
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File: lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier: gLXVj6xuQeYU1Y2zff9yYYj4yFF6RYVKpyhNN2TUG54=
Subject key identifier: C0:E5:21:65:CF:F1:15:B4:E0:C6:A6:FA:26:A8:67:BD:1E:A7:FC:40
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 019691BA3E24805136F4CE60E12297886FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number: 11EF
Signing time: Fri 02 May 2025 16:00:23 +0000
Manifest this update: Fri 02 May 2025 16:00:23 +0000
Manifest next update: Sat 03 May 2025 16:00:23 +0000
Files and hashes: 1: 1jamJZhJQCxnBF2gQL6E1EEMOTA.roa (hash: kBKBG2m2NE0a6jTDEjeZmk4l4aHSEPbRY7SVjCst1XE=)
2: 6uBRMAdPwa-lKO2ylO9DlsGgsHY.roa (hash: +m2JD+JFXF9SBNg+lpjDT6mDr6YnDMqmBejWjKgStAQ=)
3: VRYfwJddtKzQsHE8MbAEFYO6ZHo.roa (hash: EYXXmNlMh3UrU0hKdU6hQ+CFn2MC63mGZvBuDrRNCLw=)
4: aQ92mv4OX0TrGXRhoE4qVRj9Lwg.roa (hash: Sn7Iy1mnHMRUkHR2YiOO0Z7B9rvVJ+lItzyRTfMio1A=)
5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: Jy6r5sMYHpBm2XJP8MDdlhksomIRE1DoDPBLwGLNY2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:ba:3e:24:80:51:36:f4:ce:60:e1:22:97:88:6f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: May 2 16:00:23 2025 GMT
Not After : May 3 16:00:23 2025 GMT
Subject: CN=c0e52165cff115b4e0c6a6fa26a867bd1ea7fc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:49:56:89:14:5e:ee:f9:64:ac:9b:8c:52:
e8:3e:95:a7:13:3d:32:ee:18:e2:95:61:14:17:97:
5e:e1:64:07:83:78:96:7c:f1:25:c9:5c:7b:44:46:
2d:aa:77:f6:4b:c8:a8:2e:2f:8a:04:2d:6f:28:ba:
ca:36:ab:5c:33:ed:7e:c7:a9:f9:44:27:d0:a3:ac:
e8:cc:36:41:92:04:f6:73:9a:81:be:8b:a1:b3:24:
5f:37:77:d3:1a:8f:21:7a:a5:21:e8:dd:09:4a:90:
1d:45:59:a0:ea:d5:c8:cc:9e:34:0b:2e:b3:2d:2a:
f1:f6:2f:9f:7b:80:b2:ff:aa:6c:cd:bf:43:4f:20:
d6:52:5c:91:fe:0f:57:fb:70:91:8d:4b:59:c5:5f:
5d:6f:3e:7b:a1:3f:f0:27:33:00:af:f4:6b:b1:3e:
70:f5:85:05:6c:c4:1d:16:bb:fc:8e:20:5f:6b:11:
2e:f7:de:b2:3c:80:4c:53:82:59:62:0a:11:9c:97:
39:11:35:09:84:f2:75:6e:2e:03:84:6e:1c:78:11:
cc:f8:50:c1:53:78:d5:fe:ac:f2:96:10:9e:c4:bc:
a1:74:a8:fb:cd:8f:62:75:5c:8f:07:aa:1f:47:e5:
2c:d7:da:7d:64:90:5a:2b:b1:86:03:64:73:cc:9c:
b4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E5:21:65:CF:F1:15:B4:E0:C6:A6:FA:26:A8:67:BD:1E:A7:FC:40
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bd:9c:04:0e:b1:89:a2:11:33:03:7e:97:ce:6c:45:0c:d5:
e8:6b:c3:38:d7:67:14:72:f9:ef:d4:99:51:96:d0:90:dd:f7:
4b:71:55:e5:6f:12:7d:ed:e9:1f:2d:5b:ef:c0:42:58:60:6e:
1f:fe:43:41:83:c3:40:31:d4:2e:0f:d6:fe:c6:54:69:68:f1:
f1:da:64:96:f5:3b:e3:12:60:0a:10:87:ff:f5:57:83:81:ce:
71:68:8d:be:62:53:47:8e:bb:06:49:90:e8:91:56:92:42:14:
21:01:33:f9:0a:0d:a2:56:49:28:3d:50:a2:c7:25:6d:6d:68:
5f:b8:72:02:bf:63:1a:c9:f2:15:c3:fd:1d:aa:dc:18:90:d4:
42:85:46:42:e6:85:ab:6d:b9:68:75:0a:85:40:af:f3:b3:90:
74:d1:6a:4a:18:c6:b8:53:8d:d0:ba:c7:0a:09:2e:8a:8b:9b:
18:8f:a9:20:3c:82:3e:70:49:ce:b1:bd:74:a8:44:ba:fd:46:
3b:1c:68:64:9c:15:b6:f1:b3:0d:0e:58:86:a7:e1:36:1f:60:
09:e9:34:60:c0:48:11:f3:36:1d:94:4e:22:d9:3e:71:ee:b5:
73:a8:82:c7:1d:1a:a6:87:71:16:30:2e:4f:56:66:2c:2f:99:
c1:c8:db:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:25:52 2025 by rpki-client