Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
File: LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json)
Hash identifier: sPaovezZDPDqK7Z4WNuNv1eiGSj76dMwYVkgLFrDPhk=
Subject key identifier: F2:73:1D:F3:2C:31:31:17:51:B3:35:12:A8:36:65:24:5F:24:06:BF
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial: 019676E7F8C1A71028CC00593E546D6C364C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 11:00:36 +0000
Manifest this update: Sun 27 Apr 2025 11:00:36 +0000
Manifest next update: Mon 28 Apr 2025 11:00:36 +0000
Files and hashes: 1: I_El3VD2zizuoyNdnUn9kOdcLek.roa (hash: 74aqpCJ0dpEabBMkIS/h3jijqMv/0y3rfXL3oZ/vRAo=)
2: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: 0i39sylN87jbJ6Lnp2eVPzJHgT3ibTa1JAqYsQIssY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:f8:c1:a7:10:28:cc:00:59:3e:54:6d:6c:36:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Validity
Not Before: Apr 27 11:00:36 2025 GMT
Not After : Apr 28 11:00:36 2025 GMT
Subject: CN=f2731df32c31311751b33512a83665245f2406bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:00:60:e2:2c:3c:42:8d:06:a5:e8:70:d6:
45:9f:bf:52:52:07:c0:39:82:13:7c:85:2a:7c:16:
01:17:c8:f8:20:d7:24:a5:67:58:fc:0d:c0:be:2e:
8e:1e:a5:44:e1:45:01:bf:35:01:9a:aa:70:3a:8e:
1c:ae:e4:fd:23:d4:42:8a:40:cc:df:11:eb:51:97:
28:90:e8:58:70:c8:fd:41:a3:c7:d7:79:ed:23:45:
6c:95:e9:82:b9:92:80:e2:94:50:e7:e9:67:0d:a8:
3b:f0:f0:3b:fd:f7:88:85:c3:e2:37:3a:b4:17:67:
f8:48:0b:29:92:44:0f:61:ce:66:87:41:8a:86:08:
dd:ce:c4:e1:dc:5c:a5:fa:b9:82:cc:8a:f5:69:b2:
f9:49:cf:15:31:df:fa:ce:82:a4:a5:ca:b3:15:c7:
4e:74:45:44:38:88:ec:0c:97:27:06:bf:cf:a4:47:
84:b6:90:e1:65:c9:92:88:4d:25:57:5d:20:42:00:
39:ef:8f:d5:d0:f5:9b:0d:f9:18:23:39:d2:20:ae:
89:b2:06:2d:b5:24:65:d1:1c:2f:89:13:0e:da:d8:
a3:1b:69:70:bb:70:c8:3e:ca:34:35:af:43:b4:9e:
6a:53:dd:1c:5d:d3:94:1b:7b:b4:98:42:43:5e:a0:
53:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:73:1D:F3:2C:31:31:17:51:B3:35:12:A8:36:65:24:5F:24:06:BF
X509v3 Authority Key Identifier:
keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:50:ae:ce:f7:bb:53:63:00:70:bc:b1:01:7a:a3:c0:7a:a1:
61:83:9d:f7:1e:ce:e4:d3:cf:e9:5e:60:8a:f7:10:c4:74:cf:
72:fa:1b:50:56:19:0f:3d:83:a6:55:24:86:91:1e:ee:49:4e:
fc:c5:94:a8:a7:cf:7e:02:20:5e:0c:26:99:05:55:2a:e9:9d:
f2:64:19:c3:79:a6:00:5b:54:c6:08:27:14:a2:83:4b:af:84:
e4:4b:eb:c6:4f:b7:9e:76:3f:5e:9c:9a:66:61:52:2d:75:d5:
6d:fd:43:19:95:09:c8:46:0d:81:4e:20:16:88:6a:50:6b:6e:
96:f2:eb:e1:70:5d:ad:b9:0a:0f:e9:13:0e:c5:39:66:f2:8d:
33:68:8f:57:bf:da:04:20:cd:ac:1a:d1:61:9f:ba:80:a1:c1:
de:7b:6e:f9:ff:16:64:cb:ad:1f:96:19:17:53:bd:b8:09:3d:
6d:44:79:f0:a7:ba:88:1e:10:24:43:cf:2d:25:9f:6f:e8:45:
0b:b9:0a:13:95:c3:5c:6a:8a:38:cd:d5:b4:95:c2:be:83:af:
2e:3d:f2:37:bf:ff:5f:62:d5:aa:1f:a4:4a:71:f1:7b:fb:21:
f6:fe:79:0b:eb:14:8c:77:48:db:3a:1e:24:af:35:46:62:a8:
33:eb:d9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:12:33 2025 by rpki-client