Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json)
Hash identifier: YJiInFV0m1cnrNmGk6EOao6NNc+JulDdm2MbZntRVVM=
Subject key identifier: 53:82:AB:E0:2F:60:5E:5F:B1:2C:1D:C9:81:DC:46:0E:95:F3:DF:1F
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 01968F5E1E9C4F8C010596570C65382B5D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
Manifest number: 1525
Signing time: Fri 02 May 2025 05:00:32 +0000
Manifest this update: Fri 02 May 2025 05:00:32 +0000
Manifest next update: Sat 03 May 2025 05:00:32 +0000
Files and hashes: 1: 6z0Q8mDUMTUFPn8NEmiVcMraCdw.roa (hash: fkp8K1gu61varmdzOzYMZH6d4Wsqa3Y47Q5J8kmYv1w=)
2: 7sdmE5F3pe9bAPKXf0f9cnjhnG0.roa (hash: fYhVRjTbda7iEUSislvjMDJFaxgfGZj3hsK3i//5Xak=)
3: H3J9vQn6K2WpcdcY5HgOFWtNqro.roa (hash: xKCbCFvdaEaZUoBRTwlz8wWkQD7E1NB3Xk+GOW8NOkg=)
4: SHnk_yFs5TSkbtqQ5cCS3qWVobY.roa (hash: Ajdz5jpsdOUtu+sq17fM1dWOMUvOtdvwwcm7jylQXUs=)
5: XM5CbKTTxKcej30VMBJNJ0Fqfyk.roa (hash: CFUQDHC9f19rcnj4bn1rpO47Eij7J9ivJ2f3k7x1qdw=)
6: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: 8PDHaw5fOS7Izus0muySDojQmldVhT5LqnLAJV/+k/o=)
7: moYZTBKvPSG4btrjulSkg5IFyz0.roa (hash: 6aUdQOfwMXy22wY7pvBt6ynhj6U7FZPNFhYHyrILLNI=)
8: zQSqcApOIlR6_yHJBYuZ2ciPt3Q.roa (hash: 5DPAi2kks5u9Bus3Asxn5EjHBrdWHv0pv/j5caKoCFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:5e:1e:9c:4f:8c:01:05:96:57:0c:65:38:2b:5d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: May 2 05:00:32 2025 GMT
Not After : May 3 05:00:32 2025 GMT
Subject: CN=5382abe02f605e5fb12c1dc981dc460e95f3df1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:f6:16:83:2b:2e:1b:90:5b:e5:01:6b:21:
93:0b:60:44:1f:1b:a4:67:95:3d:b9:d8:76:e4:d8:
79:ca:4d:27:e7:a3:ac:e9:0a:de:93:a1:4d:53:33:
cd:e0:f2:87:6b:f8:e1:38:e0:c0:29:c1:23:a3:02:
60:f7:14:ff:eb:06:00:aa:4f:92:ac:84:3e:77:54:
41:70:57:df:ca:a6:7e:67:ee:93:87:93:6a:e8:f7:
da:4f:51:33:29:4e:cd:3b:f6:0b:52:a1:3c:97:16:
84:1d:a3:ac:cf:f5:93:75:f4:f6:9b:e7:de:d8:33:
b5:a8:0c:36:d7:9c:69:79:10:e8:ae:23:2b:cc:d5:
83:7b:1e:4e:2a:44:25:1f:0e:60:1b:a9:ea:f9:f8:
bf:78:c2:3e:07:89:6f:9f:d0:aa:47:fe:f1:4a:3b:
be:4b:97:6c:9d:dc:3a:d4:29:e3:b4:d9:e5:24:d7:
4d:e8:3b:8b:4f:77:50:7d:a2:76:2d:a1:50:80:9b:
e6:da:1b:7d:c2:0c:b3:df:9a:61:7a:56:59:1f:4d:
e8:f6:b9:af:72:8d:fb:13:ad:70:9b:0a:94:8a:08:
a9:67:9d:8f:af:ac:7c:d5:f2:e0:6d:01:13:a7:55:
63:5b:45:19:c4:42:d5:da:db:28:34:e7:d0:51:5b:
cd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:82:AB:E0:2F:60:5E:5F:B1:2C:1D:C9:81:DC:46:0E:95:F3:DF:1F
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8d:30:29:43:d8:0c:19:3a:40:93:27:88:2b:5f:d5:e4:bf:
ef:73:59:b2:8b:83:a8:d8:88:86:3e:fc:d9:9f:80:84:1f:a4:
85:b2:e0:0a:18:cb:7f:21:49:3b:59:36:b8:02:68:5c:cd:f7:
7e:e8:a3:5b:63:52:ca:f1:bd:18:b0:8a:27:bc:95:fa:61:54:
c0:fd:71:bf:7a:09:c9:94:df:81:e5:5b:7d:15:d9:b3:d3:65:
5e:8d:20:98:59:f1:d4:08:99:75:f7:55:53:38:fc:85:5e:1d:
8a:81:f6:2a:6a:b9:27:f3:32:15:69:ff:79:bb:ee:c9:f7:7c:
5e:54:28:60:2c:89:24:dc:f3:e5:5e:12:7b:ea:8b:c2:88:15:
3a:f5:59:66:2d:81:7a:c3:7a:cd:c8:20:d3:31:a4:85:4f:39:
2d:6d:d8:b0:38:bc:1e:7f:39:01:07:e8:32:91:25:aa:5b:09:
74:d1:a8:94:f6:6a:98:59:c9:fb:a4:d7:7a:d3:13:f9:9f:5f:
fb:e9:b8:1f:01:82:e0:4a:09:ba:28:99:6b:cf:15:0e:f1:d2:
80:11:38:bb:d7:b1:8d:da:03:b6:75:04:4d:4f:98:e9:12:df:
11:a8:63:53:57:66:df:e5:77:4c:67:3f:58:bc:18:ef:42:78:
4d:d2:20:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:16:46 2025 by rpki-client