Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: 8Y1saxrp7yftdoVrEMh8e22DP/NIogKaipGsARowpaU=
Subject key identifier: DC:14:32:6A:51:35:BE:90:F6:E3:7F:74:32:F0:13:B1:9D:FE:3E:6D
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 0196741DB31925E35067E79808EF568A8D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 0A85
Signing time: Sat 26 Apr 2025 22:00:25 +0000
Manifest this update: Sat 26 Apr 2025 22:00:25 +0000
Manifest next update: Sun 27 Apr 2025 22:00:25 +0000
Files and hashes: 1: EYwLNQ0R_Ied-v-mXvUH_vf6GVA.roa (hash: TajJUilMmDGZNmoTd4v8tDuWl6eHYmByCynqf999DBU=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: p9W9gSk4eiG7m4/f5EMm8a7qeQmpMtiIAqD3sMa59nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:b3:19:25:e3:50:67:e7:98:08:ef:56:8a:8d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Apr 26 22:00:25 2025 GMT
Not After : Apr 27 22:00:25 2025 GMT
Subject: CN=dc14326a5135be90f6e37f7432f013b19dfe3e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:66:ee:06:b6:9a:4a:ad:36:55:9d:12:f0:
a9:6b:f1:dc:44:50:55:a5:2e:58:9d:66:87:6c:ee:
57:61:6d:96:d8:7b:af:ab:79:6d:fe:e1:2a:b9:a7:
a1:e7:a8:bd:f9:06:3a:29:78:ea:42:8d:dc:40:fb:
b8:2f:c7:a8:22:f0:fa:02:36:9d:96:50:1a:cc:17:
8c:9f:4c:68:81:a9:4f:63:31:cb:47:66:ec:e0:f8:
aa:49:3e:70:cc:48:74:39:10:d8:57:41:7b:70:0f:
87:f4:a1:ad:fe:3d:2d:ab:fe:06:25:af:bf:2b:40:
ae:a2:35:c3:45:fe:cc:1f:c6:aa:b3:8a:82:50:6e:
86:11:5d:cb:f0:22:b7:38:d2:a5:5d:79:6f:3c:1a:
a6:5c:77:7b:87:85:da:33:f8:da:9d:68:4a:40:8c:
f9:37:35:d7:5a:33:69:83:cd:e3:f4:93:ea:72:9a:
bc:fe:f8:b3:26:c1:6f:4d:54:4a:00:44:b2:c1:68:
63:a3:5e:9e:2b:d4:c0:15:30:9c:e1:88:08:c7:be:
ee:ee:6f:20:dc:6b:f1:f8:65:14:f6:4d:70:09:67:
8d:e5:03:60:ae:a9:01:6d:1b:04:b0:50:7c:68:e6:
88:a1:94:ca:0e:21:ab:05:7b:42:76:56:50:ab:ba:
f6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:14:32:6A:51:35:BE:90:F6:E3:7F:74:32:F0:13:B1:9D:FE:3E:6D
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4f:bb:40:15:ce:f0:33:ef:54:c4:a6:a2:8e:50:e2:f6:66:
b9:ce:b3:0c:9e:8c:30:62:61:1f:52:94:b3:9f:31:74:5c:99:
2c:fa:35:45:77:ff:bf:c8:2f:dc:3e:08:00:2d:5c:65:8b:ff:
e5:5e:1a:39:a5:5f:04:05:a1:63:7b:35:89:3a:f0:88:58:5d:
41:17:a4:8c:12:a1:d8:44:a2:07:d6:f3:92:67:24:29:f8:09:
0a:c2:8e:cf:3a:3a:87:02:1f:5b:78:d7:5b:0d:86:aa:ae:9d:
22:89:7d:b6:bc:c8:04:e9:c3:25:91:e0:a3:85:5c:fe:2d:f3:
e6:5d:a4:64:bd:34:7b:41:b8:ec:9c:d2:b3:94:03:62:08:57:
69:0a:6b:dc:f8:7f:ac:00:d8:f1:be:0d:3f:c5:93:9e:65:be:
7d:74:0b:4f:82:1a:a6:01:b9:7a:46:56:7e:a8:87:b9:47:35:
f9:a5:42:61:e2:ff:46:60:b6:f7:24:30:f2:4a:b5:6b:37:0f:
d4:3a:bf:4d:6b:78:13:c3:75:6d:43:42:39:de:9a:66:ea:69:
e7:47:90:38:2e:84:f7:af:9f:3c:09:6c:10:25:61:84:6b:9b:
37:a6:54:64:5d:2c:6b:0e:e3:14:9a:92:ea:0e:40:7d:f5:bd:
04:57:42:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:00 2025 by rpki-client