Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
File: lgxteH5rXrZCSN2aehBlsQU_dFg.mft (raw, json)
Hash identifier: OCkeUvxpSQv6NB4rjsEDIGNRc2zBNesSPE3zjCRjiSk=
Subject key identifier: 9D:6F:3C:F8:71:EF:DC:67:30:BF:12:0E:41:79:67:48:E0:F8:14:4C
Authority key identifier: 96:0C:6D:78:7E:6B:5E:B6:42:48:DD:9A:7A:10:65:B1:05:3F:74:58
Certificate issuer: /CN=960c6d787e6b5eb64248dd9a7a1065b1053f7458
Certificate serial: 019688809253C86D7E6FF9DA9ED7FC4E4A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
Manifest number: 0C78
Signing time: Wed 30 Apr 2025 21:00:49 +0000
Manifest this update: Wed 30 Apr 2025 21:00:49 +0000
Manifest next update: Thu 01 May 2025 21:00:49 +0000
Files and hashes: 1: kBsht6KNIVIdqBo-LjM3rdj9_48.roa (hash: yvy0FENQOdTgUPrF3X0q20Rd17JBcuTbTmhNZ8raWkU=)
2: lgxteH5rXrZCSN2aehBlsQU_dFg.crl (hash: XqOg9JlW2lB28rADCHaG7KPkE4744N/OtjuYFOhHxDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:80:92:53:c8:6d:7e:6f:f9:da:9e:d7:fc:4e:4a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960c6d787e6b5eb64248dd9a7a1065b1053f7458
Validity
Not Before: Apr 30 21:00:49 2025 GMT
Not After : May 1 21:00:49 2025 GMT
Subject: CN=9d6f3cf871efdc6730bf120e41796748e0f8144c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:42:4f:44:1c:b2:2f:9f:1e:f7:f1:61:a1:a6:
56:f3:6b:7e:71:7f:d7:6c:9e:1b:1a:1c:1a:4b:f5:
96:d9:89:07:d2:db:20:85:8d:44:43:39:04:18:c4:
de:1b:1f:23:77:5b:f3:48:a3:1e:63:60:05:91:c1:
2b:8b:ec:8c:a1:14:12:20:19:8e:d3:e3:ff:5d:9a:
50:0d:04:46:91:08:84:97:fe:41:a5:da:e6:71:1b:
66:9c:46:43:b7:e9:6f:aa:69:39:7c:f5:6b:3b:f2:
d9:c1:d3:54:5b:a3:83:9a:b4:0e:91:41:48:1a:4c:
ad:66:99:41:95:d9:56:91:62:20:28:ff:4c:f2:e2:
55:ae:f5:2e:39:62:82:ec:84:e7:4e:fd:9a:ae:9c:
bf:2e:c1:58:cb:8a:c1:f3:7a:a6:bf:6b:2a:80:df:
ae:a7:e0:a2:e2:a2:27:15:dc:c7:e9:5c:4f:9f:94:
02:3b:ba:29:c7:95:ac:ed:e3:17:f8:70:1e:4b:f9:
f5:93:ee:85:54:e2:6c:38:1a:a2:6b:71:0b:5f:b1:
a6:e0:67:db:9e:71:ad:b8:eb:35:60:73:b8:d5:91:
63:45:5a:1b:66:c6:7f:93:24:22:3e:c8:2c:a8:97:
09:44:31:cd:9c:1b:16:04:ea:82:47:1e:a1:6d:3b:
5a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6F:3C:F8:71:EF:DC:67:30:BF:12:0E:41:79:67:48:E0:F8:14:4C
X509v3 Authority Key Identifier:
keyid:96:0C:6D:78:7E:6B:5E:B6:42:48:DD:9A:7A:10:65:B1:05:3F:74:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a8:c4:74:08:70:02:9a:aa:e1:e1:89:96:b0:0d:02:e3:cf:
3e:4f:45:d7:7d:30:5b:36:3b:20:56:76:e6:d8:40:c7:15:3a:
e2:cd:1e:78:a6:42:e4:7f:0e:9f:06:62:48:e7:32:b3:55:c4:
b9:c4:77:2f:8c:13:14:97:d8:ea:99:2c:98:ec:3e:b7:97:ba:
fa:66:78:52:08:8e:f5:78:08:cc:3a:0d:45:4c:50:db:4c:71:
90:42:e3:b6:27:44:e1:7e:f1:3c:9b:78:62:00:a7:5a:60:96:
d6:47:6e:b1:3b:f1:63:dd:e9:1d:1b:ac:10:18:5a:c6:ca:83:
5b:41:5a:7d:d7:44:50:4a:62:79:93:aa:06:f7:82:3c:58:fc:
7d:d7:72:9b:81:cf:93:7d:35:c5:be:36:01:8a:47:22:a4:79:
cd:23:ed:dc:83:4f:bc:42:89:30:e3:47:dc:2f:14:21:85:0b:
32:15:74:42:03:99:f6:f3:32:ce:a4:25:0e:bc:5a:ee:16:24:
74:de:8e:c2:ae:8e:ae:c9:f7:f0:62:1c:2b:a4:15:c9:e0:86:
71:61:78:d7:9e:38:7d:93:d4:b8:a6:cb:25:47:b5:90:2d:e7:
18:67:c8:7d:14:81:cb:86:f2:6a:d9:b0:cd:c3:86:f6:4c:66:
25:47:3c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:36:57 2025 by rpki-client