Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
File: lxpsuy325_rMxYU7pUAPH0cOqxY.mft (raw, json)
Hash identifier: 95lR+XH0c3zGbHdszDUvuB2o0QFBHX2QhY65n6T+Spc=
Subject key identifier: 50:90:8B:15:14:E5:44:34:28:A7:E8:D5:CD:E7:04:FE:57:94:B3:14
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 01967C4549993962B9BA89EE217FBBE752E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 12:00:37 +0000
Manifest this update: Mon 28 Apr 2025 12:00:37 +0000
Manifest next update: Tue 29 Apr 2025 12:00:37 +0000
Files and hashes: 1: 6wuoxtQ9bA6opmTkPy5nyUw0MFc.roa (hash: yaei0hfQngE+ZuEYmOizBFXF772vW3jT8cVqsppYXew=)
2: Cuk2XVVN2lww7wgchDt5Q_JIiHA.roa (hash: YJd5NF7BnIFbCJZm98sSNpBsaL371EEDxMPWmL/C3GQ=)
3: lxpsuy325_rMxYU7pUAPH0cOqxY.crl (hash: cWFUesopRbXyNmgmm11Q68GlD4YkiF0Ep1PS/7YizEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:49:99:39:62:b9:ba:89:ee:21:7f:bb:e7:52:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Apr 28 12:00:37 2025 GMT
Not After : Apr 29 12:00:37 2025 GMT
Subject: CN=50908b1514e5443428a7e8d5cde704fe5794b314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:ac:79:20:cd:72:18:07:97:ea:7c:77:fd:
1d:a7:a0:99:9b:a9:a7:12:bf:09:8e:d8:12:cc:88:
c4:e8:2e:97:f3:d8:52:73:d9:a2:f3:73:23:05:bd:
4f:26:60:38:7a:30:8d:ae:ab:d5:6b:93:bf:f3:b3:
20:7e:cf:3a:29:6e:5c:13:d6:4c:1b:39:81:54:18:
bf:05:3a:fb:74:3d:3b:d6:82:07:a3:8d:ea:a6:05:
bb:f2:25:5a:42:e9:f3:dd:4c:f2:3e:cf:d3:5f:e5:
97:d2:dd:c5:2a:8b:1c:b0:ce:b4:43:a1:66:34:46:
76:24:30:1d:fc:a7:19:15:74:68:f8:ff:98:ff:db:
21:e4:d7:25:f0:28:f4:77:e5:f0:ac:98:e8:6d:61:
ae:37:3c:55:ea:4c:bc:0a:65:4c:19:57:2e:48:cb:
43:c1:74:b3:fb:7a:25:c7:8b:d9:08:71:0d:56:1f:
37:9c:fd:cc:11:40:5f:4b:bb:f7:ee:db:f2:50:70:
11:81:9d:6b:68:87:b4:2d:09:ae:1d:24:6e:ee:32:
6f:22:53:f5:c0:d4:5e:45:fb:43:d1:98:d2:45:a1:
13:d2:3d:c5:94:71:7c:50:d1:ab:20:08:16:be:43:
06:53:57:53:05:00:fb:31:22:25:ea:bc:28:01:aa:
dc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:90:8B:15:14:E5:44:34:28:A7:E8:D5:CD:E7:04:FE:57:94:B3:14
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:82:89:f5:96:57:66:74:8d:3a:f9:1b:96:f0:39:ae:a5:86:
9c:f5:4c:45:84:e7:79:bd:08:ac:d2:5a:ab:52:99:f2:ef:e8:
93:d5:89:20:e5:ef:2a:4c:15:1a:f1:72:e4:ab:ac:db:01:6f:
59:a4:50:a5:a9:16:d7:ba:1d:d1:f4:f3:db:6e:55:93:f9:fc:
64:6f:42:2d:54:81:22:3d:2f:d1:35:a7:18:12:53:81:36:d4:
f7:4c:0f:64:d0:56:43:e0:9c:80:e2:dc:8e:6d:81:60:04:b5:
4e:55:27:c8:85:59:2c:85:ba:52:00:c9:47:5d:31:a2:27:cf:
9f:0c:72:73:bf:a2:3c:d5:db:63:60:29:19:b8:d5:df:e1:1e:
ef:d8:cf:41:c0:eb:be:ea:58:d0:e3:ce:a0:ec:e8:4d:a1:3b:
e3:ae:9b:17:3d:37:78:8b:c5:13:64:d3:1e:58:a6:ff:9c:e2:
5f:ca:d7:29:b4:87:da:b8:5d:b1:3f:a6:d1:19:95:bf:7f:67:
58:1b:c4:8a:4d:3b:4e:2d:c4:f6:e8:6c:4a:27:cb:c2:b8:4e:
b9:af:05:65:35:d3:cb:55:73:ca:78:af:9b:68:30:37:23:b7:
dd:a3:e3:de:53:04:f0:fb:9e:7d:98:66:3f:84:fa:05:e3:b7:
09:13:c5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:31:04 2025 by rpki-client