Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: GkqmOYGdZfbFkQTtpqKmiDcAsScLL8EprwJ5mE+RlHA=
Subject key identifier: EE:F6:98:F5:01:6D:A1:4E:05:39:92:C2:97:F9:1F:40:17:2F:DA:39
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 0196767A0F558D97A08FBC5E55221FD9CC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 1002
Signing time: Sun 27 Apr 2025 09:00:32 +0000
Manifest this update: Sun 27 Apr 2025 09:00:32 +0000
Manifest next update: Mon 28 Apr 2025 09:00:32 +0000
Files and hashes: 1: LGVpAvXVwr_XUuW1Ewf10IhBxfc.roa (hash: 3OZo0AzihAddNAANHnnyFlR5uDQooXnrMnBJf8bFoKs=)
2: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: 8D0Otka61tsToLaekCbCvUQndfDi0Mn4TlsZZiO/G7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:0f:55:8d:97:a0:8f:bc:5e:55:22:1f:d9:cc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Apr 27 09:00:32 2025 GMT
Not After : Apr 28 09:00:32 2025 GMT
Subject: CN=eef698f5016da14e053992c297f91f40172fda39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0c:a5:2a:a2:26:17:a9:8f:b4:52:86:40:96:
ce:8b:82:25:05:d1:88:bc:3b:23:59:27:b3:6b:f8:
ba:b0:bd:ea:e7:c8:1b:bc:3b:aa:ba:7b:85:7a:de:
e8:46:22:e3:37:3a:8f:6a:a4:36:ad:ad:eb:27:b7:
a7:77:99:ba:08:00:e3:2f:73:3e:ee:3d:9c:f5:c9:
76:6f:85:69:60:03:b2:13:26:7d:a3:27:33:13:2d:
08:85:a4:c8:f8:32:dc:91:e7:e2:c5:61:9e:73:e8:
50:c1:a0:d5:f3:36:e3:3f:e2:9c:f9:4b:e9:e3:75:
2a:50:5f:87:f4:5e:d0:60:6f:d0:f4:81:93:f8:bc:
fa:8d:ad:d7:02:d1:0e:81:a3:ed:0a:02:89:be:f1:
23:49:ea:ca:25:62:13:34:29:e6:2a:3b:91:aa:af:
26:6c:5d:5d:ff:16:f2:63:d1:79:0a:2b:a7:01:e3:
6c:55:63:94:11:fe:16:fb:be:1f:9a:86:2f:27:b4:
53:67:05:e5:76:e0:52:d0:af:59:02:e4:33:ee:63:
73:81:e8:51:e3:4c:10:5d:fa:c6:e9:23:b8:ac:f5:
3a:8d:a2:98:a2:6a:b5:58:9b:77:84:1c:20:e6:5f:
85:2c:ac:f5:25:07:e1:59:34:ba:48:57:14:b0:ed:
d9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F6:98:F5:01:6D:A1:4E:05:39:92:C2:97:F9:1F:40:17:2F:DA:39
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:95:f4:a0:07:6a:21:3c:cf:56:77:74:7b:90:2a:ba:b5:1a:
22:31:55:4c:f4:37:bf:d0:c7:d0:0a:70:19:42:d3:f2:b3:1a:
37:4b:87:0b:62:5c:2b:e6:cb:7f:0a:06:a9:16:a3:94:3f:04:
82:69:8d:cd:40:7a:ae:b4:57:36:83:69:8e:af:d4:07:e1:84:
81:25:af:48:fe:ad:9a:ca:15:e6:38:5f:5b:ef:17:6d:88:bb:
02:0c:4a:9e:fe:84:1c:32:8d:19:60:57:46:c5:e0:d6:97:05:
7a:49:d4:d1:68:cd:d5:71:ab:be:a9:8b:83:50:74:88:09:32:
10:4f:0b:ea:c5:ea:4a:c4:af:18:7a:a9:70:6a:5c:20:30:f2:
9e:25:37:d1:2d:06:7c:02:19:b0:89:6a:40:66:df:18:2a:39:
fb:86:de:7f:90:20:33:97:6d:ec:73:2c:8b:eb:98:a0:9f:aa:
53:8f:31:e7:05:68:70:9d:88:c8:d0:90:40:72:7c:02:54:57:
d6:a5:5c:d4:21:dd:56:fb:60:3a:20:a0:d0:6f:5f:30:7f:e4:
87:f8:e2:42:36:2f:36:30:07:30:52:94:f4:29:46:8c:8f:81:
75:af:89:6a:0d:ef:cc:e4:d2:69:0d:c4:78:f9:a6:c2:a4:a0:
0b:cb:85:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:26:31 2025 by rpki-client