:85:96:79:86:7a:96:
d1:4a:4f:4f:f9:56:de:59:48:48:a8:18:3b:95:69:85:f9:62:
17:87:1f:75:e5:e3:b4:70:0d:f7:11:a8:23:20:0e:99:1f:52:
00:a4:a9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:22:08 2025 by rpki-client