Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
File: LgO_8-c1I3MjiWRkff2JOyajs0k.mft (raw, json)
Hash identifier: XT2SiKymo/2OvLg4pXtOpw7CUyaaQXyR/E02dRx9Hiw=
Subject key identifier: 7A:4B:B8:59:A6:34:10:D1:5C:76:2B:0C:40:B9:AF:76:67:20:91:CE
Authority key identifier: 2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
Certificate issuer: /CN=2e03bff3e7352373238964647dfd893b26a3b349
Certificate serial: 019676E81B8F9B20A85174E95DDA3BA0155C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 11:00:44 +0000
Manifest this update: Sun 27 Apr 2025 11:00:44 +0000
Manifest next update: Mon 28 Apr 2025 11:00:44 +0000
Files and hashes: 1: 4Ks29m0KEvqQ2u_x82i2_AGUJYc.roa (hash: LAlVvGEw43G7VBWh8V8Fzw/Vs6vev/GRjzgqnNcn5CU=)
2: LgO_8-c1I3MjiWRkff2JOyajs0k.crl (hash: GNgiFZbhROSB1F+L3A2jMvqMvLWegFO9ZJJw3ymLAOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:1b:8f:9b:20:a8:51:74:e9:5d:da:3b:a0:15:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e03bff3e7352373238964647dfd893b26a3b349
Validity
Not Before: Apr 27 11:00:44 2025 GMT
Not After : Apr 28 11:00:44 2025 GMT
Subject: CN=7a4bb859a63410d15c762b0c40b9af76672091ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:3f:c2:7a:c7:95:e1:a3:31:e0:f1:27:5f:
df:f3:b9:7e:62:17:91:b3:10:1f:4c:01:72:75:42:
7e:e2:4b:36:55:91:93:2d:6b:34:59:23:19:b7:ca:
6b:17:86:5b:0a:09:13:4d:6f:11:94:de:ad:a0:1e:
76:8d:b2:5a:11:7a:bf:ff:d9:74:6c:eb:70:db:d5:
17:5a:e0:04:f5:75:44:cc:e6:bd:29:21:39:83:b8:
c0:b7:01:1a:86:a9:5f:c3:14:ac:4f:b5:76:f9:bd:
3a:af:ec:46:5d:66:61:b2:55:1e:3a:bb:da:ca:cc:
61:8e:96:1a:ee:98:bd:92:4d:1c:7f:c5:bc:4f:38:
60:4a:e2:63:b1:28:14:4b:2b:6e:b8:47:c7:70:04:
2e:83:68:56:b9:f8:05:97:9e:02:2a:63:32:f0:21:
aa:8f:8e:7a:66:53:cb:5b:db:f3:27:6d:a5:d1:85:
29:f7:83:26:a2:1f:99:6f:4e:c7:4d:6b:4e:e1:76:
af:6a:86:b6:6b:b4:fa:78:7f:ae:6e:82:c1:4a:4b:
03:df:c6:68:09:c2:d0:46:a2:e3:6d:bc:be:6c:c5:
56:66:ad:ea:5f:84:1a:27:06:65:a0:15:10:46:9a:
e6:d9:17:8e:5b:a4:24:1f:d0:82:b3:1e:60:ef:f8:
e0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4B:B8:59:A6:34:10:D1:5C:76:2B:0C:40:B9:AF:76:67:20:91:CE
X509v3 Authority Key Identifier:
keyid:2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f7:f2:ba:26:d0:04:59:d0:80:26:49:9b:7c:5e:3c:7a:87:
50:ab:fe:3e:57:20:70:f1:78:95:06:fc:a2:7e:52:62:f6:d0:
59:e0:19:fa:97:09:9c:d4:54:c9:c0:5e:81:49:70:9a:79:a8:
0d:85:3b:97:61:b6:f9:09:20:73:f8:2b:15:c7:49:3b:a3:8c:
d0:50:38:a0:34:3c:f3:1d:fd:4d:10:ae:e9:c2:6b:fd:7b:4b:
7d:bb:6a:77:f1:14:a2:a2:20:ea:62:63:9a:cc:db:1b:fb:c4:
7a:f2:9d:99:3c:4a:8d:68:22:07:8c:1b:dd:20:69:fa:53:52:
f4:16:95:67:d1:b9:dd:97:09:17:87:9c:46:aa:af:a3:a5:61:
1b:b1:38:85:c9:1a:b7:67:4c:da:cd:fc:ea:3b:45:89:cd:f0:
fd:1b:86:46:93:21:be:ed:a1:e2:df:13:17:2d:ab:11:a3:41:
a0:a6:1a:4d:1c:c6:4d:c2:1c:36:0a:a3:32:13:7b:01:43:00:
b5:ae:d9:a1:46:10:c8:bd:e1:3c:db:f8:62:0e:16:06:d1:01:
dd:74:9a:b2:a6:0a:72:00:2c:d5:74:5b:cf:26:97:45:23:84:
e2:25:32:17:d8:38:9b:85:2b:5d:21:33:29:44:4e:85:62:34:
1b:05:cf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:43:58 2025 by rpki-client