Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
File: lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft (raw, json)
Hash identifier: xCIi6GEywEuCNmPl/TTKOGcsd7uSpwigHLxSorOPOZU=
Subject key identifier: 1D:D8:C9:9B:61:89:B7:1B:EF:6F:8C:17:09:7A:36:1B:99:0E:1F:76
Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Certificate serial: 0196B4467BF02944BBBFBCCB13C0DDD14354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
Manifest number: 122B
Signing time: Fri 09 May 2025 09:00:40 +0000
Manifest this update: Fri 09 May 2025 09:00:40 +0000
Manifest next update: Sat 10 May 2025 09:00:40 +0000
Files and hashes: 1: 9xCRY7VEPmKHf0lyxzNpSutTsGY.roa (hash: 6rDekGO16wwWHoKHJkHXXHa8TG0Fv3Oiiu1rkWGfPt4=)
2: Z37vhTOIgXT7YFHlN3w9aL-lk5Y.roa (hash: iMlS4GRDszRpO6wfa87ZF07OseqOmumWVqUeyx1wi4Y=)
3: lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl (hash: mPHYcALuopB8y5NSEzksfi1WDMxHpr6IKTnAGeo99TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:46:7b:f0:29:44:bb:bf:bc:cb:13:c0:dd:d1:43:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Validity
Not Before: May 9 09:00:40 2025 GMT
Not After : May 10 09:00:40 2025 GMT
Subject: CN=1dd8c99b6189b71bef6f8c17097a361b990e1f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f6:92:9c:eb:6d:45:85:08:e2:fa:7d:c9:d4:
5f:5d:0c:52:65:e2:79:7f:50:4b:be:71:37:45:a5:
98:59:03:d7:3b:59:9d:c4:6e:e9:5d:90:b4:9c:b4:
5b:61:df:21:d5:b8:9b:8d:09:be:5a:47:c8:6c:66:
a6:52:7d:bb:68:0a:12:2a:0d:77:3b:d1:35:e3:a2:
ea:0c:0f:2c:a6:2c:f0:97:fb:d3:14:ff:17:9a:13:
67:99:11:f9:18:8a:50:4e:92:b9:88:85:b4:7d:c8:
f7:aa:fd:88:f4:8e:c6:86:9c:22:bb:2c:31:02:f7:
8f:1a:1a:7a:53:9f:70:de:9c:7c:29:0e:48:c4:18:
b6:d1:42:17:7d:e4:50:99:35:d8:99:b1:64:98:e9:
50:79:44:78:da:d1:a0:14:61:5a:6c:da:aa:82:80:
01:47:71:1d:32:ca:f8:21:33:ec:1d:14:ee:fc:fc:
21:e7:6e:7b:19:63:1e:02:ff:1e:43:8b:43:e3:91:
00:f2:cc:52:97:be:b9:e9:63:b7:f4:9b:74:8a:77:
2e:31:07:0f:b8:43:8b:52:be:5a:4a:2e:6f:a1:47:
71:62:1a:61:33:19:37:57:fd:43:2c:19:92:25:f6:
da:a2:81:a2:15:51:04:11:a3:fd:0c:5a:9b:eb:1b:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D8:C9:9B:61:89:B7:1B:EF:6F:8C:17:09:7A:36:1B:99:0E:1F:76
X509v3 Authority Key Identifier:
keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d1:4c:c1:c9:a7:81:f7:e8:62:ad:9a:c4:97:bf:a9:f2:4c:
eb:0d:eb:6b:01:51:4c:74:a5:45:46:ad:b2:24:79:19:90:ab:
27:1b:b4:07:29:90:10:99:61:a7:69:6e:c9:ee:05:46:63:a2:
33:45:df:ba:73:38:2d:25:4f:3b:54:bb:a5:d8:ab:29:70:e6:
ff:7a:cc:d9:15:a6:9c:40:f8:af:af:59:0a:df:14:f1:73:6b:
0b:ee:5a:27:62:e2:69:51:5f:ce:9f:f0:df:18:ca:99:d7:57:
bd:82:b9:85:c9:cf:d9:18:23:c1:31:d0:e9:5f:e1:6c:d1:17:
79:73:63:ce:63:2b:bc:b8:93:c1:a2:e2:5c:a0:24:71:97:7b:
a9:7a:80:5e:eb:db:5c:81:d0:a8:7c:13:7b:b5:7d:7e:d5:3a:
fe:c9:1b:50:5d:ff:c1:55:96:2d:1b:12:ca:0f:fc:15:81:0e:
80:4c:f9:0c:4b:c4:fb:78:f3:fd:1e:86:55:38:1b:21:ec:a5:
71:e8:d7:e2:fc:4d:7a:89:f4:0b:d4:bf:30:6d:5e:96:d6:ca:
87:08:44:c6:67:5d:6a:4f:8c:52:8a:14:d4:67:af:73:67:ca:
2c:48:98:92:b3:3e:12:3a:44:71:ad:c3:01:93:44:3e:0d:5d:
6b:ca:f9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:02:54 2025 by rpki-client