Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json)
Hash identifier: 0YPR+feYMrxPrLMpGwBP2gtY6BwpaoT36vdJIwnVCDM=
Subject key identifier: C4:84:62:29:77:82:88:5F:AC:10:E2:DC:29:DF:1B:3F:23:88:6D:12
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 019675303E270C77F45045738C37C557EBD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 03:00:17 +0000
Manifest this update: Sun 27 Apr 2025 03:00:17 +0000
Manifest next update: Mon 28 Apr 2025 03:00:17 +0000
Files and hashes: 1: dYkQua5WhbFXO1rro2ZBTmTi5ak.roa (hash: 7+ifBlco706sKWOweWSkXcCzg5XIlet661PdjQ3A/uE=)
2: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: 1injXHp4ClDxRWRNYCaCBScXQXg+AQxw7OEj3BdwYaw=)
3: qrJ2-0cTvD-M2EZlQRWwfc9W0ek.roa (hash: 4bA9jmULg0CvGkkToEtHl5uaDxzTVZEhsLwmhxwDpEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:3e:27:0c:77:f4:50:45:73:8c:37:c5:57:eb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: Apr 27 03:00:17 2025 GMT
Not After : Apr 28 03:00:17 2025 GMT
Subject: CN=c48462297782885fac10e2dc29df1b3f23886d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:0a:c6:c5:0c:9d:46:2b:eb:5a:ef:9a:f9:
d8:a2:56:87:ce:06:51:69:97:fc:3c:d1:d6:db:03:
2e:77:c0:f9:3d:aa:50:00:42:0c:7a:fb:cd:64:62:
3d:75:d5:d4:13:ff:73:95:e7:0c:08:97:5c:1a:21:
46:50:88:ea:60:93:7b:1c:51:e1:18:85:4c:15:0b:
f1:0c:b0:33:7a:3f:80:54:76:f7:92:85:35:dd:5a:
aa:75:65:05:be:1f:ca:0d:5b:3f:35:9a:dd:64:b2:
ba:c9:70:79:fa:ce:95:97:96:5f:0b:10:ff:0c:ea:
38:67:be:d9:2a:d1:97:80:c2:8e:f8:ab:34:4f:2a:
6b:f0:0b:fb:2a:e4:55:7d:74:f6:8b:93:b8:c6:88:
94:72:2a:7f:25:cb:28:40:97:dc:3f:06:6b:d6:df:
33:e4:98:8d:33:1b:f3:54:7f:25:e2:49:f5:e8:f5:
4d:be:28:88:d0:85:75:7c:2c:af:4e:72:e1:9f:87:
f9:aa:e2:f3:0f:0e:7f:d0:ea:c2:7a:bc:99:2d:5c:
b5:90:2e:4b:84:ce:ba:d2:f2:0c:bb:4d:3c:63:3f:
9f:1a:af:d4:67:b1:4d:56:8f:11:a8:ca:7c:90:83:
39:52:ec:47:1d:fc:76:3a:dc:b8:2d:14:23:63:ab:
af:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:84:62:29:77:82:88:5F:AC:10:E2:DC:29:DF:1B:3F:23:88:6D:12
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0f:db:4b:c0:0b:8b:02:d3:14:e2:34:04:ed:94:0a:04:06:
10:b0:88:7a:f6:9f:69:72:0d:c0:15:3f:59:f9:98:2d:22:90:
1e:8a:d6:f8:38:d6:a6:7d:41:83:59:5b:c3:6f:d2:fa:d6:5c:
81:84:2a:e2:06:01:af:2b:cc:63:df:d8:00:3d:2c:03:f8:26:
46:a8:6b:49:24:ab:10:37:be:8c:ba:ce:08:b3:ec:5c:67:da:
b5:21:b1:90:73:6d:17:50:54:38:62:f7:73:79:97:08:33:7f:
f4:5d:58:7a:40:63:3b:5d:29:61:1f:1e:34:8f:79:99:88:f1:
15:91:ff:ab:67:8f:83:6e:b1:26:d6:aa:02:4b:76:bc:6c:be:
8b:0d:8d:da:3f:56:c7:ab:14:59:52:4a:a1:7d:21:97:1d:8e:
66:3a:91:f8:a2:df:13:73:f2:97:56:c4:b9:69:4d:25:03:19:
bf:7a:66:30:00:34:03:8f:63:78:3f:63:dd:8d:28:48:53:54:
17:94:35:4d:88:44:d0:e8:d1:c4:67:24:b9:ac:d4:fb:02:2d:
88:14:6f:ec:c4:da:4a:25:3c:71:f7:ac:a9:f3:e1:9a:0d:01:
d9:3d:6d:c2:24:09:75:99:37:b2:ab:44:a3:5f:01:0f:e2:8d:
a5:ce:f8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:26:29 2025 by rpki-client