Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: LanofZiQLYovAFUzL2bcnv6wASrygXwXrhscQQ1FJpI=
Subject key identifier: AF:02:AC:BC:FF:06:1F:2B:B1:CB:5A:97:4E:9A:5C:09:7E:ED:4A:AC
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 0196B8FF07019F020365509475117E773F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 07:00:43 +0000
Manifest this update: Sat 10 May 2025 07:00:43 +0000
Manifest next update: Sun 11 May 2025 07:00:43 +0000
Files and hashes: 1: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: kPVP5anMTJi1JtFTSEhewuROEGp92UtXDkRI1NfJ+nY=)
2: pu3w7UCd4Jix5FHNDyD1wbsxi8M.roa (hash: J6M/UUbbX9rFSK6+ULPDexwZqprBkdzi2+HoEA2BwBc=)
3: rLSgQK3eROYoGVjeEkatzbeLiUo.roa (hash: cRiivZzTe4i6byml8FTWqC2r60f1JUGBkptLQN0rfQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:ff:07:01:9f:02:03:65:50:94:75:11:7e:77:3f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: May 10 07:00:43 2025 GMT
Not After : May 11 07:00:43 2025 GMT
Subject: CN=af02acbcff061f2bb1cb5a974e9a5c097eed4aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:00:8f:e4:1f:dd:e9:0c:c4:da:26:bc:78:
2d:b0:76:79:34:83:68:81:74:64:c8:95:01:3f:e6:
4a:f7:6b:94:e3:4c:62:5f:3f:bd:0a:68:c0:b9:51:
81:eb:7a:5d:00:57:72:6a:ee:7d:75:de:58:fd:94:
79:f6:d1:2e:18:b7:0c:a9:ee:8e:3d:3e:b1:e9:6a:
ee:33:83:fe:cd:e0:2a:a5:4a:ad:96:92:25:6b:07:
3f:f3:39:6c:09:fd:f6:4b:48:05:7e:e9:1a:0e:1a:
44:7d:d4:35:52:1c:ac:12:6c:35:8b:3b:ec:5e:94:
fd:08:2f:e1:ec:f7:91:dc:16:37:06:ef:d9:ae:7d:
46:eb:d2:08:85:43:b4:89:e9:66:0e:21:83:22:d0:
44:e8:1a:51:b4:5b:a0:0e:c6:ff:b6:1d:2a:2f:ea:
8f:65:ca:08:6d:ee:b3:40:ae:0e:7f:54:c2:0f:43:
33:91:db:64:cf:ee:aa:a7:da:67:16:46:74:ef:42:
68:05:3c:91:e1:18:20:d4:59:55:41:ba:0f:1c:3b:
5c:cb:46:ea:20:9c:21:6c:c0:78:ab:80:51:3a:30:
18:47:f5:13:04:ac:22:fe:c2:c1:fb:ac:36:7a:89:
73:b1:28:5a:a0:2b:1b:84:c4:08:73:b3:fb:51:ea:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:02:AC:BC:FF:06:1F:2B:B1:CB:5A:97:4E:9A:5C:09:7E:ED:4A:AC
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:66:4b:d3:e6:d7:9c:4d:1c:b2:86:df:05:5e:ee:2e:0e:d7:
a5:ca:d8:22:10:09:b6:05:60:9d:52:50:74:23:c8:17:55:63:
1d:c7:2a:7c:97:6c:40:ff:40:f7:e0:90:21:fe:51:0c:da:b1:
0f:00:cb:c6:14:d3:22:dd:b7:d0:51:ff:1d:5a:54:a5:f1:89:
54:a6:18:45:25:6b:46:d0:25:c3:e0:89:7a:fd:33:7c:03:a8:
33:cd:25:22:12:07:01:e0:ed:6b:c7:c0:70:70:21:85:80:83:
34:9e:b3:93:93:71:63:54:90:f3:26:c8:01:12:a3:04:f9:05:
66:d1:85:56:d9:23:b1:e5:de:7e:da:b2:d6:f8:0b:30:3a:49:
58:66:97:e2:78:ed:eb:c1:51:e7:b2:51:d3:50:55:4c:b4:28:
b6:08:24:55:fe:9c:a7:e4:f7:06:75:2c:5f:5f:b5:b2:9f:5a:
98:85:7e:47:56:06:65:a5:09:68:bb:a9:c8:f3:06:9d:5e:3d:
fe:df:8a:b0:cb:df:49:ef:9a:f2:7c:68:27:73:19:47:03:0b:
01:dd:f2:8c:1b:ed:33:52:bc:fb:9c:8e:80:1e:19:59:31:db:
a4:10:cb:cf:64:e9:99:93:9f:c5:fd:83:cd:16:46:1c:82:6f:
54:96:e2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:08:53 2025 by rpki-client