Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: /EtOd2pEyyblB+zmV8wvSceF8g62CfVBWT6RARGRpjw=
Subject key identifier: 64:C1:4A:3F:B1:8B:45:1C:8B:30:7A:FE:86:60:2C:31:A3:F4:29:53
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 0196718A67C60482C573C8C13B67E22237A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: A5
Signing time: Sat 26 Apr 2025 10:00:18 +0000
Manifest this update: Sat 26 Apr 2025 10:00:18 +0000
Manifest next update: Sun 27 Apr 2025 10:00:18 +0000
Files and hashes: 1: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: 6b6yhwNvqilDNJk0SngiCFZO+/0truqevEy0oz4vzC0=)
2: fLlv5aqJH-Xyc8xZ7zKtVoErMgY.roa (hash: NhTDsXx1rGZ6x/7/rknUayaETp5dTu1vdjx00J+ePS8=)
3: g4OghidcBHhG6H0ygzNjK0BOBQ4.roa (hash: yN/WoqH4d4SXT4k7UzUmKgAO2KnbhoqPw7tsWQrX0cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:8a:67:c6:04:82:c5:73:c8:c1:3b:67:e2:22:37:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Apr 26 10:00:18 2025 GMT
Not After : Apr 27 10:00:18 2025 GMT
Subject: CN=64c14a3fb18b451c8b307afe86602c31a3f42953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:0f:9e:23:20:4a:ed:46:58:94:f5:e3:d8:
3a:6a:54:e5:bf:b0:e6:8f:7c:9a:bf:f2:cb:9e:2e:
1d:90:6c:f0:36:72:ac:87:58:44:41:56:1d:32:2a:
71:44:d3:07:8f:9b:4e:1e:76:f4:f3:b0:37:b2:c2:
b5:a7:06:42:4b:7e:d2:5a:e6:f6:2e:b7:f8:4d:84:
03:b6:61:6d:49:dc:16:42:3e:6d:41:3a:da:1c:90:
02:a2:72:ad:13:ab:77:b9:fe:6d:0e:47:11:31:17:
94:4f:66:3e:65:6b:91:19:d0:95:f7:77:41:ec:0c:
32:75:ba:08:7c:23:dc:4e:1c:c8:7c:45:da:34:e3:
ca:a6:e8:91:ef:cc:f3:f3:2d:09:9c:48:19:c7:30:
21:ff:d7:23:53:42:e3:9a:ab:b3:a4:3d:bc:40:93:
1a:e9:a1:dd:4b:b6:40:f5:56:10:9d:e8:af:d6:46:
fb:b5:1f:d3:aa:48:e8:25:72:8f:e5:4b:8b:85:b3:
b5:f8:a9:c3:0d:97:48:4e:41:72:5b:27:ba:6b:50:
f3:07:c9:d7:c6:f7:46:5d:a8:d5:ba:32:04:ff:eb:
65:af:30:50:53:fc:68:43:8d:fb:b2:05:0f:a8:26:
ea:f7:f2:04:82:30:ea:79:60:8a:89:ed:6a:c2:2f:
07:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C1:4A:3F:B1:8B:45:1C:8B:30:7A:FE:86:60:2C:31:A3:F4:29:53
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:25:f0:dc:7b:14:eb:57:e0:0a:ff:c7:2b:61:35:5a:24:f4:
a5:d6:04:2e:21:f2:bb:d3:91:7b:d8:f6:2c:67:d0:49:77:4f:
46:da:5c:c8:2c:64:6a:bf:8e:28:76:d9:ae:de:6e:67:5e:f5:
9d:f0:20:61:1e:6b:33:6f:3f:e9:54:2e:6e:28:56:72:99:18:
cf:41:7a:71:f8:f4:05:7c:60:9c:23:62:24:c9:4d:d0:49:8f:
fd:69:9d:02:21:a6:40:36:8c:df:3a:47:dc:6d:e3:fb:c6:33:
e1:60:08:fb:69:ee:b0:d0:53:32:ff:c9:81:bc:b3:c7:f7:a7:
22:84:65:54:f1:db:b5:a3:aa:e8:39:f6:3a:70:03:c1:23:12:
27:23:04:ca:ef:97:27:18:34:b7:eb:f7:5e:0c:a9:de:15:48:
63:14:5a:43:0a:03:53:a6:4f:03:23:a8:53:30:fe:fb:fa:c5:
6b:5f:42:e9:df:c7:26:05:63:d4:54:86:f1:ff:fd:5c:77:0c:
f3:b3:fd:75:bf:5e:2c:2d:d1:ac:eb:2a:3b:3d:68:5f:d2:70:
67:25:53:f1:bd:7d:18:d1:6a:0e:07:d1:18:97:eb:64:f8:b1:
98:c4:3c:59:1d:75:c7:26:18:aa:99:57:08:b6:2f:c1:2c:16:
49:29:a4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:03:02 2025 by rpki-client