Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: P5BYJ0S1LvL/jQTySgWeuxkEAVqqGs1VFAApJ0yT+kM=
Subject key identifier: FA:28:FC:0E:E8:6B:83:E5:CC:50:C3:6E:3A:B9:1A:48:5D:D9:5A:A9
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 0196AE7AE77A5EAEAD359CC3B4865506A025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 12CF
Signing time: Thu 08 May 2025 06:00:12 +0000
Manifest this update: Thu 08 May 2025 06:00:12 +0000
Manifest next update: Fri 09 May 2025 06:00:12 +0000
Files and hashes: 1: 1zPmCa_n4npQByWV57mbbNaogt8.roa (hash: dFtgg8FcI20vmgo3zE4v/V+3CGTP1fI2Dy6va/nig+E=)
2: Mc3-W1zeku0X5cBFpf2q2Rn4I84.roa (hash: sbJ542HmG4Uuavy4d7gZervrEM5rcRvFP/8t5YUQ2Tw=)
3: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: bWyw9s9y1KXSohNDotlT4utH29ZgmEZXB+sxnc3488A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7a:e7:7a:5e:ae:ad:35:9c:c3:b4:86:55:06:a0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: May 8 06:00:12 2025 GMT
Not After : May 9 06:00:12 2025 GMT
Subject: CN=fa28fc0ee86b83e5cc50c36e3ab91a485dd95aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:91:d0:cb:a4:66:f2:df:a7:fc:d0:87:78:
15:a6:69:cf:00:81:ec:61:7b:93:17:1f:cf:ac:6c:
e6:0f:44:fe:5a:a3:34:51:45:7f:67:c9:e1:0b:8c:
c9:dc:d4:2d:89:e4:99:6f:cb:e0:05:86:6d:64:b0:
2c:f5:41:ed:21:00:37:3c:a8:60:55:1b:4c:e9:02:
58:35:7f:11:3a:8a:a5:45:09:75:87:27:30:83:a7:
b2:64:9f:a2:18:52:ab:7b:fd:d7:0b:0e:ff:56:80:
74:c5:19:48:39:05:42:03:39:a4:e1:3f:4e:fa:0b:
18:f7:96:a6:bb:0e:40:a0:6b:62:0c:a1:fe:04:b6:
6c:71:09:46:b1:62:00:a5:85:85:5f:61:27:20:3a:
93:65:81:5e:a9:cc:dd:86:a6:5f:c0:ca:a9:09:8e:
07:28:32:0d:20:a9:a2:a2:3b:c2:4a:84:0a:24:33:
fc:2d:39:05:92:c0:4b:a0:0a:8c:f4:3d:f6:3d:03:
bd:d3:e1:0a:62:1c:2b:16:ed:12:e0:8b:8c:74:3a:
1d:57:46:0a:de:19:d8:f6:95:ce:bb:83:51:48:46:
03:47:83:22:d9:99:a8:d3:cc:4f:af:94:e4:6f:c9:
a1:c0:75:dd:f3:cd:86:71:45:f3:6f:33:0e:3d:9b:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:28:FC:0E:E8:6B:83:E5:CC:50:C3:6E:3A:B9:1A:48:5D:D9:5A:A9
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9a:b3:a4:9b:53:c5:5f:d3:4e:7e:33:1e:23:ae:60:92:d7:
53:81:00:b1:52:3e:d4:6a:43:83:65:a8:fd:ab:41:49:47:f0:
f7:44:ea:77:e1:87:a3:10:3a:01:12:46:85:ee:6e:9f:5b:4f:
a0:50:61:84:96:a0:47:a8:f6:2c:57:39:96:d0:b0:bc:54:c8:
4d:9e:40:ae:6d:c6:8e:be:ed:8c:c7:9f:63:38:15:01:8b:ce:
23:45:c9:db:41:d9:1b:7d:d3:92:72:e0:7e:7b:a5:a8:eb:17:
07:3d:aa:6c:fd:28:1e:56:c4:56:73:15:a5:bf:40:6a:63:42:
e6:af:d8:1f:03:52:2f:32:70:20:ce:6b:5a:7f:ea:32:a5:23:
95:6c:1a:ac:94:a5:cc:fd:93:ba:e0:c9:37:5e:d6:63:d1:dc:
64:a2:39:83:8d:df:71:cb:19:0a:a7:12:ef:86:92:b5:9f:fa:
6c:e8:a1:c2:3d:28:9c:65:c2:30:12:d1:e3:f4:c6:d1:5a:3e:
96:71:bb:de:9a:07:da:35:49:6f:ce:76:c9:bb:86:be:42:99:
a1:ea:a2:8b:e1:87:35:33:02:52:2e:b8:01:1b:43:c7:19:30:
7b:ae:de:cf:2d:13:ec:83:a7:e3:cc:0b:ee:cb:c9:16:dc:96:
98:6c:2e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:16:16 2025 by rpki-client