Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
File: lWhmVi2fJYMewKzoqdjNDllNcfw.mft (raw, json)
Hash identifier: faQ61g4ScEndprA6+zsXBgmucFwxPeotaZgaZw8DfZ0=
Subject key identifier: 71:C9:7F:2A:35:8D:02:8E:A7:08:E6:C0:41:04:1B:E4:F4:0C:2C:3B
Authority key identifier: 95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
Certificate issuer: /CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Certificate serial: 0196B85A07C92A0A2E12E3070F3E0173CB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 04:00:29 +0000
Manifest this update: Sat 10 May 2025 04:00:29 +0000
Manifest next update: Sun 11 May 2025 04:00:29 +0000
Files and hashes: 1: 5A1rFRWiaoMZrd1W-j1DOiNHcxg.roa (hash: V+WxsJZcqfyEzzmw0OXvgqJRZOf8o70VUJRyRrh0lh8=)
2: dwjCitSclr7fGwprU9bQVIbfmCg.roa (hash: p2lC46dhETK6ft6AVZYruiB24S2hxZ7wuf8RUwFJV9o=)
3: lWhmVi2fJYMewKzoqdjNDllNcfw.crl (hash: Rbn/4/2yLDSIbA6gT/ZU6KR7JrNis25y86Y431U8Vnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:07:c9:2a:0a:2e:12:e3:07:0f:3e:01:73:cb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956866562d9f25831ec0ace8a9d8cd0e594d71fc
Validity
Not Before: May 10 04:00:29 2025 GMT
Not After : May 11 04:00:29 2025 GMT
Subject: CN=71c97f2a358d028ea708e6c041041be4f40c2c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:85:5d:e5:84:52:3c:41:0d:6b:43:21:0d:
13:11:24:49:9b:de:8d:64:61:20:d6:86:59:5b:74:
fa:7f:da:24:86:f6:bd:e7:90:33:47:23:e3:11:2b:
72:d5:59:0a:7d:48:4d:ec:67:d5:77:e8:cd:5c:79:
25:44:99:f2:34:d2:cf:cd:ab:6c:47:dd:0c:74:74:
1b:e7:4c:03:97:93:5c:44:c8:00:70:e0:3d:a5:10:
be:cc:0d:1f:51:8b:f4:66:e2:18:da:8c:55:3c:a8:
77:db:c0:1d:21:73:d1:43:1a:b8:b4:ee:92:60:1a:
26:92:be:0e:e6:c6:4a:dd:57:b7:ef:7d:3d:12:19:
ac:2e:26:a0:62:fc:3d:f5:59:34:c0:e3:f9:8e:91:
f7:39:b8:06:3f:73:66:a0:7e:5b:d2:f7:2d:d9:d8:
16:4f:5e:2c:9f:26:e2:34:57:32:2f:a0:0e:ea:35:
b1:b0:66:b4:2f:74:67:79:32:87:eb:46:df:cb:d7:
04:4c:33:c3:4d:fb:e3:17:97:50:e4:3a:bc:82:80:
3f:35:bd:bd:20:49:3e:21:63:42:f5:78:6f:ae:a0:
5f:43:ab:af:70:bc:c1:ee:bb:18:f2:64:05:49:c9:
49:f4:d6:3e:45:37:cd:62:ca:c4:00:06:3b:a2:bd:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C9:7F:2A:35:8D:02:8E:A7:08:E6:C0:41:04:1B:E4:F4:0C:2C:3B
X509v3 Authority Key Identifier:
keyid:95:68:66:56:2D:9F:25:83:1E:C0:AC:E8:A9:D8:CD:0E:59:4D:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWhmVi2fJYMewKzoqdjNDllNcfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cb2ee8-8782-4af4-8f6b-9d7f86f0d477/1/lWhmVi2fJYMewKzoqdjNDllNcfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4e:db:a5:b9:e6:be:3f:62:e2:3c:ad:e1:c1:8d:7c:8d:09:
9d:e5:d9:4d:c0:d4:5a:ef:47:5b:7f:82:d5:ea:32:32:1e:b9:
88:9b:f1:64:d4:4f:0f:fb:54:59:97:63:fc:55:3c:9b:92:18:
74:2d:4a:79:0f:1f:96:2a:78:c9:31:53:97:a3:a7:c2:b5:8a:
49:80:7d:1f:6e:2b:c4:98:d1:6c:e1:cb:75:b1:e2:d4:f4:fb:
a6:ad:39:56:ba:28:b4:16:03:e6:3c:b2:9e:eb:73:99:ea:20:
80:99:23:72:45:38:bf:79:40:46:da:d9:2f:2b:bf:a8:18:b4:
8d:04:72:b0:53:b8:63:bd:b0:4e:aa:1c:39:69:56:1c:2c:c1:
20:f3:e1:33:a3:a7:d3:84:55:54:af:13:6e:d5:4c:78:49:d4:
ab:6f:b4:5d:17:d2:a2:97:82:36:b8:82:56:f6:76:f7:36:20:
92:e6:fe:e0:15:2b:4b:ae:6c:89:e2:c8:13:a3:e8:ed:dd:d9:
de:fb:32:64:3a:e9:6f:03:3a:32:8d:f3:5f:45:37:43:6a:92:
4e:fa:3b:1d:0f:b5:06:f6:e0:ff:8c:12:da:c8:ee:f2:e5:99:
5c:da:c0:85:a9:17:0a:ed:8e:1a:5a:25:85:73:e7:1c:92:36:
95:57:bb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:49:00 2025 by rpki-client