Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json)
Hash identifier: kRl48P1LsjVBZwYuud4pBSGd4d5WvhjOt3xwr0qH04w=
Subject key identifier: 57:CF:10:CA:72:EF:1A:81:24:D2:AD:1E:C6:56:F3:7F:AB:0D:47:2E
Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Certificate serial: 0196C3B9E35F03E0999D3458EFD8E58E36CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
Manifest number: 14C7
Signing time: Mon 12 May 2025 09:01:01 +0000
Manifest this update: Mon 12 May 2025 09:01:01 +0000
Manifest next update: Tue 13 May 2025 09:01:01 +0000
Files and hashes: 1: Kvab69Fm55apwC6CNn_puTpqnco.roa (hash: SXQsTZgWdcQi8ndza2+PpabIjMyNvdIkKjFoA2OkVbo=)
2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: s8aMsu0TldegirfEQokIamMNaabt1N+REyRM0ccb5wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:e3:5f:03:e0:99:9d:34:58:ef:d8:e5:8e:36:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c
Validity
Not Before: May 12 09:01:01 2025 GMT
Not After : May 13 09:01:01 2025 GMT
Subject: CN=57cf10ca72ef1a8124d2ad1ec656f37fab0d472e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d8:c3:9b:76:ae:a3:5d:29:4c:47:9b:55:22:
d3:57:36:b6:35:fe:5c:9d:6e:b4:2e:f0:a9:cd:a4:
60:69:a7:db:56:c8:9f:9e:cd:07:64:a3:c0:b3:c3:
dc:63:84:4b:47:bf:d9:58:a1:8c:c5:21:bc:e9:8a:
e3:00:f1:4a:be:9f:84:93:21:33:88:28:2d:1e:bb:
ca:c9:0e:f3:df:ce:7a:e7:be:2d:8e:bb:72:3c:6c:
60:97:97:bd:87:b9:9a:90:f9:a7:6c:d2:9a:79:00:
1a:ff:58:43:8e:1d:fa:3f:d6:77:a6:e3:a8:48:32:
6f:1d:db:b8:c5:29:ed:9e:d8:59:97:f9:53:25:8f:
10:4e:99:f4:31:21:e6:40:d6:8d:5f:79:cc:ad:a2:
dc:a6:b7:cf:8f:14:24:86:ff:a9:f7:dc:91:e2:6a:
e8:f1:1a:73:86:25:1f:32:c9:1b:a5:cc:8e:84:08:
4f:c6:60:e0:eb:98:b3:4f:4f:db:79:ee:96:e8:0c:
82:f0:56:fb:24:64:b7:db:1e:68:b8:e4:ec:5d:f1:
64:fe:ee:76:96:e0:f2:11:d9:bc:ea:7e:36:f7:37:
7a:aa:ae:9c:84:9f:77:30:9b:8e:19:a0:62:09:8c:
90:3f:f1:13:90:c2:66:80:ac:3c:ef:6e:be:84:f6:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CF:10:CA:72:EF:1A:81:24:D2:AD:1E:C6:56:F3:7F:AB:0D:47:2E
X509v3 Authority Key Identifier:
keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:cf:9e:18:c7:8f:7e:ba:40:9a:de:92:c2:7f:f9:65:d7:b4:
08:bd:05:a2:f5:6a:9f:d3:3d:dd:57:27:d9:e2:bb:be:41:5f:
03:da:fd:c4:e5:a1:d8:78:ca:1b:18:c2:02:35:16:11:cf:51:
b3:54:ac:ec:e8:e7:b8:a4:a0:cc:72:17:19:3c:24:0f:51:1c:
97:34:71:67:12:fe:0e:75:ba:e1:0e:c1:2f:83:a2:4c:0a:b3:
90:1d:4d:16:8b:54:6c:e2:e2:a0:a3:75:79:4f:5a:80:6f:d3:
a8:c5:c4:43:06:89:50:17:e0:8b:8d:2a:89:ff:ca:1e:e0:3f:
c2:2f:02:21:96:98:f7:b8:5b:e1:c6:85:84:02:f9:c0:66:ee:
f6:c6:93:5c:b6:30:4e:22:e8:f1:5d:6c:2c:35:95:f9:de:d3:
0c:23:2e:c2:a1:a8:92:01:0f:a8:eb:52:1d:ee:45:2f:d9:6d:
f8:b3:21:9b:61:20:de:aa:60:4e:67:a0:6a:55:2e:bc:00:ba:
54:25:82:b4:6d:0d:6e:ca:14:89:70:0b:98:f9:e5:d7:39:8f:
ff:d7:47:50:df:5f:fe:49:bf:8c:bd:61:79:d1:1f:5a:a5:3a:
ad:6a:59:df:54:b5:a2:ea:06:ae:df:b7:b2:5f:28:2a:0b:90:
3f:87:28:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:10:04 2025 by rpki-client