Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
File: LS-TOfu4yzPFInUcUw86IKdTVHw.mft (raw, json)
Hash identifier: MOdvgl0J9R2Y94VY84qFTRNjETOg9/sXK796ANt6Ido=
Subject key identifier: 8C:18:20:44:E7:B7:71:A3:5A:1C:50:78:26:D7:92:93:AF:34:40:A4
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 019681D92D200ACCB22BA13BC69D6C64704A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 14:00:15 +0000
Manifest this update: Tue 29 Apr 2025 14:00:15 +0000
Manifest next update: Wed 30 Apr 2025 14:00:15 +0000
Files and hashes: 1: 2BM9QIgRxE_2RcNn9hahHozcEmo.roa (hash: 3yXUEMFWg/c9hZJEpu11jBt9UvzPYALdkLQvaRnOdJg=)
2: LS-TOfu4yzPFInUcUw86IKdTVHw.crl (hash: WqXZsVaDgLrmkOKRZMIE1XI53BSARt7XOUuKQojeCWE=)
3: r_5d7ThCv4Vhv8YC1BU6003bgwY.roa (hash: P9T8vj8+Q2LopXTSLJaRKiIagzilgVpc+FYXPQ5RHYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:2d:20:0a:cc:b2:2b:a1:3b:c6:9d:6c:64:70:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: Apr 29 14:00:15 2025 GMT
Not After : Apr 30 14:00:15 2025 GMT
Subject: CN=8c182044e7b771a35a1c507826d79293af3440a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:13:d3:0b:94:eb:54:7b:6a:ec:56:64:df:
b5:82:7b:65:a8:df:14:6f:38:d6:06:47:b2:d3:18:
f3:81:70:da:81:59:ca:13:0a:ca:91:e7:12:52:9f:
c0:f8:7f:96:05:57:0a:47:27:5b:e0:6f:e7:4f:40:
46:91:75:c1:04:18:fe:f8:29:8c:2c:3f:91:31:d0:
2a:75:0d:13:a8:42:d8:b4:cb:6a:50:92:4f:d9:b3:
48:59:40:05:90:7a:80:01:1e:7e:1a:26:37:ce:12:
0e:f1:d7:f4:fc:56:82:09:89:32:13:30:14:e7:23:
a1:ae:84:b1:18:6c:a4:27:f8:1a:68:05:71:15:99:
62:cd:6e:21:e2:a4:49:6b:52:c1:0a:c9:65:36:4d:
b8:48:c9:49:da:82:b2:7d:45:3f:e9:f2:b1:e1:d8:
b8:ce:1b:91:39:50:ec:40:64:f2:b2:2e:53:bd:8d:
51:f6:75:ee:d6:01:6a:32:fe:26:40:45:09:b4:ac:
3c:6c:45:69:f6:97:1a:54:1b:25:eb:8e:b9:d4:2d:
a7:fd:1a:02:8f:ed:cc:c8:94:18:7b:7a:d3:c1:94:
9c:63:32:bf:49:ee:d4:86:3a:e0:c7:c0:45:b2:0a:
c6:dc:2c:a0:4e:73:2d:71:19:7d:03:b2:0f:66:04:
93:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:18:20:44:E7:B7:71:A3:5A:1C:50:78:26:D7:92:93:AF:34:40:A4
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fb:e4:79:ed:25:66:51:59:bf:85:1d:fd:c7:ca:9d:6c:17:
52:4f:60:da:cd:bd:dc:72:1f:c5:a0:68:51:59:88:62:2f:bb:
ad:b0:01:52:12:27:77:7b:76:f4:7b:bb:42:5d:b8:fd:64:2f:
db:ed:a5:86:63:0e:3d:98:70:b8:8b:62:0b:e1:04:ff:b3:cd:
03:ae:60:9e:67:18:64:09:51:cc:63:b7:8b:47:e1:20:e3:7a:
b9:2c:b1:59:fa:f3:2a:e9:04:21:0c:ed:5d:91:eb:e7:b0:52:
e1:e1:14:e9:9c:b6:44:e8:fc:2d:1c:f0:e2:2b:42:83:7e:89:
84:b7:34:a0:57:7d:fc:b5:9a:e9:bc:d0:e4:7b:f9:4c:f3:bc:
06:70:3b:07:cc:72:b7:1a:47:e9:ea:bd:e5:54:d2:8f:8c:b4:
f6:28:6b:24:2c:85:36:76:49:29:c9:12:d1:61:92:c1:74:32:
c0:53:cb:78:4d:76:54:a5:6a:b9:ef:3c:b3:57:26:f8:26:c6:
bf:2d:65:ee:10:cf:a9:4f:c2:2e:8b:07:9a:e4:12:04:e0:c9:
3e:94:83:19:00:ba:bd:44:70:c0:98:19:76:a9:41:54:90:cd:
82:18:91:45:57:7c:88:95:21:3f:a2:6a:54:89:6f:51:d3:90:
df:60:af:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:40:27 2025 by rpki-client