Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
File: LuVtTXsdGgbOifdG95tlbHNIxSU.mft (raw, json)
Hash identifier: oq4McRLaSuKCVCz4LAr9MbYlAU/MLSKoLt6CYF51c/U=
Subject key identifier: 64:F1:FB:A3:6E:41:02:9F:9A:62:93:0A:EF:1A:57:52:98:3E:7E:26
Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
Certificate issuer: /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Certificate serial: 01968134C3756503E87E07786C8BADC97DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 11:00:40 +0000
Manifest this update: Tue 29 Apr 2025 11:00:40 +0000
Manifest next update: Wed 30 Apr 2025 11:00:40 +0000
Files and hashes: 1: 2aLxopPcHENcfLMPsouZcp1_F6M.roa (hash: h4R/reMNBt8uBqG3DatHK1fJyHrvX4LbUEuuPBCoJK8=)
2: LuVtTXsdGgbOifdG95tlbHNIxSU.crl (hash: H9kGAdZr2XKcKUrBaPH8yWcPIqyEi8S8nUyQ27VhRhM=)
3: VUTE9O5_hq_bVZqW49cK8Uyj9bo.roa (hash: xI9AJIQruyMmhbpTp5z9YUSoSRn5ytxFSzSALijAUX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:c3:75:65:03:e8:7e:07:78:6c:8b:ad:c9:7d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Validity
Not Before: Apr 29 11:00:40 2025 GMT
Not After : Apr 30 11:00:40 2025 GMT
Subject: CN=64f1fba36e41029f9a62930aef1a5752983e7e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:29:69:e7:6d:c5:c0:0c:5a:3a:68:b0:c7:
54:51:44:55:1e:dc:80:4d:45:7d:cb:5b:30:35:e5:
e5:4d:38:b3:9f:3f:59:e1:59:7d:65:1b:a8:a3:69:
ae:9d:15:f0:e0:a9:34:a3:40:cc:94:4a:af:72:e0:
b4:6d:3b:19:d7:2a:61:68:1a:2b:95:f3:4c:db:d6:
e4:34:7d:e2:02:72:56:54:c6:43:a6:cf:d1:a0:65:
24:cf:2c:5c:71:8c:ff:96:19:ba:ba:ea:59:72:03:
e1:16:9f:b0:49:dd:e5:ef:86:e7:55:11:6c:38:43:
62:77:63:d8:6a:af:f9:c2:5c:ee:48:32:c1:37:7a:
c6:6f:81:ff:5b:d1:b3:5f:e6:bf:d4:63:9e:94:d0:
67:6b:9b:d1:e1:a3:d0:31:8b:d2:62:a2:cd:fa:86:
af:7c:79:c1:d4:51:0d:74:2f:4f:81:40:c1:20:e3:
11:eb:18:8e:0d:e0:fb:af:5d:7d:d2:a5:9a:7d:79:
27:5c:38:cd:c8:27:89:d6:66:39:1f:50:b9:19:99:
35:8b:67:71:f1:96:8e:86:88:63:55:37:bb:98:9a:
21:c2:fb:4b:b8:1c:58:3e:12:63:bc:a4:aa:4b:4f:
5a:ef:fc:4f:77:73:37:12:04:45:e2:8a:a1:56:5e:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F1:FB:A3:6E:41:02:9F:9A:62:93:0A:EF:1A:57:52:98:3E:7E:26
X509v3 Authority Key Identifier:
keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0d:09:6f:7a:37:14:ab:09:ea:1a:1d:5a:23:52:b2:da:70:
06:22:80:5f:e4:85:e5:c1:93:ee:c4:0b:b2:24:d0:75:d5:61:
7a:44:cb:93:15:2d:c9:97:04:2c:82:a3:38:ed:c4:08:a1:a7:
25:91:02:1c:e8:32:22:33:64:3d:8c:a9:dc:b4:17:8e:b8:15:
4c:01:3a:85:e4:c8:3f:2e:30:03:c0:96:b0:73:4b:4b:f5:87:
53:8c:6e:10:11:cc:e2:52:43:72:3a:02:90:f5:ff:f2:e5:47:
84:2a:31:9d:cb:12:0b:e8:94:d7:83:f7:3f:c9:a4:00:f3:c6:
69:2a:05:62:51:d7:c5:93:fe:e5:bb:9d:f8:e4:50:bc:12:aa:
dc:fd:03:d8:61:e0:0c:ab:21:0d:82:79:ff:95:f4:14:e3:be:
ac:f5:26:30:10:58:fa:75:6f:35:ba:ba:ac:2e:83:46:4e:d0:
b8:bb:a2:1b:4b:e0:54:69:5a:4d:13:fc:50:6d:aa:8e:3a:89:
8d:fc:6f:c1:4f:d9:10:96:80:71:a8:42:59:7f:47:e9:02:0d:
e3:f9:2a:0b:19:24:75:99:6b:59:e1:48:c4:64:bb:83:3b:ff:
d9:fd:9e:2f:0e:a6:82:5a:2f:73:f9:84:cc:13:f3:6b:97:4d:
94:bc:bb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:54:45 2025 by rpki-client