
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
File: lnL-hxW2OhIO19Bn61Jf5LbekPc.mft (raw, json)
Hash identifier: ZgnvCDVRQy1c0Ock5RFyeARTEwnnuE+UdYn0HmZOeZY=
Subject key identifier: 6B:F8:C4:E0:F6:B8:3D:BC:DB:CF:8A:6C:16:50:24:87:AD:79:82:6B
Authority key identifier: 96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7
Certificate issuer: /CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7
Certificate serial: 019676B12669FA5674F7EE4A8C1E220CFF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
Manifest number: 14CA
Signing time: Sun 27 Apr 2025 10:00:43 +0000
Manifest this update: Sun 27 Apr 2025 10:00:43 +0000
Manifest next update: Mon 28 Apr 2025 10:00:43 +0000
Files and hashes: 1: DBxzAZVNSJPu_D0QGXT-19vacIM.roa (hash: bIWX7NiEWiqzGP0lZHaLTFhN+7dD70TkNkDzreVHTKQ=)
2: lnL-hxW2OhIO19Bn61Jf5LbekPc.crl (hash: NIt76RJDfvt1mHVQdQU7n1BPZG0yi/QKDGBg7aKLiQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:26:69:fa:56:74:f7:ee:4a:8c:1e:22:0c:ff:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9672fe8715b63a120ed7d067eb525fe4b6de90f7
Validity
Not Before: Apr 27 10:00:43 2025 GMT
Not After : Apr 28 10:00:43 2025 GMT
Subject: CN=6bf8c4e0f6b83dbcdbcf8a6c16502487ad79826b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:4e:be:93:c2:ef:b0:eb:5a:d7:cb:17:1c:
12:08:9f:70:1d:3c:cf:05:32:74:dd:0f:42:12:24:
14:9b:4f:23:70:1a:b7:17:54:00:03:f1:9a:c8:d9:
ff:a7:86:cb:8e:7c:aa:d3:58:41:c4:4b:37:76:b0:
64:3d:e7:c9:cc:c8:72:11:af:e5:0a:de:1d:b3:7e:
ea:cc:c9:78:e5:e2:3d:9b:e5:6d:16:f4:1a:a3:f5:
3d:58:01:43:bd:26:43:6f:ac:08:3d:34:90:56:73:
c5:34:83:e5:99:2a:b1:91:10:a8:46:b8:a2:63:15:
8a:b3:78:53:d7:be:48:9e:fa:61:93:72:fa:b1:8a:
a8:5d:e5:d4:1b:24:89:0b:d3:a9:51:d1:2c:7a:b6:
83:1a:50:88:1d:54:98:dd:7d:12:6b:3f:ce:88:04:
ec:6f:fc:5e:71:9c:1f:1f:0c:22:3e:6f:46:75:22:
fe:57:5e:c5:39:b3:ae:06:60:56:b5:2b:8f:7a:ed:
1a:0e:2b:d2:50:46:76:39:5c:4e:cf:a2:e6:f4:30:
25:44:4f:6d:02:ba:7e:d8:f9:5b:18:44:bb:17:b3:
dc:9a:c6:36:9b:ac:02:68:af:4d:31:6a:51:bd:ef:
01:d7:5e:af:e2:5c:12:52:6f:ff:c9:6e:f4:91:84:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F8:C4:E0:F6:B8:3D:BC:DB:CF:8A:6C:16:50:24:87:AD:79:82:6B
X509v3 Authority Key Identifier:
keyid:96:72:FE:87:15:B6:3A:12:0E:D7:D0:67:EB:52:5F:E4:B6:DE:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnL-hxW2OhIO19Bn61Jf5LbekPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/96b597-ca2b-4a9c-bb82-5bbe7b20f3fc/1/lnL-hxW2OhIO19Bn61Jf5LbekPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e9:b9:b0:13:9e:5a:1e:04:ec:7c:2d:97:28:c6:94:c6:a2:
4e:5f:bc:a2:73:b8:d1:ba:24:bb:bf:de:b3:c0:ca:37:26:18:
d8:82:bd:84:6d:6f:30:d5:fc:fb:50:43:c4:96:ed:39:c4:31:
46:a8:41:35:f1:f8:c0:35:e0:cb:52:20:24:76:21:15:1b:77:
58:80:c8:7e:c0:f1:1e:fa:c5:97:11:af:44:cc:d5:e5:98:04:
08:48:a5:8b:30:f6:05:d0:f1:33:f9:dd:19:b0:00:67:d7:41:
3d:26:aa:c3:e9:db:56:8e:8b:67:70:f2:71:11:49:da:bf:58:
94:c6:bb:b5:4b:0a:e0:d2:ff:3f:4d:91:2e:90:21:e2:9b:03:
46:99:f3:23:9f:b1:28:a3:f0:ce:2b:23:2a:8d:d5:cd:9f:45:
36:b2:6d:64:58:60:73:58:66:10:b6:fd:4d:d4:81:22:ea:4f:
af:cc:3f:fd:61:36:93:da:22:ee:5f:7f:6c:c2:ca:51:1e:ce:
0d:29:34:e5:8e:1a:54:b1:d7:a0:19:1c:f7:22:f8:da:06:c2:
fe:20:19:9a:d9:24:a8:f2:52:45:28:ec:85:42:a2:67:ac:bd:
52:5f:93:83:2a:74:7b:c8:d6:ce:bb:41:5d:31:20:62:f6:2e:
5d:e6:d9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:17 2025 by rpki-client