Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
File: LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft (raw, json)
Hash identifier: wFLdg3R6vReacTsf6RZP0O9KyimwekHv3PpOoF2hD8M=
Subject key identifier: A6:95:1A:60:7C:C3:A0:E6:8F:E3:10:58:6E:6F:F2:EB:10:9D:93:18
Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
Certificate issuer: /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Certificate serial: 019674C2505686CAD75E16DB14038C4A414D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
Manifest number: 07
Signing time: Sun 27 Apr 2025 01:00:13 +0000
Manifest this update: Sun 27 Apr 2025 01:00:13 +0000
Manifest next update: Mon 28 Apr 2025 01:00:13 +0000
Files and hashes: 1: 65LOTWbYKO8WgYG9BzJDe2-WQYw.roa (hash: r/wzovoY8RroYrCDVvJnayhwU+roMgwKwl/4ua4F6NI=)
2: BNA4ARff29zCBfR6242MtTb6TGg.roa (hash: tJrTcm7xH3ApI498oc2nbD1Dbkv2EhPah1ZZUS9A5bs=)
3: HLToq3nf5OApFMJ_DLN91h1Fnjo.roa (hash: 1jDZSo5xWA1TudXcCIeUFspwv8s1DeU3J7ObH+JPAu8=)
4: LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl (hash: f0JUyE/pVBNpB19dwJLwXX0ZAw8b+qezYz798l4vZEQ=)
5: m150QYtpxXBTiSlnK92QRVRD5zo.roa (hash: ebTEJw9nejGCIduesrnIYj5ZZrinqeTVbBAfSnKeowc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:50:56:86:ca:d7:5e:16:db:14:03:8c:4a:41:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Validity
Not Before: Apr 27 01:00:13 2025 GMT
Not After : Apr 28 01:00:13 2025 GMT
Subject: CN=a6951a607cc3a0e68fe310586e6ff2eb109d9318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:be:69:40:49:35:4d:ac:e4:fb:8c:ed:6e:d6:
6d:53:b2:5a:7f:ae:3c:6f:fe:82:ce:3b:08:1d:c7:
f3:75:13:8e:b5:50:9d:ea:5b:44:b2:f3:ce:5d:30:
e0:f0:4a:15:06:d4:fb:55:ef:3c:1f:fb:3a:1a:06:
b9:20:03:51:4f:65:8f:0e:49:39:4b:2b:86:1b:d4:
88:a2:aa:2f:73:98:43:48:b9:13:85:1b:88:3a:2a:
24:04:c2:63:db:fd:36:02:db:f1:9e:44:02:88:02:
f3:f8:16:fc:16:c0:9e:30:5a:cc:1e:26:73:c7:55:
67:7e:94:ab:1f:dd:6d:6f:32:fb:de:64:52:53:b2:
24:33:0f:46:9a:39:d3:35:e8:e9:32:d6:71:2f:03:
96:58:c9:fc:3d:a4:9e:47:53:73:68:89:23:d9:e7:
21:04:4c:94:6c:8b:5f:b9:53:21:2b:23:de:0b:3e:
e8:12:fa:86:25:68:38:3b:26:08:01:e5:3c:8c:76:
1c:65:15:a3:dd:b7:37:3e:ba:b4:fa:d9:47:5a:15:
ea:1d:7d:6c:9d:13:57:e6:68:ac:b7:b0:b0:1a:0d:
76:29:0d:61:7b:82:4d:d2:e4:bd:0a:8b:02:72:15:
d5:c1:0e:cc:76:4a:d0:dd:4d:a0:30:76:59:9e:30:
44:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:95:1A:60:7C:C3:A0:E6:8F:E3:10:58:6E:6F:F2:EB:10:9D:93:18
X509v3 Authority Key Identifier:
keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0a:79:5e:58:ed:64:57:a8:db:e3:c4:be:36:01:82:87:3f:
33:a5:b6:b4:a9:c1:8d:d1:c4:05:96:a9:8a:2a:ad:7d:7a:45:
2e:08:29:42:d0:d5:bf:65:56:a1:89:5c:3a:8c:1c:c6:22:da:
f1:d6:13:9b:40:28:5e:7f:25:71:a9:cd:04:bf:f1:a6:66:4c:
c1:cb:3e:2d:cd:0b:37:35:ea:3e:43:52:e7:74:bc:3d:03:62:
80:43:5c:49:dd:b2:1e:09:3c:96:de:db:e0:03:44:f4:e7:7b:
06:60:91:ec:01:75:e3:b5:fd:a3:e6:b1:f4:9c:e9:54:c5:66:
e3:de:58:a1:9e:47:a4:31:81:22:b6:a6:9a:be:47:a8:8e:2e:
36:02:59:06:f2:0c:6c:93:e7:b3:2b:68:ed:23:fc:f9:3e:d8:
32:a8:1a:e0:86:f7:d2:df:d7:0a:f6:db:77:f6:56:dc:cd:c3:
e4:5a:37:cb:37:99:5b:e6:42:99:90:0e:59:88:1f:5b:18:f0:
5e:66:1e:4f:19:be:ff:2d:a8:3d:ed:0e:83:38:3f:c3:23:dd:
2e:3d:8f:c9:4a:07:92:a9:92:95:f7:27:f4:0f:72:a9:a7:7a:
58:89:39:52:8c:ad:65:07:11:90:01:37:5e:29:3c:a3:6c:11:
05:51:35:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:42:35 2025 by rpki-client