Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: x5GFrxxUxpw/YYyrNtE+QoxcnI0HrGsw6X5sQCnZOII=
Subject key identifier: 73:E5:43:E5:60:CA:31:CB:CC:31:46:24:1A:F4:23:A5:CA:CA:3A:41
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 0196BAED9F70C0B2416AFE44A4905A23CB1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 16:00:57 +0000
Manifest this update: Sat 10 May 2025 16:00:57 +0000
Manifest next update: Sun 11 May 2025 16:00:57 +0000
Files and hashes: 1: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: QPLycyCS0kI5cuf2OlA0BGAeopU5EMmxGvVIAGm88ec=)
2: rK5X9NIdICE6HWbuHlM4yM6Jalc.roa (hash: YWhqfMgJTLRIqRYZxrF87FaDlWD+zYLSsh2PkoyKjDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:9f:70:c0:b2:41:6a:fe:44:a4:90:5a:23:cb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: May 10 16:00:57 2025 GMT
Not After : May 11 16:00:57 2025 GMT
Subject: CN=73e543e560ca31cbcc3146241af423a5caca3a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:e2:c6:1e:4b:aa:d9:4f:e5:a3:2e:99:c6:
7c:c6:96:a1:05:61:3b:ac:2a:08:c0:13:d5:33:7e:
80:60:9c:b6:4d:58:17:ce:6a:e7:ea:33:52:51:cc:
9f:62:fe:e1:75:5a:2a:5c:51:cc:a4:6b:4d:cb:f2:
c3:40:51:d6:a7:15:e7:e7:ac:18:c5:71:cd:6f:09:
01:46:00:d6:c0:b7:cb:d8:7e:10:6e:3b:47:45:8b:
e4:fd:f3:71:f5:a7:68:61:41:d3:90:e8:af:f3:54:
ee:b5:e1:4d:e9:5a:28:26:d2:ec:58:23:17:f9:fa:
46:96:71:36:0e:b5:ab:d8:5d:fc:26:5a:b8:a8:a9:
a1:a6:e7:5b:f4:23:1b:a1:69:8b:9a:ea:ec:fc:c9:
2e:5b:08:c8:9c:e2:5f:89:79:b5:05:36:54:e8:87:
e6:0a:fd:58:f0:4a:6e:03:9a:9b:8a:98:4b:e0:92:
0d:12:0c:0e:06:96:27:7e:6f:5b:f7:d0:18:6c:66:
54:e5:1e:51:b5:4d:59:09:d6:6c:d2:84:f0:8d:31:
06:8d:b6:4c:dd:92:d3:b0:b8:92:20:9c:b9:de:d0:
61:f7:35:cf:83:8d:9f:d6:ad:23:c1:0b:9c:a5:11:
71:0b:b7:90:48:5f:0e:c4:3c:d4:84:c5:3e:fd:29:
88:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E5:43:E5:60:CA:31:CB:CC:31:46:24:1A:F4:23:A5:CA:CA:3A:41
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7d:00:b0:de:d2:4f:bb:5f:27:b4:39:e7:7d:9b:b7:10:65:
76:89:29:61:0f:dd:7c:71:26:0c:0b:15:6a:00:35:d6:20:15:
53:af:d2:88:91:3e:9f:e0:8c:13:42:1b:ac:31:d1:63:65:a3:
41:bb:f2:25:45:48:82:81:0c:ff:d5:70:85:be:58:12:05:c8:
de:31:9e:dc:ac:dd:ed:f7:3d:c6:d2:4f:1b:d5:d5:a1:e7:e8:
c6:e4:9d:88:32:40:a0:cb:39:9d:93:11:b0:8d:d3:c8:71:80:
ee:ee:6f:72:15:fb:c3:75:e4:14:58:e1:74:37:e3:03:4f:c8:
6f:dd:e1:88:ff:47:7d:13:0e:79:ac:85:ac:9d:39:e2:7d:6b:
dc:98:46:2f:7e:00:3f:52:ff:39:a4:99:b0:c7:ff:c8:bd:11:
d5:8c:56:1d:88:46:58:a7:c1:7b:ef:2b:2b:36:2c:2b:0d:c0:
db:42:73:04:d6:0f:a0:7d:c0:39:67:a8:e1:1b:21:5a:f5:df:
27:65:40:bc:a6:79:5d:53:64:48:46:0a:cd:eb:a2:1f:d3:52:
8b:43:68:56:04:5b:91:f1:21:ca:a0:0f:5a:d0:3e:32:f1:64:
8d:10:af:c2:48:25:db:40:ca:15:a3:9e:8e:21:09:0e:a6:6e:
60:99:3a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:11:40 2025 by rpki-client