Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
File: lfdgXoUMnb8X2vC6OONvzGPCy_o.mft (raw, json)
Hash identifier: 8R0nXrnIIqkMq6BsvtZMZOgHGxzwtpo30gbnrpzTIrQ=
Subject key identifier: 66:BB:4C:95:A4:ED:89:FE:5E:05:9B:1C:E9:60:1A:DA:47:E6:CB:74
Authority key identifier: 95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA
Certificate issuer: /CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa
Certificate serial: 01967EA13857E7B3298C67A1531656FDE42B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 23:00:16 +0000
Manifest this update: Mon 28 Apr 2025 23:00:16 +0000
Manifest next update: Tue 29 Apr 2025 23:00:16 +0000
Files and hashes: 1: 5-Dy59i1_U0ZRMyz_6apK6err6E.roa (hash: HTKVf7q+nYn6Qr/j/qsCTy9hUzuLpJ7dJx3pfn4b6GM=)
2: lfdgXoUMnb8X2vC6OONvzGPCy_o.crl (hash: BP8wpCSkpX9MenafGwUw0SaVlrp32lQaQfMFHwHDQpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:38:57:e7:b3:29:8c:67:a1:53:16:56:fd:e4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa
Validity
Not Before: Apr 28 23:00:16 2025 GMT
Not After : Apr 29 23:00:16 2025 GMT
Subject: CN=66bb4c95a4ed89fe5e059b1ce9601ada47e6cb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:e3:95:88:34:6f:3f:cc:38:9c:f5:98:d5:
78:b2:d6:20:86:f9:e3:b1:07:f6:7b:c2:43:cb:8d:
4d:69:9b:e7:4f:3e:c9:05:fb:2a:d4:72:31:0d:75:
83:d4:d2:da:04:8f:c7:e2:07:e2:d8:bf:22:17:72:
ca:1f:dc:fa:b7:27:a0:e9:df:6e:81:82:c6:98:9a:
f9:5f:92:0c:ca:f8:17:03:85:75:1d:ed:d7:47:f7:
6d:f4:91:ea:04:d2:a9:a6:c2:75:13:63:09:8e:15:
52:dd:84:b8:a8:ac:c1:4c:b7:1c:87:44:33:19:28:
84:cb:5c:b1:6b:ec:27:d9:54:77:dc:a4:ea:3b:53:
7e:40:00:d3:98:c5:17:45:be:dc:e0:ae:28:22:6f:
44:f0:fb:3c:d8:a2:22:e8:75:f4:7a:e1:ce:ff:0c:
46:c6:5f:62:9a:96:ea:30:44:e4:a2:c8:d9:d0:82:
80:4b:e9:5e:97:5e:30:4b:7f:da:ba:7f:8a:54:6d:
aa:4a:f0:4b:09:d3:d5:b2:d2:d5:23:b7:a5:7f:39:
7f:1a:38:a8:e3:52:ae:0a:c6:06:4d:a2:26:14:3f:
ae:3f:ee:1b:1d:56:9d:5e:3c:ab:be:7b:a2:74:44:
90:f4:c3:00:d4:17:de:6d:fb:ce:95:6a:ff:0a:8e:
1a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BB:4C:95:A4:ED:89:FE:5E:05:9B:1C:E9:60:1A:DA:47:E6:CB:74
X509v3 Authority Key Identifier:
keyid:95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:41:3f:53:eb:c5:39:c4:a9:91:4b:ec:14:31:29:49:80:d1:
04:d9:af:c4:b6:0d:bb:d7:e3:6f:1b:83:a6:1b:50:6a:aa:79:
d4:53:64:3d:d9:ee:78:39:c3:db:ed:42:34:e3:6c:40:07:c9:
5e:e3:05:ce:00:9c:f8:ce:7b:8c:20:1b:d8:cf:0a:d3:90:91:
30:f8:e9:7d:68:07:0a:e1:4a:8c:2f:0e:9b:c8:78:f7:33:0a:
e5:91:50:13:c4:d1:2c:f5:79:b5:ae:54:2b:83:d9:b9:0c:74:
28:93:1d:ab:85:c6:98:77:9f:f5:eb:e7:f0:84:10:32:85:9a:
81:46:f2:c3:78:81:c1:40:65:0e:63:bc:a0:47:86:d9:d5:83:
2e:6f:bd:10:af:7b:25:e7:b7:ea:31:3c:64:7c:46:b6:52:bd:
33:58:de:15:56:b2:94:32:ed:fe:dd:00:ec:93:ff:ee:51:06:
16:51:73:f9:bc:4f:c4:71:ad:7b:21:61:8e:13:43:e4:f5:5b:
8e:be:c1:49:77:56:f9:82:6d:9c:13:77:75:59:2f:79:fa:52:
e9:8e:c2:41:44:5b:f8:7d:ab:38:06:cb:8b:07:4b:ba:12:b2:
8f:a8:ec:55:f7:ff:3c:46:85:b9:4f:46:48:dc:26:ad:a0:74:
a7:1c:85:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:22:17 2025 by rpki-client