Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: i4LfZ7y02E9Cn9F5B1kGQVFjEa32ub3hoURnkZzLWF4=
Subject key identifier: CC:0A:05:AF:59:0D:5F:D2:9F:72:FC:12:5A:0D:23:7D:51:8B:08:CD
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 019672D44AED6C5B71B16BF69F2D7F50079E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 1510
Signing time: Sat 26 Apr 2025 16:00:37 +0000
Manifest this update: Sat 26 Apr 2025 16:00:37 +0000
Manifest next update: Sun 27 Apr 2025 16:00:37 +0000
Files and hashes: 1: Ai3_NgCb2mwvHHHWVo7OjI6Wj04.roa (hash: mxmvKEH6k3H+fHWxr8AaesSD9p5zVNhT7qFX1XU+vIQ=)
2: EZLjMnt3YY1uGOfZ3nimgNl-yLU.roa (hash: Ko07ZGo7IwS8NL/yJPyHpJ9m0iW9ngaJs3DqWmHrpi0=)
3: RIQPOEjptB8udCiUyrk1eA7kGsQ.roa (hash: iUSixJ9qOvizzSlye8GPbxagX4TAp65dTuqFovVtZ00=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: +CZu7mBgA+41VAoLov+gW5rMa6hNvRIpipInABxZg4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:4a:ed:6c:5b:71:b1:6b:f6:9f:2d:7f:50:07:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Apr 26 16:00:37 2025 GMT
Not After : Apr 27 16:00:37 2025 GMT
Subject: CN=cc0a05af590d5fd29f72fc125a0d237d518b08cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:c7:43:2f:b3:cf:f1:dd:28:60:0f:69:e6:
cd:2f:7b:26:a7:ad:f5:e7:e4:1d:de:7f:59:9e:ca:
46:17:cd:b7:8a:79:86:ca:82:ef:55:91:bd:68:dd:
3f:9b:97:4d:1d:65:15:64:d0:b8:c5:1e:e2:ef:3f:
87:e9:d9:f8:75:06:ea:86:26:58:57:cd:51:0a:11:
63:be:59:7e:2b:c8:f0:df:1b:72:ac:a7:6d:ef:23:
6e:94:07:1f:b9:e3:91:af:d7:c6:31:e3:99:da:5f:
37:da:2f:3f:1c:28:ef:d6:4b:c5:16:a3:ea:f1:39:
79:c5:5b:6b:f3:94:e3:eb:0e:91:c4:8b:bd:7b:01:
95:d1:1e:fc:41:ed:10:fa:fd:e2:56:3d:31:5f:a1:
f7:01:77:ec:92:ca:c9:53:24:47:b5:bf:bc:38:2d:
34:17:69:35:d3:d1:c8:99:6d:91:b9:36:6b:e7:e4:
91:f4:00:58:f0:8c:0d:9f:12:a2:36:b3:64:73:a1:
37:d4:9a:56:47:68:e1:35:90:e2:55:0c:65:9b:fc:
cd:ce:82:ef:45:e2:45:34:bf:3a:87:06:ce:66:f1:
45:d7:db:2e:9d:0c:a7:21:66:6a:9c:e2:ad:20:94:
56:5c:8b:af:5d:d8:9d:17:de:19:dd:0a:ca:d9:6e:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0A:05:AF:59:0D:5F:D2:9F:72:FC:12:5A:0D:23:7D:51:8B:08:CD
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b9:ba:89:f7:61:f7:e0:1a:36:50:ee:60:e5:08:a0:c4:a2:
9b:d8:16:7a:c0:b5:d5:91:bc:ea:2d:f5:f5:fb:54:84:81:c7:
2e:da:b4:8a:0d:17:80:29:4a:6a:b0:e7:f6:54:bb:d5:ff:91:
2b:9b:17:dc:f1:66:6f:23:86:5f:e2:8b:1c:59:c1:8d:81:80:
94:b2:31:d9:55:16:df:29:0d:a6:0a:c9:f3:f8:6f:0a:c5:0d:
97:49:3c:63:ea:1b:48:d4:61:90:22:62:48:22:83:38:28:85:
90:e8:b8:23:24:16:44:bf:68:e6:13:cc:2a:75:46:d6:fc:fa:
48:58:b1:15:13:6e:2e:4f:1a:e8:d2:2f:f7:43:b3:c2:e3:c7:
41:a4:98:e0:1a:ed:5f:56:33:9c:e9:05:c5:29:da:38:17:8b:
57:3c:aa:ef:1c:fe:73:5c:17:6f:b1:38:20:ab:7e:1c:50:48:
eb:99:85:46:8a:59:38:4f:01:f3:fc:3c:56:f6:6c:49:22:b2:
e4:36:6d:69:28:8b:4f:4d:c7:f3:b9:60:f6:19:a0:d4:e7:6d:
3c:6b:19:e3:e0:47:89:fd:02:74:c3:fd:1a:24:60:f5:bb:e1:
9b:80:44:bb:6a:f5:01:5e:7b:28:61:f2:f8:63:44:7e:e9:75:
97:cc:d2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:43:01 2025 by rpki-client