Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: i1MwKd2uiSutJJ6ErLJvCTiqxR7TaN+SzkfpUtheP/Q=
Subject key identifier: 00:B3:B7:93:7F:3E:03:3C:76:50:AB:FE:29:06:C7:60:D0:8F:ED:29
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 01968D39B4CCCA842442215995FE821C560B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 151D
Signing time: Thu 01 May 2025 19:01:31 +0000
Manifest this update: Thu 01 May 2025 19:01:31 +0000
Manifest next update: Fri 02 May 2025 19:01:31 +0000
Files and hashes: 1: Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa (hash: 4wHVTXOU9z+SM/PpUwslG9Qh7bHf21AbIIUgGIPuA60=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: DhzQDwD516hKvs9P4uqGxwPSWgpkZ82EVWictckeJd0=)
3: sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa (hash: UF7xshn/lezkLw7gZiOHSmc0ml+xgRop+HTs7XfValk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:39:b4:cc:ca:84:24:42:21:59:95:fe:82:1c:56:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: May 1 19:01:31 2025 GMT
Not After : May 2 19:01:31 2025 GMT
Subject: CN=00b3b7937f3e033c7650abfe2906c760d08fed29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:e3:40:42:53:5f:62:37:62:83:76:ef:9d:
78:a2:38:23:ea:9c:e2:b9:05:67:ea:77:eb:ee:22:
15:cc:cc:63:ce:61:a2:63:dc:7a:29:6b:43:24:d0:
ee:94:25:45:88:26:c5:9e:fa:8d:6f:63:cc:a7:64:
e3:e2:a9:30:3d:5d:25:21:1d:ee:85:c4:df:b8:9c:
78:cb:55:3a:ef:6a:4a:a8:f1:ff:55:f4:39:d3:63:
3a:bb:07:07:5f:6f:8b:72:54:9c:cc:eb:1e:26:f1:
fb:d7:07:46:0f:28:93:e9:dc:6c:c0:c6:1a:4c:f9:
8a:74:47:b6:ec:e8:59:be:46:9b:be:8e:8f:b2:12:
62:b9:fe:90:2b:36:46:5d:e4:e1:a4:6e:46:84:47:
56:db:90:55:ea:5c:16:26:b8:2c:04:d7:b9:b8:81:
58:42:bb:13:9d:e7:5a:6d:ee:7a:c4:29:05:40:50:
27:1a:33:12:ed:16:89:49:5b:f0:ff:70:c4:e1:ac:
75:97:9f:c5:07:02:34:a1:f5:84:4f:c9:32:ef:b3:
62:83:d8:60:e6:2c:6a:0f:cd:7a:fe:d3:71:c8:a6:
10:c4:d7:74:03:bc:9e:2b:f3:4d:3a:ac:b6:79:ed:
65:61:40:7f:65:70:30:61:54:d0:fa:5b:c3:9f:42:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B3:B7:93:7F:3E:03:3C:76:50:AB:FE:29:06:C7:60:D0:8F:ED:29
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:17:ed:19:8d:5b:09:86:32:68:42:f4:3b:28:c4:36:40:5e:
0b:2d:60:f0:fe:a1:9c:75:c5:dd:fe:d6:83:b2:69:5e:64:ef:
e7:0a:af:a6:46:c0:5d:1a:24:ae:94:d9:5d:96:3b:ba:0a:d8:
ee:bb:6e:65:63:34:3c:08:df:c3:c5:a4:0d:96:8c:98:e0:0a:
76:d2:76:e8:a3:45:6e:19:be:75:ce:be:86:43:e8:88:a9:56:
21:3b:55:a1:5a:1b:5c:6c:dc:cf:7d:7f:b3:ef:87:4d:bc:7d:
93:d3:7f:69:69:e4:ae:24:e8:25:93:4f:08:66:87:c4:1f:2a:
83:4c:b8:af:1c:b3:5c:6c:ff:a6:c0:f9:82:9d:ff:c6:63:43:
d8:41:0b:ec:d4:72:72:31:c5:c7:f4:bb:ad:82:04:51:36:32:
72:45:70:c8:20:07:82:39:e9:02:65:e4:5a:54:de:e0:5b:91:
73:b6:c7:74:73:e2:08:dd:28:9c:b9:c4:25:34:99:df:c0:2d:
3c:3e:94:18:ea:d5:2c:e6:8d:47:cd:f5:f4:31:35:ff:59:1a:
18:ed:bf:76:67:95:50:01:2e:86:a0:26:e2:e5:71:e1:da:e0:
c7:1e:ac:8b:d5:c0:8a:ef:df:d4:f5:4e:e3:80:53:48:e1:a0:
08:a7:1f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:43:31 2025 by rpki-client