Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
File: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft (raw, json)
Hash identifier: 6gU98QFdb86Xe1lZFJJTC9c18h7vvCcVc9hkm82/dBs=
Subject key identifier: 17:5B:36:A7:B2:DE:25:78:3B:D3:58:C6:D7:67:2D:FB:A7:9B:76:23
Authority key identifier: 97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
Certificate issuer: /CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Certificate serial: 01967454E785853327495281789487B1456E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 23:00:43 +0000
Manifest this update: Sat 26 Apr 2025 23:00:43 +0000
Manifest next update: Sun 27 Apr 2025 23:00:43 +0000
Files and hashes: 1: UADfQRfiU0qMqkC7bWaFEbHeHdA.roa (hash: WP9x47zoRlAi5Co+JqhZvWC2k3pFeOAzkBoA6TCx0aU=)
2: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl (hash: ZRYTBdrMOUQMpB0W+dbWGLDdKq633lIDbRqoThK+Ykc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:e7:85:85:33:27:49:52:81:78:94:87:b1:45:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Validity
Not Before: Apr 26 23:00:43 2025 GMT
Not After : Apr 27 23:00:43 2025 GMT
Subject: CN=175b36a7b2de25783bd358c6d7672dfba79b7623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:12:6f:63:46:da:e1:6d:e1:43:b4:fb:6e:
6c:a3:c6:6f:36:5d:8f:42:e4:b9:bf:71:7b:05:d8:
e6:14:2c:b0:67:7d:31:65:da:49:7b:a0:b2:a1:23:
09:e8:45:89:ba:4d:05:37:68:1d:35:5e:9e:3c:1b:
02:d3:5c:6f:d9:c0:83:83:ee:a8:5f:12:fb:50:c6:
a6:6d:75:4d:4d:aa:3b:d6:e7:96:5e:5a:81:20:84:
85:54:80:5a:b6:e1:7e:93:21:45:c7:2d:a5:de:b6:
52:c4:97:36:cc:61:fc:17:e5:dc:0a:96:d3:fc:f4:
36:e8:48:58:6a:9e:f5:14:06:46:79:41:27:59:99:
0c:fc:1f:79:9e:47:1a:e3:21:ab:d8:c1:2b:92:43:
29:02:be:c1:09:d1:84:ce:ab:cc:42:48:db:60:64:
a1:0c:55:b4:ab:d5:7d:c1:8e:2f:3b:6f:fd:67:50:
1c:c6:f4:48:99:84:c5:19:47:74:d2:36:db:cd:fe:
90:a2:a3:da:bd:5a:ed:d3:97:f4:d5:91:f6:eb:fa:
53:af:7d:a6:85:8b:a6:69:83:be:76:74:ac:76:1f:
ae:7b:6a:1d:08:cc:b7:d0:84:01:7a:11:ac:29:f6:
03:0b:7e:80:4a:0b:92:84:25:ab:3a:bb:55:b9:36:
36:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5B:36:A7:B2:DE:25:78:3B:D3:58:C6:D7:67:2D:FB:A7:9B:76:23
X509v3 Authority Key Identifier:
keyid:97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:82:1f:cf:c8:5e:77:e9:62:dd:c8:e9:9b:c3:92:a4:9d:52:
d0:48:11:13:0e:e2:86:0d:aa:5e:e4:bf:c4:5c:bf:9e:79:22:
73:25:61:fa:05:29:ff:b3:6b:8e:d0:4e:f9:81:0b:3a:9a:7f:
5d:16:a7:20:d2:81:22:2d:6b:30:8f:48:98:8d:a3:5b:0d:ba:
4d:12:3c:3a:d2:ca:46:05:39:93:9f:bc:9a:8e:7b:d9:77:b0:
54:69:91:26:2e:98:31:ed:5c:de:fe:ce:c6:a5:40:00:d1:d9:
6a:a4:ec:a5:8d:f3:1e:b9:f7:69:a1:0a:b9:8e:1b:d8:cf:04:
c1:c2:5f:6c:5e:3a:11:59:6b:6d:1d:7e:92:75:31:b8:52:f4:
f2:27:ba:79:f7:97:ae:9e:7c:37:a2:dc:57:73:21:c2:b1:c3:
ac:aa:05:af:b9:2f:62:53:c7:12:0a:2f:b3:23:3e:e3:01:d5:
ad:ae:08:a7:c9:ce:6f:58:d7:4f:67:78:f9:af:8b:e3:84:1e:
13:48:42:05:e9:b2:98:ef:17:f7:69:af:d7:f4:c2:07:c3:b3:
f8:31:b4:1f:aa:ec:88:8a:fd:ce:07:d5:ee:55:a5:cd:78:d0:
e6:51:99:57:fd:0d:17:19:28:a4:fd:74:17:e2:2f:72:ef:08:
84:6b:10:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:05:08 2025 by rpki-client