Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json)
Hash identifier: Ld4hRRPRDoP8Ga2WY6LLhEsJtfFUOQ54ts1zAVQO3Nc=
Subject key identifier: DD:2C:F4:A3:C6:FA:7B:9F:AF:3F:72:49:A5:B4:34:E1:10:69:87:D0
Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Certificate serial: 0196797B249BE23F5D96CD36A4FF62622326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 23:00:35 +0000
Manifest this update: Sun 27 Apr 2025 23:00:35 +0000
Manifest next update: Mon 28 Apr 2025 23:00:35 +0000
Files and hashes: 1: LDfn0M5v99IHnOQFUNXp12Nf90k.roa (hash: do0pH7tAz4W21wYBRY5jEznU82Zdd3DteyiFEbjbCqA=)
2: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: kyFMjLsA103EJGlCI6IWUMuJHBCUSfVNL7m2WD/rqZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:24:9b:e2:3f:5d:96:cd:36:a4:ff:62:62:23:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Validity
Not Before: Apr 27 23:00:35 2025 GMT
Not After : Apr 28 23:00:35 2025 GMT
Subject: CN=dd2cf4a3c6fa7b9faf3f7249a5b434e1106987d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:84:5a:ca:c7:3d:03:be:08:4d:21:fe:4e:
58:78:28:ed:f3:d1:da:e0:3a:32:ac:b0:c7:d3:bd:
b0:d8:84:ca:45:51:b2:88:b1:d0:4d:43:e9:b0:14:
e5:98:98:01:ba:16:48:ea:b0:3c:58:36:f1:e8:a7:
f0:88:e3:df:92:80:1e:50:e3:57:7b:7a:09:57:f0:
b6:22:f2:4f:da:21:3b:23:d6:46:28:bc:b1:ac:d0:
6d:45:ab:72:2b:07:db:5c:c9:fc:d1:c9:e6:8b:70:
c7:ca:d2:d8:9c:15:77:62:0d:f0:bc:12:80:31:3e:
0f:78:4c:a3:9b:37:a9:af:07:f7:b7:86:2f:0d:0e:
7c:83:d4:3f:dd:a7:50:60:c3:87:f3:63:1a:7e:d8:
2f:df:af:95:5e:15:6f:9c:b1:95:4b:11:d6:25:1b:
71:5d:0c:cc:48:68:d5:64:08:e3:4d:3c:07:d3:33:
54:d7:52:96:15:f7:9f:20:8d:20:17:3b:60:4d:52:
fc:2e:24:c4:13:9c:09:97:08:53:88:ce:e6:48:4e:
73:df:2e:73:79:c4:1b:fa:9b:fc:fa:c7:0e:8a:25:
42:0a:16:72:35:0f:44:82:dd:83:81:59:3a:7b:df:
63:ab:9d:2d:da:2c:31:7f:f2:04:d9:81:8f:ff:4b:
13:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2C:F4:A3:C6:FA:7B:9F:AF:3F:72:49:A5:B4:34:E1:10:69:87:D0
X509v3 Authority Key Identifier:
keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0c:84:a8:a4:fa:ae:18:2a:83:3c:00:f4:1e:e9:79:86:d3:
35:c7:44:2a:3a:0c:c4:50:43:6b:6f:ef:59:17:1a:b6:c2:17:
2b:ec:74:74:20:f6:01:97:34:cb:ee:b2:48:bf:3e:b3:95:b7:
14:39:f4:1b:e1:ba:1f:9f:fe:9a:b8:a9:0c:f8:13:f6:f7:7b:
fc:9e:1f:bb:71:49:f6:62:60:07:d7:7f:92:24:27:ea:ac:ed:
6b:cd:bd:38:04:9d:32:43:9d:07:cd:1f:fd:c5:52:a9:5a:55:
85:71:a9:f8:b2:2e:03:84:8c:55:30:1d:09:d6:66:fd:ce:9d:
e0:72:40:17:cc:92:ea:ae:4a:7f:4d:b3:70:d2:b8:08:92:1f:
d9:68:88:16:d9:3a:55:29:6d:d7:d3:8a:c4:9e:a8:37:ec:12:
b2:e9:ad:3f:0e:66:f7:f4:56:a5:90:90:29:39:e0:7c:b4:78:
30:3e:b8:7b:04:8f:17:90:5d:03:f7:07:1a:9c:d4:f8:05:55:
54:60:3a:cd:90:20:a9:28:56:0a:de:a1:70:c0:fc:20:68:c8:
21:33:fa:d4:67:1a:e1:44:26:6f:a2:3a:c3:91:06:1d:56:05:
7b:d1:2b:60:52:33:9f:cb:76:d5:b0:c4:5d:03:7a:5c:78:7a:
02:25:c7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:56:31 2025 by rpki-client