Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
File: lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft (raw, json)
Hash identifier: dRfRmpiefyP+Dovx9YtbhGMjtYgUSj45Dskf+vg9B2I=
Subject key identifier: 90:E1:32:54:B8:73:A1:30:C9:48:29:9D:48:A9:8F:D2:49:EC:85:C0
Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
Certificate issuer: /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Certificate serial: 0196D1AC20C56A29B6022FE8183DD83DBD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
Manifest number: 153D
Signing time: Thu 15 May 2025 02:00:40 +0000
Manifest this update: Thu 15 May 2025 02:00:40 +0000
Manifest next update: Fri 16 May 2025 02:00:40 +0000
Files and hashes: 1: GjUJtXzmRKM2Vtkil_fh95z7NdM.roa (hash: NJXWhpjg7woXcdhVu/ucxszei5ss2Dto0kjEgZT65S0=)
2: lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl (hash: RDfhSFZJmXkzAF+z1kU7bAOQzHhU/FSpMEeVnuQUmxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:ac:20:c5:6a:29:b6:02:2f:e8:18:3d:d8:3d:bd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Validity
Not Before: May 15 02:00:40 2025 GMT
Not After : May 16 02:00:40 2025 GMT
Subject: CN=90e13254b873a130c948299d48a98fd249ec85c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:da:98:a7:31:78:22:b0:e6:57:7a:6b:33:
fe:d5:57:26:ad:88:a3:ca:89:f7:10:55:26:7a:36:
ae:4c:b0:73:ca:7a:e5:64:13:05:6d:10:25:f9:f1:
07:42:3c:e5:40:fb:12:11:6a:f6:6c:88:c5:85:80:
52:80:a4:50:f2:ff:d5:18:32:6d:21:37:d4:58:0c:
d4:dc:ca:5c:96:79:ad:ec:6d:d4:19:26:db:ba:64:
b4:96:4e:e9:2e:d3:3f:27:f8:86:2a:16:84:b4:bc:
b9:01:d7:a6:43:f9:59:7e:83:2d:17:4b:37:f5:52:
43:68:85:18:73:22:3d:4b:10:4f:6c:d1:13:d4:22:
00:f7:19:62:c4:2b:c3:75:b6:d2:00:62:5a:c3:5e:
b7:93:93:69:00:51:04:e7:16:83:ef:59:58:fb:38:
3d:33:4d:7e:55:3b:36:93:ea:27:99:81:b0:fc:90:
30:75:43:f8:20:6d:68:61:22:04:81:23:57:62:d2:
30:fc:c0:52:32:09:72:8f:d2:e1:30:12:68:00:38:
46:d1:55:11:06:a6:5e:b7:32:3e:b7:c2:16:f5:08:
fd:e3:a0:13:f8:02:1f:e3:dc:ff:93:39:ff:e0:23:
b8:ed:a0:16:47:70:45:9e:2c:19:39:ef:6e:41:a4:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E1:32:54:B8:73:A1:30:C9:48:29:9D:48:A9:8F:D2:49:EC:85:C0
X509v3 Authority Key Identifier:
keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:07:bd:1c:86:1b:5c:86:49:b7:60:b9:dd:78:90:d2:3d:45:
81:a9:1b:5a:b4:ac:da:10:30:f3:6a:08:0f:24:2e:fd:a4:8a:
28:3a:a3:df:c2:b9:6b:27:d2:58:9a:9f:74:7d:8d:63:4f:d0:
07:9a:55:a8:9e:8b:9d:b8:a6:3a:91:3e:d6:04:8b:eb:15:01:
74:43:6d:c5:e3:84:7c:5c:e1:2c:35:b2:28:95:62:55:31:af:
39:d6:f0:b8:6b:8e:df:8c:2f:67:7a:e5:42:97:7c:6f:d7:81:
5a:42:6f:39:5d:67:7e:db:ed:94:78:f4:22:a6:f6:cd:0c:49:
82:a8:0e:a1:48:ff:32:6b:11:b8:35:e1:c1:94:1d:fd:2b:fb:
d9:15:35:88:6a:b3:ac:e6:91:76:55:71:96:a5:3e:72:14:33:
ae:e4:c4:46:80:a3:87:eb:af:6a:0b:25:65:1c:a8:db:24:c6:
63:b3:11:78:4e:88:35:66:27:1b:5d:c2:97:24:4e:b0:8c:3a:
35:0d:e0:be:ed:87:41:95:05:82:32:bc:66:c9:bf:5f:4f:77:
cb:dd:14:d0:dc:28:87:7b:5d:c5:b6:f4:65:ec:42:27:32:c8:
f1:19:da:27:2e:06:52:55:e8:80:b8:e9:b7:0d:e2:c8:93:29:
38:cc:71:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:53:45 2025 by rpki-client