Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: K6b64iitQeZaA1LoO7MRUVF7OiHCFrWr+4hKX6kWIeg=
Subject key identifier: 88:C5:B3:91:42:BE:CC:38:16:CF:03:D0:0C:14:1D:BC:31:77:6D:1A
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 0196AA307EB74A19F2077343CCD544333F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 152B
Signing time: Wed 07 May 2025 10:00:26 +0000
Manifest this update: Wed 07 May 2025 10:00:26 +0000
Manifest next update: Thu 08 May 2025 10:00:26 +0000
Files and hashes: 1: 8sEeUpZ4L2z7RPtSPsfM7zrXG4M.roa (hash: mpcNRDaaoRvH9rywJlovNltKEUBpKG8cjm1Uf7rVmic=)
2: b0eHpcDmofhiq2yDQv5L8LhktMQ.roa (hash: n+x8ttc272B8eeajhUuy0X0SsSR7O/WsKWjyViKV6hg=)
3: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: ZfdiTjCS+6wJz/7t98YDIj2aPGbp17Q079FvWYEIXPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:7e:b7:4a:19:f2:07:73:43:cc:d5:44:33:3f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: May 7 10:00:26 2025 GMT
Not After : May 8 10:00:26 2025 GMT
Subject: CN=88c5b39142becc3816cf03d00c141dbc31776d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:36:3d:c5:a7:2e:a6:5d:3c:70:37:19:e1:
dc:a8:ab:e1:71:9b:18:cc:a9:50:f2:0a:4c:55:68:
97:f1:62:7c:86:9d:22:83:50:f6:cb:91:8c:4c:41:
6d:c2:b4:19:3c:ed:21:dc:63:44:20:d1:44:82:e0:
af:12:46:1d:ab:61:f9:b9:93:33:30:6a:b0:d4:14:
ec:6e:5c:68:74:84:bd:dd:35:85:71:c8:be:98:3e:
39:8b:25:b9:ab:9d:80:72:e9:4b:e0:8e:4e:4e:79:
20:3e:9a:90:d9:fe:9f:6a:34:40:27:74:99:b7:35:
d6:66:b1:98:98:85:93:f0:3b:af:e9:8b:5d:e3:d2:
bc:16:16:00:45:84:ea:3c:d3:96:71:d6:d0:cf:67:
08:df:56:eb:e6:49:16:a7:a7:8d:b2:f2:5a:95:ca:
e3:58:02:7d:41:15:95:f2:48:a7:e4:ee:7d:71:3b:
f6:d1:7c:97:29:28:5c:52:a5:fe:03:96:5f:a8:a4:
84:bf:8b:7b:51:d5:cf:2a:17:de:1d:6e:9e:53:75:
71:f6:28:7e:81:34:15:d4:fe:80:2d:92:7b:dc:0c:
4d:32:f0:2a:8c:bf:f8:9c:f0:08:8f:e2:1a:9b:01:
c7:9c:2e:0b:43:a2:44:f3:74:4d:7c:43:2e:fd:85:
ff:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C5:B3:91:42:BE:CC:38:16:CF:03:D0:0C:14:1D:BC:31:77:6D:1A
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:23:0a:ef:81:df:ac:db:8a:de:28:cc:c4:92:70:21:b5:ec:
75:08:1e:6c:00:7f:0e:98:ab:a7:76:83:ac:fa:99:e5:2d:7b:
b6:21:ea:ee:bf:a1:b4:ec:a0:8e:43:69:45:48:69:11:0e:c2:
17:cc:24:9c:2a:59:2b:dc:76:5a:d0:a5:a6:3f:74:61:4a:26:
fe:4e:e5:cb:16:64:a3:68:18:bc:86:4a:b9:96:1a:a0:48:d1:
7b:2c:4b:a1:0b:d2:e1:c4:e0:6b:5a:f1:ad:03:51:9c:3c:3b:
d4:b5:ad:9f:90:48:fa:89:cb:05:a7:a5:b0:f9:a5:60:fb:d0:
11:d5:8f:d8:21:5f:19:0f:c9:b8:35:46:e1:a9:12:09:e2:ba:
c8:bf:93:7a:7d:49:30:80:90:65:54:8c:de:db:70:1e:8f:96:
45:16:4b:69:9e:76:be:79:e2:24:34:fb:13:19:d5:6f:59:12:
52:02:4b:dc:ad:6b:3c:d7:26:7c:30:bb:36:7d:00:13:b4:dc:
e2:e5:4a:4e:99:b7:6e:0b:69:b3:31:98:6e:91:9b:78:b4:81:
a2:95:5f:33:be:a6:9d:2c:18:db:0c:40:f1:35:fc:10:bb:95:
c1:4d:d7:3a:b8:07:b4:52:26:c6:47:d1:3f:5d:75:27:f3:e5:
ef:8f:5e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:33:41 2025 by rpki-client