Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
File: LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft (raw, json)
Hash identifier: Znm+i8fCZEy6sxjPR7brcni1YUlTtxeEqONJ1bQlP1A=
Subject key identifier: 1E:00:EF:58:14:F7:6A:EA:F0:00:0C:CD:FD:8F:28:24:16:F8:B4:F0
Authority key identifier: 2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
Certificate issuer: /CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Certificate serial: 0196760CAA783E806661BDF2975E4A6D61DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 07:01:03 +0000
Manifest this update: Sun 27 Apr 2025 07:01:03 +0000
Manifest next update: Mon 28 Apr 2025 07:01:03 +0000
Files and hashes: 1: Jc6JT4xshgQRG7HUAK1HtP9BkTI.roa (hash: hCl5v0Z86Jy7+0GlCW+6oKfv2bUVufzYinCdryb0Gzo=)
2: LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl (hash: V7R1eX6BsTcAxcQRJrd34eqHjQqyxzDSwVPDNltHxNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:aa:78:3e:80:66:61:bd:f2:97:5e:4a:6d:61:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Validity
Not Before: Apr 27 07:01:03 2025 GMT
Not After : Apr 28 07:01:03 2025 GMT
Subject: CN=1e00ef5814f76aeaf0000ccdfd8f282416f8b4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:b2:41:02:99:d8:6e:61:95:11:e3:b3:a7:
0f:c4:c7:18:bb:2b:48:ed:00:65:ac:ef:10:98:81:
31:2a:4f:b5:ed:99:da:f9:6d:04:ce:05:73:80:37:
30:20:70:7d:7d:cb:a8:2c:1a:5b:97:f0:04:a4:e8:
06:58:20:f8:a4:da:57:90:53:9c:29:91:7f:ba:8d:
c4:70:4b:5e:57:0a:ac:7c:6f:ca:4d:66:31:e6:3f:
75:94:6e:b3:92:7d:19:05:d1:18:93:8f:60:75:39:
f6:88:09:54:28:b0:48:11:f1:f4:c1:d9:a3:90:4e:
47:ac:bf:d1:66:53:d2:23:b9:cc:e6:d0:09:8d:b6:
7b:c8:e2:a6:84:0f:38:95:cb:e7:79:d6:e0:29:05:
f5:20:ab:92:ba:ff:9c:4e:38:8a:7d:9a:74:0c:86:
12:95:dc:31:d0:ac:0f:9c:41:10:fd:1b:6e:58:ae:
66:02:02:84:9e:28:ee:85:fd:70:f1:bf:91:d3:dc:
78:cc:c0:1e:ec:d6:4e:f6:5b:b7:1c:f5:85:b7:e1:
2f:15:78:cb:52:d8:d1:4d:2d:2e:28:ac:05:31:3e:
c4:20:6e:80:5e:31:dc:05:de:d4:34:0f:18:ff:f1:
34:bf:59:79:bd:78:c8:b3:5c:23:55:42:bf:01:50:
ad:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:00:EF:58:14:F7:6A:EA:F0:00:0C:CD:FD:8F:28:24:16:F8:B4:F0
X509v3 Authority Key Identifier:
keyid:2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:dc:80:3d:86:bd:2b:62:58:c4:14:40:e7:cb:de:cb:1d:65:
a6:53:ac:3a:bc:8d:90:17:d0:48:38:a0:c9:52:dd:dd:ed:b0:
12:77:dc:ca:95:86:f7:7b:ff:e8:97:b3:3c:98:69:29:ae:a2:
e4:e1:d8:70:e0:d6:8c:36:93:52:bf:20:61:33:fa:ea:40:dc:
b8:97:58:ed:cb:d3:3f:0e:71:ef:07:a5:98:72:29:a4:3e:cf:
bd:c7:53:b9:ff:00:d7:3b:b6:f3:88:35:8b:70:3c:88:30:b7:
b8:d9:39:ae:59:92:1d:a2:14:c3:d4:25:e1:6a:05:28:c6:a7:
c5:2b:b9:f7:e6:96:22:46:bc:51:7e:64:a7:b2:21:79:8a:14:
42:90:70:b4:72:f1:3b:2b:9e:71:9e:2f:fd:a7:78:2c:1d:92:
02:a0:15:ec:04:d9:aa:08:08:39:bc:05:11:54:14:48:db:23:
98:2c:af:9a:ec:58:7d:9d:df:9d:b4:fa:bd:69:aa:f9:ce:e6:
0a:e7:a0:9b:e2:9a:de:1e:f9:8b:6b:9a:21:37:33:ce:c6:2e:
98:41:d4:1f:2f:39:71:d6:b3:8a:1a:d8:6b:95:f8:f7:44:90:
46:d9:f4:60:90:1f:98:13:f1:9d:76:1b:50:b7:d5:80:08:85:
fc:dd:fe:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:11 2025 by rpki-client