Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
File: LQcZ69mnslPhSyXN7EzdFUoRHjA.mft (raw, json)
Hash identifier: RLR0kDklKCwav34FgE7nu1EMVs+yhlvuA827sF58Tyk=
Subject key identifier: EC:EE:47:C0:3E:D0:16:D2:23:E0:21:88:CE:91:76:9F:FF:E7:C1:AB
Authority key identifier: 2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30
Certificate issuer: /CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
Certificate serial: 01967D57E40550DCD064CD0A696704F5DE11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
Manifest number: 0196
Signing time: Mon 28 Apr 2025 17:00:33 +0000
Manifest this update: Mon 28 Apr 2025 17:00:33 +0000
Manifest next update: Tue 29 Apr 2025 17:00:33 +0000
Files and hashes: 1: 3RDyrZvZCaLxq028Ow5HCrsQefI.roa (hash: NXFuVuevT7dKqj3U3xabeRYu8pGJV55BCTjMmY4c/fY=)
2: LQcZ69mnslPhSyXN7EzdFUoRHjA.crl (hash: u/Bx+deKLRDm0j0pTDhYYcnuOpm3qWfNgFTUf/NiaNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:57:e4:05:50:dc:d0:64:cd:0a:69:67:04:f5:de:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
Validity
Not Before: Apr 28 17:00:33 2025 GMT
Not After : Apr 29 17:00:33 2025 GMT
Subject: CN=ecee47c03ed016d223e02188ce91769fffe7c1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ae:ff:2b:9a:93:b5:a2:a6:fa:64:a9:0c:c9:
02:25:f4:10:d9:67:72:59:2e:f1:16:ff:33:0d:e3:
45:1a:c0:cb:e5:95:48:af:da:6c:c2:1d:4d:10:2f:
f8:d6:32:95:90:52:5f:0c:b7:38:56:29:b6:83:44:
06:e6:3a:5e:44:cc:35:fb:af:65:0f:9a:3f:7c:7d:
a0:bc:0c:61:78:55:2f:76:75:85:d9:c9:53:8b:6c:
fd:2a:69:21:34:f8:64:d3:c2:9a:0b:9f:92:9b:69:
e7:5f:af:e6:32:1c:7c:0b:d6:0a:10:26:50:a9:2a:
1d:0a:58:9d:3b:db:21:4f:b1:e4:ff:3e:43:29:ee:
63:ba:03:34:3c:a3:79:6a:f4:43:bc:d9:d0:0a:89:
0e:d4:8e:4c:93:08:29:02:d9:13:d5:c9:af:14:1b:
ae:7f:a6:ab:fd:b1:85:9f:44:15:94:75:be:fd:31:
9b:3f:c1:90:5b:d7:94:52:c4:bf:ae:b4:26:a7:50:
65:87:b8:52:1b:98:91:bb:82:95:75:21:0c:ae:e4:
db:5f:d5:fc:06:9a:19:da:60:2a:b3:22:6a:10:44:
f2:03:04:8f:4b:ba:3e:a1:e0:c4:78:e6:3d:94:b7:
4f:31:ea:8c:37:67:02:c0:90:dd:43:27:a3:91:1e:
41:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EE:47:C0:3E:D0:16:D2:23:E0:21:88:CE:91:76:9F:FF:E7:C1:AB
X509v3 Authority Key Identifier:
keyid:2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a6:4e:11:32:ac:a0:6f:71:0f:9c:e9:05:83:e0:b2:80:9d:
35:41:0d:23:a8:9b:4f:56:1c:bf:e3:d5:5e:10:e0:a3:df:c2:
52:ba:fb:e6:7e:e0:43:0e:62:09:70:d2:15:45:de:d3:42:06:
64:06:f0:b7:50:2c:af:0c:cd:d7:56:09:77:0a:fb:40:18:fd:
b5:25:c3:1b:b3:9c:d5:e8:5d:ad:24:c4:8e:6b:77:83:a1:cb:
1f:21:9b:0c:30:5b:04:cf:d3:11:25:00:1e:f0:97:b2:2e:e7:
61:36:04:a6:2a:94:49:2d:5a:36:a5:aa:b7:76:8f:6f:57:81:
3f:5d:ad:2d:45:0e:a0:ad:05:28:12:e3:c8:9f:08:f2:b9:fe:
93:b9:74:18:5a:14:9d:d3:4f:7a:1a:65:7c:e8:2e:d7:5f:76:
cd:b8:a7:bf:e5:13:7b:37:fa:31:0d:f0:19:de:0a:85:bf:bd:
b0:d2:60:58:6a:c0:cd:0a:5c:72:ff:20:90:29:81:a1:fa:2e:
c6:ca:fe:01:27:71:f1:3a:64:7d:80:c1:a3:ca:7d:bd:9a:60:
2d:5f:3b:a1:d6:4f:ba:61:c8:c3:4e:74:39:4c:96:af:b1:a5:
5a:da:f6:b5:2c:f3:4f:7e:22:29:b5:99:43:3a:b3:82:51:d7:
f8:18:ad:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:09:42 2025 by rpki-client