Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier: 2zVvGyHnZ2XG4YT0Gs1X/yXbKkupzEuxWauVfFgqy2Q=
Subject key identifier: 42:7A:BB:5E:7E:EE:16:65:D9:68:96:13:D9:BA:D1:59:83:1C:D5:D5
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial: 0196B9DAB3777B9B817F6DC070A2A0C5BE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number: 0C13
Signing time: Sat 10 May 2025 11:00:39 +0000
Manifest this update: Sat 10 May 2025 11:00:39 +0000
Manifest next update: Sun 11 May 2025 11:00:39 +0000
Files and hashes: 1: Sf5t6YxNuVy_QmmCDlAJFdLydbs.roa (hash: 84pXBKdWUeBM3XRDHyhAVZXwwfPh9reL6aBdIjVrlKs=)
2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: aLvrSWSVrJmYuwjdUFO21wpdUEDLzRGqstHaPltWbsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:b3:77:7b:9b:81:7f:6d:c0:70:a2:a0:c5:be:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Validity
Not Before: May 10 11:00:39 2025 GMT
Not After : May 11 11:00:39 2025 GMT
Subject: CN=427abb5e7eee1665d9689613d9bad159831cd5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:11:05:40:e3:45:6b:6d:7d:19:d8:e2:c2:
15:34:80:df:96:63:d1:34:09:c6:f4:15:db:12:86:
48:88:5e:4d:1d:d2:be:ee:ad:ed:a4:32:86:11:64:
07:0b:59:e0:61:3b:5e:e3:3f:d8:14:0a:6d:2d:82:
ca:91:59:ec:9c:97:f5:83:c9:85:36:5f:4c:e6:83:
cd:fb:42:e8:52:3e:7e:25:d8:6b:89:1f:e8:cb:4c:
9e:78:6f:b5:7f:ed:3b:71:c6:c2:67:e3:3a:59:15:
d7:89:bf:72:bd:70:3e:14:14:58:bc:89:26:5a:80:
e7:fe:a5:70:bd:bb:2f:30:6d:74:ed:e5:6c:b1:2e:
3f:49:9d:fb:a5:58:d4:0d:2e:46:3d:71:8b:7c:1a:
48:2a:17:cf:8e:6a:38:cf:53:a2:29:49:cf:c6:77:
5f:b6:7c:8d:b5:be:19:9a:9f:5b:dd:e7:57:07:82:
77:ff:49:25:ed:97:0e:be:41:20:db:18:d5:31:fd:
fe:2b:14:9e:23:3c:1d:55:9f:7a:b8:75:19:59:9c:
6e:7a:1e:aa:44:a0:2e:11:f0:97:b3:a9:c5:4c:90:
a0:fd:ba:4d:6d:40:8f:87:c6:94:29:a6:b1:af:e3:
71:0c:c2:8a:af:9a:28:73:4d:1e:44:0c:3d:1a:2c:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7A:BB:5E:7E:EE:16:65:D9:68:96:13:D9:BA:D1:59:83:1C:D5:D5
X509v3 Authority Key Identifier:
keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:28:d2:86:aa:97:12:73:0e:27:3c:03:3e:4f:7c:5f:b1:bd:
21:44:32:33:ba:36:52:c0:36:26:34:4a:ef:36:ea:98:a2:f8:
da:76:d1:42:0c:3f:58:17:e2:de:8a:0b:f5:fa:06:0c:b5:10:
40:c3:61:c9:97:4e:db:47:76:35:95:43:a1:6c:35:e3:83:91:
03:82:f1:1f:5b:ac:ac:83:ec:31:e7:2f:43:5c:78:ab:a2:62:
65:db:29:75:07:f3:79:a0:0b:cb:88:51:2b:db:6e:92:e5:43:
da:82:74:90:e4:b4:cb:57:d5:4c:2f:7f:1f:4b:d2:d2:30:8a:
d1:24:b9:c5:5a:ae:b2:10:f4:7e:90:c3:f4:a0:55:47:a6:8f:
a0:39:de:82:bd:34:c5:d7:c3:0f:cd:f9:96:ff:0e:f9:69:70:
3f:b7:bb:27:6c:ca:ef:e3:43:7c:d1:3a:18:e8:06:77:ff:f8:
ba:95:5a:ac:33:21:a7:73:f9:5c:39:67:c3:bf:ad:1f:85:aa:
c9:74:c6:7d:55:86:20:21:5e:62:80:c0:4a:70:a0:ec:86:43:
a0:19:c5:b7:fa:7e:26:03:6d:7a:74:58:91:7f:97:50:07:4d:
27:78:cf:c4:d9:d1:92:c9:63:82:4b:23:91:0e:26:bb:d3:c4:
73:54:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:12:37 2025 by rpki-client