Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json)
Hash identifier: 3UbN5pCUhX7vXSi0wuCEPawywODKTrnVTCU/cfK+tgo=
Subject key identifier: 3A:E1:60:41:F8:38:8E:B1:87:9A:B4:42:20:13:4C:1C:CA:CD:AF:48
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial: 01967DC60A7F1B8CE62A4A9FC827FF574D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 19:00:52 +0000
Manifest this update: Mon 28 Apr 2025 19:00:52 +0000
Manifest next update: Tue 29 Apr 2025 19:00:52 +0000
Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: PA/qm/3IKNmWxD57rV0s8FjltLMaHwd9Z3ZrqZeaPa0=)
2: kjwnML0mSPBrVonITqtrTUWVW-U.roa (hash: +gir3l/WZlaa1zrGjWAyGJFwWfxqHFLzZc0IFiaqV1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:0a:7f:1b:8c:e6:2a:4a:9f:c8:27:ff:57:4d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Validity
Not Before: Apr 28 19:00:52 2025 GMT
Not After : Apr 29 19:00:52 2025 GMT
Subject: CN=3ae16041f8388eb1879ab44220134c1ccacdaf48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b9:db:06:e9:42:eb:a2:49:d2:9b:9c:f7:1b:
dc:55:31:c9:a2:23:d6:5b:52:70:9a:42:26:99:0b:
fe:72:18:34:e5:bc:6c:41:2d:36:0b:d4:78:be:89:
77:5a:ed:13:6a:68:28:e1:ed:0d:2f:eb:dd:90:dc:
e8:0e:4a:08:d8:4f:55:85:b9:77:95:94:cf:00:cd:
95:39:01:e7:63:f0:06:76:e7:7e:93:97:ed:31:95:
72:e1:0d:bd:e1:68:1a:56:65:cb:57:8d:a2:9b:e3:
c0:7d:71:fd:66:42:8e:31:4e:ba:2e:1d:b4:e9:b2:
a0:e4:cd:e5:90:bb:6d:e0:cd:c3:88:51:e2:43:25:
67:c9:58:d6:ad:f4:e3:13:1b:aa:7a:fc:82:0f:85:
2a:52:7b:f5:13:61:5f:fe:2e:8d:fe:31:26:bc:03:
f4:aa:e0:ef:bc:43:db:b2:dc:6f:69:82:78:de:9d:
cf:b4:b6:bb:70:ce:03:2f:b6:ab:b4:5c:e6:a2:80:
17:3f:85:85:52:ae:ad:21:8d:a0:1d:ed:0d:c5:5a:
65:c0:7f:5e:4e:23:60:a4:5b:78:45:dc:b1:0b:21:
11:bd:89:9e:b9:d0:88:53:1a:94:48:99:72:da:cd:
a2:53:c7:c7:07:f2:e1:67:b8:70:9d:d3:6a:35:c1:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E1:60:41:F8:38:8E:B1:87:9A:B4:42:20:13:4C:1C:CA:CD:AF:48
X509v3 Authority Key Identifier:
keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:61:04:f3:ff:bf:dc:9f:a0:74:e2:2b:a0:23:ae:77:32:2e:
48:27:4c:da:d9:bc:dd:05:8f:27:d4:d6:ca:49:a5:00:c8:34:
8a:1d:99:3f:f0:70:b6:89:92:6f:12:cc:0e:5f:3e:7f:1d:ee:
d0:ba:a9:03:a8:45:f0:38:92:60:cf:80:4b:ee:3a:ef:00:c6:
a4:ca:3f:2a:43:bd:b0:52:65:b6:62:d1:cb:c9:71:9e:a3:63:
d1:9b:0d:8e:3b:0a:29:35:cf:13:22:fc:95:d2:f4:5f:56:54:
a2:13:93:8d:af:1f:fa:7c:dc:90:c8:5f:1d:c9:9b:f9:3d:ff:
e4:35:8f:1e:64:91:c5:24:21:b2:ee:f2:74:80:66:21:e2:6f:
ca:97:ea:20:aa:a1:ff:bc:f8:87:8c:62:88:9d:26:f3:5d:e9:
2e:5d:65:66:d8:22:3c:5d:7f:55:fc:14:d7:5e:cf:bc:2d:c7:
39:9a:e1:d0:c1:aa:c2:44:7f:0f:b4:f5:13:f6:c3:03:47:48:
b8:00:72:46:94:41:94:ce:73:94:79:a9:94:aa:b3:7f:d8:ef:
0e:50:85:c5:82:67:aa:b8:7d:47:0b:de:c5:38:e8:9e:3e:be:
a0:19:89:69:ed:0b:d6:53:d7:ce:37:5f:a4:7a:e5:22:a1:f3:
1f:4d:58:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:01:52 2025 by rpki-client