Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
File: LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft (raw, json)
Hash identifier: WqqrO7McqSlvA8nj9t1tPPSEFvj93uGaV4lMhuWggM0=
Subject key identifier: 25:B9:9A:6E:51:C5:B4:6E:8D:73:63:CD:D7:1F:D6:E6:1F:88:40:FE
Authority key identifier: 2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
Certificate issuer: /CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Certificate serial: 0196753085E6205EA7E5BD8F4E0C1A354568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
Manifest number: 0444
Signing time: Sun 27 Apr 2025 03:00:36 +0000
Manifest this update: Sun 27 Apr 2025 03:00:36 +0000
Manifest next update: Mon 28 Apr 2025 03:00:36 +0000
Files and hashes: 1: LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl (hash: kju8KMEobEFqR2onkKKps17fjumrIGpMlfZzmNREfV0=)
2: sL3129FsiQ9EOiD-6Y-oRWZ0HUI.roa (hash: OeP8VcF7txOpzsrTuc07O34NirN/Zqlu2vZ40ZPG7ls=)
3: vnYIdpkDdS6bRMveVXglLZHbY50.roa (hash: RbsMHBbR5PlZx+oytvnpiwybpf9Mt1fYmOVDql1MbsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:85:e6:20:5e:a7:e5:bd:8f:4e:0c:1a:35:45:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Validity
Not Before: Apr 27 03:00:36 2025 GMT
Not After : Apr 28 03:00:36 2025 GMT
Subject: CN=25b99a6e51c5b46e8d7363cdd71fd6e61f8840fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:89:85:4f:42:0b:30:e2:1e:36:f2:30:4a:40:
6e:36:f9:1d:be:64:ca:e5:2c:89:cd:be:d4:e3:c4:
1c:8f:2f:a5:2c:e1:96:c2:5a:1d:c8:2e:83:a2:2d:
75:86:7b:4f:51:32:8a:b2:d3:ec:fe:a2:9e:c2:56:
5a:65:bc:70:c6:68:78:ce:5d:16:67:c3:00:a7:f4:
30:37:39:3d:e3:bc:7e:90:34:53:0e:09:53:57:91:
2a:8a:b5:23:75:45:7c:af:d7:7c:de:74:51:d8:fc:
bc:5d:ee:18:24:dd:a3:dc:f7:67:9a:43:0a:fd:29:
15:1f:de:4a:59:35:c4:79:9f:e4:e5:7e:fc:ed:22:
c9:41:9e:58:82:cd:69:17:66:a5:7f:8c:96:32:4e:
f4:51:e9:5f:72:a8:99:d9:df:08:60:76:c6:66:a5:
3b:38:1d:89:c7:5d:1f:43:f2:32:d6:d5:45:bb:18:
48:d2:52:a9:c2:f8:bf:7e:e1:8b:fa:13:8b:95:cd:
b0:12:a3:77:dd:a8:8b:28:7c:1a:c7:ff:96:59:73:
86:d1:e2:c6:14:90:02:9d:05:bd:8a:53:a9:59:7d:
8a:4c:e7:c5:f4:53:35:d2:d5:6c:b7:8a:22:f4:64:
4a:b0:89:48:88:4b:17:b7:f4:21:8d:aa:f4:2a:a2:
77:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B9:9A:6E:51:C5:B4:6E:8D:73:63:CD:D7:1F:D6:E6:1F:88:40:FE
X509v3 Authority Key Identifier:
keyid:2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:45:ba:4d:42:74:e3:4b:60:16:a1:60:61:ed:16:8c:a6:8c:
54:07:95:86:c0:58:2a:03:10:95:63:b5:2b:c0:3c:c1:84:e1:
87:74:21:f1:be:db:2c:43:99:49:b9:3e:e1:ad:0b:49:a4:d2:
61:6a:22:7a:58:e2:42:8b:8b:33:9f:80:68:0c:4b:49:9c:9b:
89:f3:4b:02:1b:a4:ff:74:b5:8e:45:37:ac:d8:f6:2d:db:e0:
7e:8e:f8:5f:4f:39:2d:f2:05:2e:9e:b3:9f:cd:64:18:67:70:
6c:de:08:70:5f:f1:02:ce:97:25:f1:6e:45:07:86:d7:f6:d7:
80:f5:56:d7:c4:7f:db:f6:42:9d:2b:44:46:96:8b:a6:4d:a1:
68:3c:06:89:0d:5c:63:97:6e:de:45:cd:bf:38:83:64:48:4a:
cf:d1:2b:f0:3e:24:d0:f5:3d:68:f4:ae:54:7c:f1:ad:7b:8b:
72:d8:e6:a8:b6:2d:ed:b3:0c:e6:da:65:c2:49:97:81:0f:4d:
b1:58:95:de:28:df:be:65:1f:be:8e:3e:4c:b6:76:0b:99:aa:
18:da:b1:22:3e:59:ce:ef:53:12:59:bd:df:78:ba:5f:1c:88:
00:db:63:a2:96:f2:a6:1c:06:fc:92:b9:46:bb:b3:ef:ac:0d:
6c:09:09:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:40:43 2025 by rpki-client