Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
File: LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json)
Hash identifier: AU1czfC1sSj61r+F/5LcgwCzHMu00YhfsH7wpDumeb8=
Subject key identifier: 92:8B:3E:1F:11:EC:2D:97:D9:07:C7:CB:50:FE:FC:5F:20:8C:D2:B7
Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
Certificate issuer: /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Certificate serial: 0196741E495D1E07E45FBC115903B35D5844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 22:01:03 +0000
Manifest this update: Sat 26 Apr 2025 22:01:03 +0000
Manifest next update: Sun 27 Apr 2025 22:01:03 +0000
Files and hashes: 1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: qHkVTlyjeJQ1iG3v3nF++M1XOnVOPvI/juXyyy+NUn0=)
2: TtiFva0B7nBQnunu1qXuQVvAjRk.roa (hash: BCLtQWteuqq7HD+J7kkS4GO2lBhow7GRQ0k6IwJXdnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:49:5d:1e:07:e4:5f:bc:11:59:03:b3:5d:58:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Validity
Not Before: Apr 26 22:01:03 2025 GMT
Not After : Apr 27 22:01:03 2025 GMT
Subject: CN=928b3e1f11ec2d97d907c7cb50fefc5f208cd2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:4b:37:9a:42:74:33:3d:5c:ba:84:61:32:
43:2c:53:3e:ca:f0:42:11:c6:50:2a:9b:7d:51:f8:
28:80:2b:31:a5:c5:b9:a4:f4:41:0b:1c:b2:97:3a:
aa:f4:63:b6:ae:76:65:a9:f3:6b:27:0a:88:49:09:
92:14:76:fb:35:bf:66:91:30:a1:0f:2f:27:2c:29:
0f:ba:57:be:5b:d3:db:9c:29:60:78:97:ca:9b:50:
ec:bb:74:ed:47:2d:7d:81:c2:40:02:d8:6e:9c:73:
c3:0f:1b:da:6e:08:7c:f9:64:c1:d1:b0:c5:13:b1:
9d:46:9a:18:6a:b2:dd:8d:4d:19:52:c1:71:b2:63:
19:67:8e:63:ff:34:e6:ae:a7:c6:30:d3:56:b9:3b:
35:a2:16:ce:74:e6:80:28:8b:c6:77:04:9f:fd:64:
37:c3:b2:92:fc:1d:85:7a:df:f8:2b:01:5d:35:dd:
4a:89:84:49:03:52:26:b9:f1:2a:aa:fb:8c:8b:0f:
5d:44:c7:4c:f9:00:33:7e:a2:06:af:92:73:50:73:
3f:43:1f:a3:cc:5d:b0:47:87:f4:14:02:be:c2:ff:
de:a0:0b:1e:84:2b:cc:50:bd:76:1d:b9:6d:80:6c:
37:eb:67:6e:c5:ca:52:80:7e:47:1c:05:77:e7:07:
38:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8B:3E:1F:11:EC:2D:97:D9:07:C7:CB:50:FE:FC:5F:20:8C:D2:B7
X509v3 Authority Key Identifier:
keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8f:e2:43:9e:41:c8:d4:ae:14:c8:c3:81:75:52:0f:c8:3c:
2a:1b:ab:25:e9:46:ad:aa:f8:b4:ff:e8:09:85:dc:9b:ff:da:
3e:98:05:a6:e4:94:c9:84:ed:f1:5b:64:c4:00:81:15:52:80:
6f:f2:08:66:70:c9:92:14:6f:ed:81:cd:f8:40:f9:32:b2:7b:
45:47:be:e9:9e:4d:a8:45:ee:d0:fa:f2:2e:41:7e:b2:95:95:
31:c1:8d:95:11:20:3f:11:30:5e:9e:85:48:37:fe:c3:f8:fa:
37:23:f6:52:7f:e3:ef:06:20:6a:e0:eb:ff:29:47:e4:ea:9b:
58:7c:8b:ab:41:37:71:ad:8f:7a:05:ca:f9:14:dd:25:4e:d1:
81:5f:f9:b5:05:1a:c3:7a:4f:8d:9b:ec:7c:1d:ec:78:71:1e:
df:a1:3d:c8:09:3d:f3:84:d7:80:19:70:8e:91:da:7f:1f:10:
8e:64:36:c0:c3:de:c0:a7:f4:2f:84:18:57:18:07:ac:a4:da:
e0:7f:40:8d:93:30:de:cf:32:26:10:76:88:55:70:db:82:e4:
9b:1c:62:9a:e0:3e:6a:fe:75:6f:31:50:76:cf:10:af:ae:87:
f5:57:23:d3:b8:7f:a2:f3:56:7c:d2:14:ab:ec:02:36:e9:f4:
1f:de:c3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:53 2025 by rpki-client