Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
File: lqSbOF03Of3SQ34K798iUc1dKlE.mft (raw, json)
Hash identifier: 5w6C4kekywJtYUA40H1bz7hrQy/YHy6Rqn67C3myk64=
Subject key identifier: C3:1A:8C:10:85:FA:7C:75:92:9B:01:88:C7:37:9C:32:D0:70:13:04
Authority key identifier: 96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
Certificate issuer: /CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Certificate serial: 01967F7D835BA7B997C1E987ED15B5C5C06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
Manifest number: 0156
Signing time: Tue 29 Apr 2025 03:00:54 +0000
Manifest this update: Tue 29 Apr 2025 03:00:54 +0000
Manifest next update: Wed 30 Apr 2025 03:00:54 +0000
Files and hashes: 1: lqSbOF03Of3SQ34K798iUc1dKlE.crl (hash: BV2cZ+fd2174TbHvpq1lWTcPzmta2GYlbPyYAJH86HI=)
2: vubvLlQ2em0JM0_rlFMoFCj2bxQ.roa (hash: zIY6VqnaaG5WqxBxNCQhDT3KHDCVyaR7TcUQuJEUhUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:83:5b:a7:b9:97:c1:e9:87:ed:15:b5:c5:c0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Validity
Not Before: Apr 29 03:00:54 2025 GMT
Not After : Apr 30 03:00:54 2025 GMT
Subject: CN=c31a8c1085fa7c75929b0188c7379c32d0701304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4e:8a:84:c7:59:2d:6d:33:e5:94:05:18:17:
a1:b9:14:de:92:a3:6d:6d:81:b7:b4:79:28:dd:bb:
94:32:3d:63:31:f0:39:88:58:14:04:a1:7d:a7:f9:
73:33:d4:ab:c1:b8:bf:1c:de:38:07:5c:16:ab:42:
e9:31:47:ef:db:de:85:be:f8:64:41:66:a2:5b:f6:
15:56:c8:73:42:19:c6:ab:34:54:56:d9:5a:1b:5d:
e0:23:46:fd:59:c3:61:71:a5:69:01:79:d7:40:93:
0a:85:e1:82:01:a8:49:cc:14:24:74:18:59:ca:a5:
fb:3e:d6:c9:d9:e5:e9:7e:af:6a:30:bb:b3:5b:34:
1c:37:33:b5:73:07:ed:55:78:4f:1b:4a:96:1d:13:
36:dd:86:b0:74:5b:ed:af:f0:21:b3:f0:aa:71:42:
31:ad:25:b7:66:ed:ce:da:6b:23:72:6f:1e:48:f8:
f3:84:66:61:34:35:c6:bf:48:a5:ac:3c:c9:d4:51:
9d:93:9b:66:4a:af:6b:c4:68:47:80:d3:cf:ba:a9:
73:bf:94:84:80:5f:33:35:7d:15:6f:48:ac:60:8a:
62:26:8a:56:39:03:b5:41:b4:cf:26:78:6b:4a:5b:
3a:ac:b5:5e:06:96:2e:ad:e1:3f:92:65:e5:cd:59:
e5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1A:8C:10:85:FA:7C:75:92:9B:01:88:C7:37:9C:32:D0:70:13:04
X509v3 Authority Key Identifier:
keyid:96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:43:0c:78:ec:73:9e:19:69:40:3b:8c:31:be:0f:47:f0:dc:
41:4a:e8:24:04:fc:11:27:46:9d:a0:8b:97:7a:62:b8:72:1e:
65:da:10:13:64:ed:bf:48:c0:a8:ee:79:f8:8a:bb:81:ff:90:
d0:8e:c0:d2:c0:25:b6:61:35:05:23:88:3d:29:ef:04:63:89:
22:7d:30:a1:31:e6:ba:86:72:ff:01:4f:40:38:9d:5e:02:ab:
33:e4:1f:f0:b3:37:00:66:70:3e:1e:22:b8:e3:48:07:cd:c2:
65:95:01:12:85:97:5c:ae:69:df:3f:3b:94:29:97:a2:c3:95:
e8:eb:4a:69:1d:b8:96:4f:07:2c:59:21:54:43:52:27:4f:ef:
a2:cd:a5:7a:a2:b3:a8:8b:92:35:07:e7:6b:63:1d:6c:98:ed:
8e:72:9a:e9:49:2c:36:f4:a2:46:3b:aa:2f:8e:e6:42:a1:92:
b1:4a:94:06:0c:60:5e:e5:9c:9e:4a:67:f0:42:b4:f9:b3:bf:
e8:83:2d:9b:09:cb:80:61:73:91:72:92:90:89:98:f6:a5:26:
9e:3f:19:88:5f:3f:4e:8b:ef:0a:d2:f7:1f:9b:27:b9:3e:b2:
d0:d1:95:50:4e:91:a1:f0:c0:55:8e:5d:c6:d0:bd:49:98:8b:
56:ab:cb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:38:38 2025 by rpki-client