Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
File: l8dX8vOyKQu8KNZfm98AFvYfE5c.mft (raw, json)
Hash identifier: 0vHpM9RE6eMm8KZpX+7taP4EeGQNKBfIznKPTIQ7xio=
Subject key identifier: B5:5A:B3:73:1D:4E:6F:F9:7F:47:6E:89:DE:EF:06:D9:7C:26:AF:2F
Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Certificate issuer: /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Certificate serial: 0196AA30ACECB0387D7FC160273FEF7B11B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
Manifest number: 14D2
Signing time: Wed 07 May 2025 10:00:38 +0000
Manifest this update: Wed 07 May 2025 10:00:38 +0000
Manifest next update: Thu 08 May 2025 10:00:38 +0000
Files and hashes: 1: jrvc6kmWjKHmuF_8SsZy0ZuPTP8.roa (hash: Z+xoWww5SsoPK3NcXFL/FecEhSX4cgiZ8Poe3txV32s=)
2: l8dX8vOyKQu8KNZfm98AFvYfE5c.crl (hash: KMwxus0f5T/yJiPFkqUcj3rLFpO1xm5zfWw+ZZemAGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:ac:ec:b0:38:7d:7f:c1:60:27:3f:ef:7b:11:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Validity
Not Before: May 7 10:00:38 2025 GMT
Not After : May 8 10:00:38 2025 GMT
Subject: CN=b55ab3731d4e6ff97f476e89deef06d97c26af2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:27:ef:2c:4a:c6:72:bc:7a:60:53:08:16:08:
cc:fd:c7:b6:c9:6b:bf:0e:6a:14:3b:5d:03:70:b1:
93:02:b8:af:bd:69:b5:91:5d:c0:fa:db:06:36:9f:
af:8c:fc:4f:ed:f3:29:9d:d8:19:86:01:08:ba:ce:
09:ce:e0:a4:1d:fc:99:bf:76:e4:a8:7b:0a:cc:5a:
33:cd:c2:79:fd:ac:f6:d0:90:4d:e7:6b:ae:c1:62:
38:81:7f:ab:e5:96:f2:ee:a9:03:3e:58:c8:57:e1:
11:ca:bd:be:c5:3c:91:91:4e:65:b0:18:39:40:31:
54:61:4e:9e:f5:d5:f9:ba:70:0a:86:5b:44:30:ea:
6b:81:1c:c9:6e:72:e5:c7:12:dc:e1:b1:d3:5c:af:
01:b8:86:ae:7c:87:2d:fd:ff:9e:42:34:b9:e7:d9:
cf:dc:c1:c4:b7:f0:69:de:79:19:0b:7b:37:c7:04:
19:c3:eb:65:80:66:6d:d5:ce:c6:74:ba:8c:6a:12:
a6:e5:fc:5f:7a:4a:a5:e5:58:50:65:1b:de:58:b3:
99:03:24:b5:7f:a0:a4:30:9b:cc:49:74:31:f4:11:
07:95:e8:a6:c7:81:46:55:31:84:ef:f8:5f:eb:e5:
78:af:a0:65:ab:2d:1c:61:69:44:84:40:ce:c6:1e:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5A:B3:73:1D:4E:6F:F9:7F:47:6E:89:DE:EF:06:D9:7C:26:AF:2F
X509v3 Authority Key Identifier:
keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b5:d1:9f:4b:0e:5a:64:60:a9:60:b8:87:e8:4d:7c:09:f9:
2a:85:35:33:e2:06:a9:dc:04:3b:f7:e2:2e:1a:72:61:b2:cb:
b5:d4:81:3b:35:e4:3c:00:11:00:40:a8:3a:ad:89:f3:cb:f9:
2a:fc:7b:05:be:71:7f:6e:c3:38:d7:e5:0c:73:98:2a:fa:01:
55:0e:f7:f2:e7:5f:64:95:63:0f:55:05:6b:81:2c:cb:90:6e:
e9:52:25:0b:c7:e3:e5:18:04:0d:d8:d6:10:46:4a:28:18:c7:
30:8b:1f:35:bd:a6:65:a3:d4:31:0c:b7:0c:32:5c:4d:fe:56:
0d:f8:92:53:86:8d:d1:5f:51:8d:f8:1e:1b:4c:f9:71:f7:0e:
0e:30:19:9f:8c:6d:f8:51:17:3e:c5:d5:c0:f5:69:d1:b6:48:
bd:56:31:11:7f:cf:f3:a6:a0:44:46:7e:77:ff:0a:e8:fa:b4:
97:e0:57:50:1c:12:82:ec:c9:d2:c6:ee:93:13:8f:64:2c:92:
c8:0d:4f:70:f5:92:26:7f:28:c7:0d:75:f9:f5:57:f3:57:09:
75:cf:19:ca:1c:47:8b:a7:ac:6f:a7:f1:7a:11:ad:f1:03:88:
09:0d:b6:91:d7:52:f1:e2:d0:2a:42:54:8f:84:a1:ca:43:59:
8b:41:44:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:56:15 2025 by rpki-client