Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
File: L6TocLw3rJcx_m_PloLrZX5QvKM.mft (raw, json)
Hash identifier: TxDCjfn6/vmioSIjbCCXrrDyO6dKVLF1R5PomOLSu0I=
Subject key identifier: 36:D4:4C:60:C8:83:7A:3F:9A:65:12:75:CB:F7:DB:5A:93:6C:B7:A4
Authority key identifier: 2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
Certificate issuer: /CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Certificate serial: 0196A57820C61E09DFEE7F2A1FC4359145BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
Manifest number: 1045
Signing time: Tue 06 May 2025 12:00:35 +0000
Manifest this update: Tue 06 May 2025 12:00:35 +0000
Manifest next update: Wed 07 May 2025 12:00:35 +0000
Files and hashes: 1: L6TocLw3rJcx_m_PloLrZX5QvKM.crl (hash: hraor1lP9hUhvfsZGHpkEZ1GUNSaZPFStvaSGGztmGs=)
2: m7j41yWDEfLAx4I6fuINswAyiXA.roa (hash: dDqFpGebxjdBoXgviJqZBlxaNfM8q5rLJMGVfhQeHKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:78:20:c6:1e:09:df:ee:7f:2a:1f:c4:35:91:45:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Validity
Not Before: May 6 12:00:35 2025 GMT
Not After : May 7 12:00:35 2025 GMT
Subject: CN=36d44c60c8837a3f9a651275cbf7db5a936cb7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:da:ab:89:1c:f7:36:30:81:6c:0f:c4:2a:
05:a5:df:59:00:e9:78:a5:b5:3a:51:26:cc:4a:53:
27:52:13:2a:74:58:e8:a7:b7:62:a7:84:9a:11:52:
c7:6d:20:14:09:78:54:e5:83:ad:f1:c6:f0:e5:7d:
71:1d:c2:83:03:16:5e:6f:fa:cc:e2:26:a3:78:cf:
e9:87:c9:9b:dd:b4:92:e4:31:c7:3b:09:57:97:4e:
53:04:47:cf:e2:6d:86:80:30:8f:bf:60:64:d2:a2:
04:78:1b:90:d6:48:f0:8d:c5:ba:a0:8e:d2:ff:ba:
60:32:18:2c:54:57:e3:f0:69:9f:9d:14:be:ce:8e:
21:3e:88:42:4a:5e:dc:3b:22:e0:fa:e4:35:f8:8a:
8e:be:ed:97:c6:d1:56:5b:d0:6c:68:43:e3:7c:21:
79:0d:8c:f6:d5:0e:48:aa:4c:a8:21:51:ab:86:4a:
6b:f8:08:28:c9:69:ba:ae:fd:b6:a8:be:f6:4e:23:
0a:99:68:96:68:79:a1:44:5a:f3:5b:68:d1:72:71:
38:aa:d9:f1:81:e5:0a:02:74:c7:e0:b6:8a:c2:ab:
27:09:06:85:99:40:5d:42:09:3f:88:b2:05:b2:1c:
89:31:69:03:ea:35:43:d3:e8:69:d0:08:aa:df:4f:
8f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D4:4C:60:C8:83:7A:3F:9A:65:12:75:CB:F7:DB:5A:93:6C:B7:A4
X509v3 Authority Key Identifier:
keyid:2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a0:92:4f:27:e8:97:33:5b:9a:4f:ab:dd:e8:d5:6d:54:73:
b4:da:4b:15:72:f6:82:58:70:b1:d3:c1:04:3a:5f:52:18:eb:
e6:da:64:29:45:5e:7e:ea:5c:01:5c:64:39:e6:ea:93:a8:0a:
be:d0:12:08:22:af:9e:a8:b3:72:68:4f:8e:fb:a4:12:ab:49:
0b:5a:b9:f7:e6:2b:a4:48:dd:7c:b6:a4:f7:db:2b:ac:36:76:
e7:0c:9b:d5:f3:1f:dc:bb:fc:47:7d:41:1c:3d:62:d5:99:9f:
a4:b5:d4:c4:18:23:18:4d:34:13:10:36:b9:67:41:54:6b:90:
0a:56:51:9f:5c:75:33:f0:c2:ff:b3:30:58:77:c0:2a:6b:e0:
84:09:62:73:a9:67:fe:8a:82:6d:62:70:49:d7:4f:6f:98:99:
d5:83:01:03:98:31:f6:f1:0f:9f:2b:d5:d0:5a:0a:b5:9b:6c:
97:06:31:46:14:19:ec:cf:12:78:e3:9e:50:76:ff:09:95:87:
68:3f:62:89:c2:b4:a1:54:2a:79:72:4c:4b:1f:08:b5:6e:11:
94:9c:46:43:e7:20:20:ad:72:7f:a9:95:1c:45:36:05:65:2e:
78:09:7b:c5:ff:cd:6a:c2:4a:42:b9:3c:d2:f1:a6:4f:62:91:
d0:40:cf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:05:08 2025 by rpki-client