Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
File: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft (raw, json)
Hash identifier: XfAaMp23chbEMu0kO+KLDBnDO10KQ9ZndZfV4IH/+no=
Subject key identifier: 3E:57:3B:9E:4C:EE:D5:24:2E:B4:AC:57:E9:C0:23:EE:2C:85:8C:FD
Authority key identifier: D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
Certificate issuer: /CN=d0baab9bd8c69d07b6501147543df74270a33a21
Certificate serial: 0196CD2A6D08DA446D38FC5BCB4829488DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
Manifest number: 153D
Signing time: Wed 14 May 2025 05:00:31 +0000
Manifest this update: Wed 14 May 2025 05:00:31 +0000
Manifest next update: Thu 15 May 2025 05:00:31 +0000
Files and hashes: 1: 0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl (hash: C95Huv/ElCGP3ND4z3IXEqGjrWVaKWBbC+46la53USI=)
2: juIbMy-ZOag5FvgvGV0o5yTeEN8.roa (hash: +hUGE34YMtW1+houvKxGq1sllVhVFyMUSU1KkXLa0fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:2a:6d:08:da:44:6d:38:fc:5b:cb:48:29:48:8d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0baab9bd8c69d07b6501147543df74270a33a21
Validity
Not Before: May 14 05:00:31 2025 GMT
Not After : May 15 05:00:31 2025 GMT
Subject: CN=3e573b9e4ceed5242eb4ac57e9c023ee2c858cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:87:38:e2:8a:4a:43:e2:80:37:4b:9d:6d:34:
ea:b9:2f:f1:1a:bf:2f:cc:df:5d:a6:90:d3:40:81:
4a:15:a1:e0:27:d0:61:91:7d:9b:dd:0e:6b:b0:e1:
61:a0:d5:2c:a0:c7:9d:45:62:5c:10:0c:c2:a5:b2:
b3:8b:a9:99:10:d5:d4:26:b8:de:0c:3f:03:66:b2:
0a:51:06:59:48:e5:cf:4a:21:99:05:cc:93:5f:aa:
a2:3f:60:e9:c0:4a:11:ec:c5:ed:40:dd:5e:b7:40:
c9:31:b6:28:3d:8f:31:70:27:71:11:dc:06:6c:d8:
30:0c:06:20:65:79:f6:d5:74:1d:2f:ae:99:c7:7c:
01:49:78:aa:b3:d2:e4:40:9d:ff:2b:8f:3e:8f:5d:
f4:a0:30:33:fe:01:eb:69:e4:f0:7e:f4:fb:03:d6:
47:21:98:2c:67:4f:76:95:76:81:cc:04:2a:1a:17:
8f:31:70:fe:ca:70:df:1e:1e:0e:13:8a:09:44:51:
69:4f:9b:3c:27:4f:d4:b8:c2:a2:1a:08:7e:a2:6d:
6e:5a:17:8e:fa:62:f3:4a:e1:25:7e:23:75:ba:ea:
c3:a2:45:5a:8c:19:a9:3c:1f:ca:34:48:87:85:ec:
19:9c:5b:ac:77:53:aa:44:76:03:39:89:ea:75:01:
ea:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:57:3B:9E:4C:EE:D5:24:2E:B4:AC:57:E9:C0:23:EE:2C:85:8C:FD
X509v3 Authority Key Identifier:
keyid:D0:BA:AB:9B:D8:C6:9D:07:B6:50:11:47:54:3D:F7:42:70:A3:3A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lqrm9jGnQe2UBFHVD33QnCjOiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9199eb-e8eb-404d-8955-9bd5d5138059/1/0Lqrm9jGnQe2UBFHVD33QnCjOiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:45:17:21:10:9c:89:d3:dd:0e:e7:69:78:ad:ad:bd:d8:f3:
66:03:8d:5f:76:99:4d:ba:5f:a7:5a:0a:ce:21:c8:a6:c2:a8:
f9:65:cb:55:5f:b0:03:65:e0:64:4f:1c:dd:08:3b:f3:82:65:
bf:72:41:7d:ea:6e:37:c5:51:f3:fe:77:64:91:d9:bc:9f:d8:
48:d1:5e:5a:6f:b7:ee:94:93:a0:b7:46:d8:fc:3e:b4:59:38:
77:75:bb:36:4e:03:72:f0:72:af:ab:21:ec:e1:cf:d7:e6:a3:
fb:7a:7e:aa:13:02:24:3e:25:aa:58:36:9e:09:aa:44:b0:6e:
2c:7d:5c:e2:3a:98:01:7f:aa:bb:62:77:1d:c5:f0:42:23:35:
7e:d4:7f:df:42:29:cc:4d:a4:93:f9:31:7b:ab:f2:74:29:3f:
6f:ef:4e:f5:e1:7a:48:03:ca:5e:b5:cd:0d:29:7d:1e:bf:46:
90:de:5d:c7:a1:15:ba:97:3e:ac:cc:e0:24:f8:6b:23:03:e8:
ba:5c:2f:f9:6d:86:b7:5a:f8:e9:26:e7:10:90:0f:65:3e:06:
41:75:8d:73:7c:07:c2:8f:8c:0b:cd:3b:9c:34:0c:6f:e0:4b:
b8:b3:8a:5f:8b:02:db:68:27:44:c6:76:76:61:78:c1:eb:60:
8e:bb:a2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:26:13 2025 by rpki-client