Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: 07MWXmL6RYhZeMaWne1tDIUwqTpGB/Q8IyakN1eI+dw=
Subject key identifier: 8F:6E:95:2A:90:E6:2C:AB:EB:E0:71:BB:E5:48:08:12:D4:FA:6B:BA
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 0196BC6DB3B2E528A14F14419207E15D70BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 1413
Signing time: Sat 10 May 2025 23:00:28 +0000
Manifest this update: Sat 10 May 2025 23:00:28 +0000
Manifest next update: Sun 11 May 2025 23:00:28 +0000
Files and hashes: 1: WNnJojurMk10LbGrLgZt0ifKwss.roa (hash: srIz81tLyVgircW7ks18A2CAzPVgxZ0XnEJTrVmvVb8=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: w9xsgzLtlNhTx1lghbEWH4Vha1xJ9rtDjrhuFhn5kJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:b3:b2:e5:28:a1:4f:14:41:92:07:e1:5d:70:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: May 10 23:00:28 2025 GMT
Not After : May 11 23:00:28 2025 GMT
Subject: CN=8f6e952a90e62cabebe071bbe5480812d4fa6bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:77:3e:c7:f5:05:1b:88:fe:c1:85:1d:36:bf:
42:f2:50:27:36:4e:b0:d5:85:db:fe:29:94:52:0b:
29:c4:5d:07:45:b3:1b:41:79:4f:05:6f:cb:9e:d4:
8b:70:b5:f5:78:60:bc:07:10:49:76:70:09:30:2a:
95:cd:0b:78:e9:d1:07:1e:01:cc:78:70:fc:bf:d4:
78:e3:4a:a2:32:dc:4f:10:7d:7d:fa:d5:f1:0f:e9:
98:47:52:71:11:1c:4e:24:9e:f1:62:b7:ad:39:0d:
19:d6:e4:8a:d2:7d:b3:80:ae:80:e4:d7:a9:4f:24:
cc:8e:5f:0f:46:50:7c:f6:0a:42:3e:6d:8d:27:f3:
b4:25:09:be:b6:2d:dd:3b:cc:b8:9a:51:2e:f4:3c:
06:44:81:67:61:be:67:9d:3e:43:bf:b5:b2:fc:cf:
8d:51:90:75:83:0c:5a:50:2c:9a:45:65:3f:b8:0a:
25:c2:04:81:3a:36:8b:d4:6a:a1:6a:b0:4a:ba:76:
c1:cc:f9:25:75:e5:91:dc:99:da:76:ce:6d:35:59:
ab:79:c7:58:b1:cf:a0:78:14:54:a8:d6:cd:f0:51:
56:7b:28:e2:51:64:49:a9:1f:4f:7e:b6:4d:da:00:
93:ab:42:dc:ed:d8:13:1c:81:a7:72:d0:9c:8b:41:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6E:95:2A:90:E6:2C:AB:EB:E0:71:BB:E5:48:08:12:D4:FA:6B:BA
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f9:38:9c:fa:b3:28:cd:69:b9:51:a2:e1:ca:60:99:0f:ad:
f0:c2:82:00:22:2c:75:6a:ce:31:26:5f:28:9c:98:34:9d:61:
41:c7:b8:1b:06:fd:0f:5a:8b:1c:4d:ee:42:8e:85:43:46:28:
4b:8e:c3:30:67:5a:4a:5a:ce:28:20:c4:85:6d:f6:90:55:e1:
e8:94:3f:c4:6c:67:f9:80:6a:96:05:5e:c2:36:06:0f:b7:5d:
1a:92:08:75:bd:6b:30:54:88:53:33:f8:6c:aa:8a:de:a5:58:
34:dc:2e:6b:21:db:66:13:b5:97:c2:39:6e:6e:f6:59:3a:1d:
2f:a0:46:dc:63:48:03:0e:b2:ae:e6:89:e0:fa:28:9a:08:b5:
22:90:d4:c3:16:c8:13:35:d8:1b:c1:ec:f6:7c:7d:84:88:35:
50:43:94:e5:f8:63:37:2b:92:31:c5:42:6a:98:9c:d8:40:8e:
80:ef:94:df:07:60:dd:0b:2a:eb:71:b0:93:f7:06:e9:87:ca:
ea:5b:01:ea:91:31:a9:a2:e2:24:42:7e:ce:21:da:b2:9a:fd:
91:b7:87:12:5f:3a:26:4f:dc:a4:f0:3c:11:b4:a2:59:62:9d:
ca:ca:79:55:0b:f9:28:79:32:c9:26:cf:7d:e3:72:71:2b:e0:
46:94:92:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:38:44 2025 by rpki-client