Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File: L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier: S9pXSL2Mvv5D2wyfIDeM/Xrykpj9qmGUQEoil/2yvLs=
Subject key identifier: BB:96:2E:49:D2:FD:84:F7:EF:26:7E:B8:09:EF:15:DB:98:5C:97:D8
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer: /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial: 0196C194310A18280BA62DE411A7C0AAA17F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number: 0D42
Signing time: Sun 11 May 2025 23:00:36 +0000
Manifest this update: Sun 11 May 2025 23:00:36 +0000
Manifest next update: Mon 12 May 2025 23:00:36 +0000
Files and hashes: 1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: Sn6GxfpeYJVc633jopMqDrgslBOhOBDL7RsCPEk5yPw=)
2: vQoI-4y6Tfml573DLn2pCriBNl4.roa (hash: 3W+CArLvUD2GX28NdlGoBAxxfe8EMtX22dfil51a9Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:31:0a:18:28:0b:a6:2d:e4:11:a7:c0:aa:a1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Validity
Not Before: May 11 23:00:36 2025 GMT
Not After : May 12 23:00:36 2025 GMT
Subject: CN=bb962e49d2fd84f7ef267eb809ef15db985c97d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0a:a5:2e:06:6a:ff:cd:f0:4b:33:a2:b6:a4:
ce:9c:79:0e:06:f0:b4:c7:c7:7a:d1:19:4d:c8:65:
67:e4:af:ad:ed:9a:63:4d:28:b9:ab:c5:33:e4:36:
37:8d:78:41:36:09:11:6d:97:29:f0:9e:67:6c:89:
ef:77:1a:f9:6c:5b:32:9f:d7:4f:db:88:14:63:a0:
4b:85:b4:33:19:11:eb:4d:85:70:38:fe:c5:bc:cc:
67:96:e6:19:6b:f2:85:77:e4:e1:d0:63:fb:d9:ba:
2f:9e:7f:eb:75:c6:d2:a5:2c:f0:28:80:a7:f1:8d:
e6:73:2e:c3:97:8e:f4:62:cc:c5:54:75:c9:cc:73:
cf:40:54:28:5a:21:72:39:07:cc:54:5f:08:87:f4:
f8:ea:8d:e3:17:64:17:12:2e:d7:ab:16:92:55:ae:
92:3e:2a:1c:e7:49:8e:bb:54:5e:89:59:93:41:17:
e6:d1:ff:26:45:a3:6f:c7:55:6f:9f:96:71:2e:4d:
d2:a1:a4:7c:a4:75:9f:3c:54:76:46:69:08:84:37:
06:21:42:d4:3f:56:1d:22:73:37:18:92:b3:be:25:
46:34:5b:22:e7:90:f3:dd:96:8e:88:ee:de:d9:cb:
0c:20:ab:f7:cf:8e:af:40:fd:48:55:8e:65:b5:a0:
b5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:96:2E:49:D2:FD:84:F7:EF:26:7E:B8:09:EF:15:DB:98:5C:97:D8
X509v3 Authority Key Identifier:
keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:21:aa:5e:52:79:af:5d:ca:8b:24:af:43:00:9e:a8:54:5d:
09:06:f9:08:b2:5d:36:36:25:b6:8a:2c:2d:0b:fe:1a:d9:7f:
af:9a:c8:12:28:f2:3a:29:6b:e5:34:59:f1:ed:da:95:a7:a8:
5b:54:46:9f:5e:6f:27:04:e0:76:37:09:6a:39:c8:fa:85:15:
97:34:af:95:25:f9:e3:7c:e5:5f:de:73:fe:92:23:2b:19:5a:
3d:72:d2:14:af:a4:75:b7:6c:47:d3:ee:3f:43:80:4a:ec:35:
99:d4:5b:e8:ef:68:04:fc:1b:53:25:2d:0e:7b:64:d9:3f:be:
b8:5a:cc:8b:74:65:4b:a2:1b:2f:61:18:80:43:61:b2:4e:79:
d2:8b:cf:45:12:82:2c:af:3d:54:18:85:64:7e:f0:0b:08:15:
05:8a:92:02:c4:f5:0e:18:a6:e9:d8:5e:33:02:ed:e3:98:4f:
67:d2:e8:d5:14:0c:9f:43:3d:34:30:44:25:24:f8:22:ec:20:
80:a1:3c:5f:b8:98:83:36:54:a8:3a:10:fd:75:f9:d6:57:43:
61:69:5f:bd:6a:4e:51:e1:bb:5c:9a:b3:29:d4:38:23:26:24:
98:f6:1a:7d:b7:83:c4:4b:84:c6:be:4c:2a:61:4a:f2:80:dc:
68:f9:85:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:41:50 2025 by rpki-client