Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
File: lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft (raw, json)
Hash identifier: qP7nRVycgzOXZ0mB+fVHZOd2JI6NYma4fk0z8OZ8OlE=
Subject key identifier: 15:34:A1:D1:CA:82:FD:26:02:0A:46:A0:94:D1:95:12:CF:2A:B8:10
Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
Certificate issuer: /CN=96b8121d556df453456553dcb45c4143f4cdd213
Certificate serial: 0196748B650F39627B0DE63A7B14DD52D28B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
Manifest number: 078E
Signing time: Sun 27 Apr 2025 00:00:14 +0000
Manifest this update: Sun 27 Apr 2025 00:00:14 +0000
Manifest next update: Mon 28 Apr 2025 00:00:14 +0000
Files and hashes: 1: lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl (hash: U1etGHunqPz1J0nS3C0p676xOLQG3TUmY0MGZq/afj8=)
2: qP3YU_S4LUHGi-PUyOS9YdXOrOg.roa (hash: 86gRYjmoaW5iHjfh3rXQG4yuY8yHQt9SBONVBj8bSuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:65:0f:39:62:7b:0d:e6:3a:7b:14:dd:52:d2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213
Validity
Not Before: Apr 27 00:00:14 2025 GMT
Not After : Apr 28 00:00:14 2025 GMT
Subject: CN=1534a1d1ca82fd26020a46a094d19512cf2ab810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:be:de:85:41:c3:d3:75:bd:35:d9:5e:7f:
f8:dd:90:24:72:ca:d8:a0:5f:07:69:72:82:ab:95:
11:bb:fb:88:4a:23:0c:66:3f:d4:65:ab:5f:03:e9:
98:53:2e:76:a2:24:91:4c:0d:fe:44:57:a2:38:6f:
fe:f1:3c:d9:b3:17:4d:39:12:39:91:38:d1:18:ac:
fd:fe:a5:13:55:fe:36:39:a5:0d:d4:d9:3a:97:91:
fd:11:be:24:67:68:88:be:70:79:38:6a:6d:90:72:
1b:5a:2e:dd:b4:a0:d5:0f:d0:38:1e:57:6c:10:18:
91:3a:81:3a:11:33:0c:e8:13:71:6b:4b:bf:01:3b:
a1:f7:fc:ee:85:da:98:86:66:02:de:f0:a1:70:24:
a4:29:07:59:0f:d6:35:80:28:de:e4:a1:37:82:8b:
69:51:39:a6:7a:9c:7f:ed:33:10:1f:a4:0e:61:54:
1f:9f:98:f5:76:c2:12:d7:c1:d3:65:71:7f:31:73:
93:65:09:2c:27:f9:b0:c5:24:4f:97:5a:95:24:60:
80:08:80:61:10:9a:15:80:23:b5:b2:be:24:ba:96:
c9:34:7f:be:15:f0:36:ac:e6:38:af:11:bb:b0:a5:
dd:fc:d7:6d:fa:5e:38:85:15:9a:a5:09:18:b9:6d:
b9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:34:A1:D1:CA:82:FD:26:02:0A:46:A0:94:D1:95:12:CF:2A:B8:10
X509v3 Authority Key Identifier:
keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1f:27:10:b1:f9:8d:8a:72:2d:73:9e:2b:c8:9e:3e:03:36:
61:4b:ea:34:9f:7f:22:d6:f5:d9:c4:28:9b:89:2c:5f:90:19:
3b:d5:b0:d8:9c:51:02:ff:c7:55:2d:2e:a9:78:a1:a0:94:bc:
2a:27:44:05:6d:c6:1b:10:25:a2:c5:09:bf:b6:32:dd:df:57:
d6:04:04:d1:0c:31:4d:2b:5d:b4:09:d0:d6:71:a5:b6:65:2a:
6a:78:6c:2c:ff:5c:ff:1a:bc:0d:18:1a:8b:a7:ef:10:57:c3:
fc:17:0f:f2:88:4c:4a:cd:fa:1b:e0:23:8e:a2:4d:6d:06:34:
62:b2:42:ef:77:60:ad:a2:a7:23:af:44:41:a6:6b:94:df:62:
97:a3:30:9b:33:43:4b:d2:f5:02:dc:c0:4e:48:fb:bd:37:12:
6d:31:5d:7d:7b:af:f1:4f:97:3a:7f:f8:ac:f7:b4:5f:87:5c:
82:90:b4:32:e5:22:fc:7a:d8:78:0c:18:76:d9:2d:11:9d:c4:
12:9e:00:b3:bd:ab:54:22:d9:2c:11:04:3b:66:ea:1f:4e:de:
ca:fc:46:2d:a9:bf:ce:89:74:9e:ff:e7:f7:7c:a5:f8:5d:b0:
0c:7e:30:77:9d:1d:c7:7f:2e:63:63:f1:3d:12:fd:21:ca:36:
75:1f:1e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:23 2025 by rpki-client