Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
File: LrqqxROYKzwk02DG1GXPgkIFaok.mft (raw, json)
Hash identifier: Oe6hDRBD5HcyQDjjw21yIqA46YQYvYQqN351TXkcwbg=
Subject key identifier: A0:9E:E8:FE:E9:F4:B3:AF:9F:C7:49:92:81:18:E3:87:FD:05:7A:4F
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Certificate issuer: /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial: 019695296A2CF7739355E2DA7734DCBADB8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
Manifest number: 1520
Signing time: Sat 03 May 2025 08:00:41 +0000
Manifest this update: Sat 03 May 2025 08:00:41 +0000
Manifest next update: Sun 04 May 2025 08:00:41 +0000
Files and hashes: 1: GY1X78tUCHALN-6VezXTntkS1S0.roa (hash: B4/LrjmuUdItXDnKDdePMAJjiq+F77UrPT1SZV8fodQ=)
2: LrqqxROYKzwk02DG1GXPgkIFaok.crl (hash: nKo4vShb5GkR9kbIIr3d+hVxLUQex/XuUYwHOcjVBXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:29:6a:2c:f7:73:93:55:e2:da:77:34:dc:ba:db:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Validity
Not Before: May 3 08:00:41 2025 GMT
Not After : May 4 08:00:41 2025 GMT
Subject: CN=a09ee8fee9f4b3af9fc749928118e387fd057a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:a6:c7:47:71:61:59:7a:da:e5:62:6f:80:
b2:21:3f:f9:ff:2b:56:d7:5b:e9:ac:71:01:03:ee:
82:06:d4:a5:68:17:06:74:90:8f:64:65:be:fc:01:
f1:44:50:0d:bb:a0:e0:61:bd:e4:49:39:14:1a:ab:
43:10:d6:97:de:eb:3e:33:cc:3f:10:a1:71:a8:b1:
95:07:0e:b3:f6:99:93:00:47:be:23:49:4f:b1:27:
90:d7:d2:56:fb:54:21:d4:6e:c1:9a:41:a4:59:5f:
7a:e7:a5:d3:4a:2d:61:18:d7:7a:ac:67:a2:28:e9:
31:b0:01:ae:1c:47:e2:2e:8a:f1:ef:cd:74:99:d1:
5a:d3:ab:fc:9f:fd:95:c8:72:db:d6:f3:e9:aa:03:
d2:d0:01:cf:e3:a4:95:43:46:06:ac:28:70:cc:42:
38:1f:95:8c:10:67:fe:ec:b7:09:f7:3a:29:6e:a9:
27:19:e1:33:71:09:fa:2c:0f:36:84:38:37:4d:c0:
bb:df:1f:13:35:dc:f9:eb:99:cb:d1:a6:68:b3:40:
a9:49:c8:aa:ed:cf:21:5e:65:2c:c1:ba:61:aa:75:
56:39:89:00:f6:25:3e:32:65:8e:01:f0:d9:1f:12:
64:95:6f:a0:b4:5b:25:45:dd:2d:39:d8:24:46:41:
9b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9E:E8:FE:E9:F4:B3:AF:9F:C7:49:92:81:18:E3:87:FD:05:7A:4F
X509v3 Authority Key Identifier:
keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b2:12:59:c6:ff:34:c3:a6:55:07:00:44:e9:1d:38:30:c0:
c8:0c:28:8b:21:50:89:e1:f9:e6:fb:ed:3e:a8:24:42:08:7c:
83:59:d9:91:42:d8:13:45:c3:c5:42:20:2e:da:81:4f:2a:39:
2b:5d:88:41:ba:b6:23:4f:d7:97:b6:7b:52:b9:85:44:48:4b:
84:53:ef:6d:c7:50:2b:bd:33:93:e7:83:69:3a:67:59:f7:40:
37:e1:4d:87:cd:8c:3c:35:09:63:b2:10:99:e8:ca:df:ea:7b:
6e:14:e0:ce:d8:33:06:76:e6:ef:55:e5:f9:02:10:a1:ec:87:
6d:82:40:1a:19:10:9f:45:30:8b:e4:a7:82:88:f0:e8:ed:62:
fc:80:d3:8f:a9:53:a5:40:2e:46:bd:f7:eb:c5:45:8d:b9:cf:
df:77:41:d3:fb:d0:d1:9a:40:6b:43:ac:a1:8f:3d:c6:73:40:
87:8b:ba:c5:32:dc:45:2e:d1:8c:b9:4a:43:be:6f:45:16:19:
04:91:31:9c:96:9a:d7:b4:ab:9d:3e:91:f5:02:f6:93:e0:22:
3d:20:b3:16:b7:b9:2e:8f:db:cf:5b:7e:ca:8a:b2:3c:71:59:
91:a6:66:30:2c:6c:91:3f:51:ce:96:ef:3f:65:78:93:56:3e:
ba:98:44:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:38:38 2025 by rpki-client