Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
File: LBKCZbgJkXiNhuImLpM5A4tO-oI.mft (raw, json)
Hash identifier: EYI2aHQ/KKUYib5sC06FB5Um3haWLYARSKBVYHwkKMU=
Subject key identifier: 40:29:0D:1E:8D:BB:30:30:2D:8F:C0:30:B8:BB:36:14:AC:94:5F:D5
Authority key identifier: 2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
Certificate issuer: /CN=2c128265b80991788d86e2262e9339038b4efa82
Certificate serial: 0196759E91745A5427F792370107AB223242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
Manifest number: 9E
Signing time: Sun 27 Apr 2025 05:00:48 +0000
Manifest this update: Sun 27 Apr 2025 05:00:48 +0000
Manifest next update: Mon 28 Apr 2025 05:00:48 +0000
Files and hashes: 1: AUJAohDb7gvWp2PAn2xH3z3Zx8I.roa (hash: Px2ndw4EQ+qkKAfeVMR+LtAp8KsmOxSR4KCS0rfVjWc=)
2: LBKCZbgJkXiNhuImLpM5A4tO-oI.crl (hash: 3vTYPz93SWVcuwqzF73A2Qm/cJqhbQ+Mb6nZm1M5NjE=)
3: LTEzdR9zUquR1ggUmA4_QHu2p50.roa (hash: uNuzvFRDaCwMPWv1CbBVSxROhTe6dbQ9XSUinppVNcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:91:74:5a:54:27:f7:92:37:01:07:ab:22:32:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c128265b80991788d86e2262e9339038b4efa82
Validity
Not Before: Apr 27 05:00:48 2025 GMT
Not After : Apr 28 05:00:48 2025 GMT
Subject: CN=40290d1e8dbb30302d8fc030b8bb3614ac945fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:04:69:91:25:14:11:e6:8c:41:65:a2:e3:
08:e7:8c:04:90:45:d3:1c:d2:4f:ca:f7:6a:0b:17:
d5:e2:f7:b2:04:58:3d:ac:6e:76:17:07:92:97:bc:
92:b9:fd:7c:54:04:14:ef:3a:50:b7:39:cd:20:f1:
d7:3a:82:59:f9:59:10:96:a8:10:6e:02:4c:cf:3c:
f2:10:4d:89:79:f0:6b:ce:a9:d6:b6:e7:67:ec:60:
f9:b3:79:75:3b:ce:03:0a:7b:f6:5b:d1:2d:0f:26:
5a:c9:c3:f7:0b:8b:90:8e:29:10:49:b0:71:8b:67:
32:7b:ee:26:05:14:ed:16:7f:a9:89:e4:c5:20:c2:
a1:4b:42:dd:80:30:96:b4:ea:d6:6d:bf:16:72:65:
cf:e4:ba:83:8f:71:7a:80:c5:f4:af:84:30:73:e9:
64:4d:ed:a5:77:c0:62:86:3b:be:9f:2c:bb:d4:63:
58:b6:fd:fa:11:65:87:0b:5b:c5:73:28:9a:4c:ac:
df:e7:f9:7c:ce:90:c8:ab:3b:be:ba:ea:83:d4:82:
9b:9e:37:a5:1c:df:bd:1f:8e:14:17:fc:59:8b:6c:
2f:85:e9:e0:11:08:b5:08:39:b8:a2:77:d6:34:d2:
24:f8:9a:d6:64:44:ad:28:5a:3a:f8:64:12:87:7e:
81:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:29:0D:1E:8D:BB:30:30:2D:8F:C0:30:B8:BB:36:14:AC:94:5F:D5
X509v3 Authority Key Identifier:
keyid:2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a6:b2:65:65:0e:a7:13:7e:2f:c2:e6:d3:b8:16:27:88:b8:
cb:e7:69:eb:4c:ed:dc:c6:14:36:96:60:41:e1:06:8f:30:cc:
d4:26:ae:09:53:36:a7:98:fc:a3:0a:8d:4f:2b:76:68:8d:57:
e3:e9:eb:af:09:ef:83:7d:e6:f3:bf:4b:08:c1:0b:31:f1:b5:
2d:19:42:bd:ad:76:c4:ea:eb:01:46:fb:13:e8:b0:1c:47:9f:
57:12:1a:e0:dd:f3:54:5a:cf:9d:7a:e1:a8:94:71:c2:40:79:
ca:2c:4d:a7:42:1c:a3:92:fa:fb:1d:6b:be:ce:e1:bb:ad:0c:
bd:06:9d:2a:b3:41:d7:30:fe:2d:9d:5b:1e:83:d0:a7:ed:a6:
f8:a1:49:fe:f5:3f:cc:10:95:85:20:99:68:ae:62:7b:94:68:
d4:e8:f9:e6:b3:8f:3f:d7:82:e6:cf:7f:4f:cd:55:37:2f:63:
48:1e:f1:bb:12:26:82:37:88:eb:92:8b:03:c4:d7:d6:10:60:
3d:64:66:4c:9e:05:17:79:d9:d1:c3:04:02:3e:6d:43:b5:cd:
c0:60:0b:5d:d8:b4:74:5d:c2:4b:5c:ad:87:74:3d:24:8e:fb:
2b:4d:6c:1e:7a:8c:4d:53:85:1a:0b:60:30:64:41:08:d4:6d:
6b:2f:2f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:06:44 2025 by rpki-client