Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: xgKs38p1jtxPuWsJ+DlwnrKimNbODUDIGRcK2CfgYkQ=
Subject key identifier: 5F:4A:83:3A:87:81:9D:97:04:0A:6A:A6:06:7A:8D:D5:0E:CB:07:0D
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 01967BD73DCD03E79E7EAD44CAFABDF21596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 0DC0
Signing time: Mon 28 Apr 2025 10:00:25 +0000
Manifest this update: Mon 28 Apr 2025 10:00:25 +0000
Manifest next update: Tue 29 Apr 2025 10:00:25 +0000
Files and hashes: 1: D0SM7svQIwgtTWtBXQRfVaYEWCM.roa (hash: 0gzyVGki8KAciWCmOf7f1a5tlOgoH/nOkPBzCHojuSo=)
2: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: bPUaN4svZiN8NeLRo1AddDpr2l1V94sncWvE21T95i4=)
3: _IXLnCzw_zVB3dV_MJacG4jX80Y.roa (hash: Gt8+0DW6xRdgGsnmBSXKglilyEwDNEUME1kVSSFIiv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:3d:cd:03:e7:9e:7e:ad:44:ca:fa:bd:f2:15:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Apr 28 10:00:25 2025 GMT
Not After : Apr 29 10:00:25 2025 GMT
Subject: CN=5f4a833a87819d97040a6aa6067a8dd50ecb070d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:06:61:80:84:e5:42:93:0c:83:db:9d:3b:
ce:05:f4:f1:7c:38:3c:c9:17:cc:5c:4e:c4:84:14:
d1:83:e0:25:74:20:9a:5e:ca:f9:71:91:69:60:8a:
41:62:66:a5:55:8d:36:76:2c:46:18:dc:1d:fe:db:
58:ac:ac:00:ac:2f:5d:da:ff:c3:bb:11:2d:39:bb:
10:40:7f:f0:97:7c:85:b1:7f:9e:c1:ea:80:3a:d8:
21:25:7e:d2:c2:d7:7d:7b:5c:14:3c:b5:40:48:65:
c3:f7:f0:8b:57:92:d3:c6:ff:02:36:f0:18:24:e6:
1b:21:85:16:c9:04:f6:87:ee:2d:72:69:11:20:9d:
7d:42:e9:ff:5a:16:36:20:5d:d6:d0:78:de:6d:11:
f0:48:73:8a:44:0c:6d:1b:4b:0e:bb:bf:2a:94:22:
e6:76:bf:af:c9:02:26:e9:7e:64:48:4a:70:3b:99:
30:c9:65:4e:0d:f1:2c:3c:a6:58:a6:41:e2:7e:30:
e7:14:cf:e3:3f:af:29:96:f9:cf:9c:5e:cf:b9:ce:
ff:18:a6:06:bf:c1:06:15:9f:f7:ce:51:c9:7f:03:
d1:18:5c:bd:cb:e7:d4:7f:da:fd:dc:ac:24:d2:ba:
1e:95:7a:eb:00:82:28:73:fa:d4:cf:b0:9e:c2:86:
65:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4A:83:3A:87:81:9D:97:04:0A:6A:A6:06:7A:8D:D5:0E:CB:07:0D
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b6:ff:4e:a0:e7:15:7b:e8:ce:df:e4:7f:ef:85:03:3d:88:
43:bd:f2:a5:26:28:31:35:fc:74:2c:0a:0b:42:db:d9:a0:1a:
d8:fb:4e:84:d8:2c:f4:d8:76:3c:e9:65:60:c9:6c:22:10:87:
9f:6b:15:c5:10:c9:c4:0d:09:cd:ce:42:75:89:18:11:fc:20:
6d:00:c3:12:7d:a7:4a:8e:b5:82:cf:63:76:d2:1d:07:42:e6:
c5:a2:31:a2:c4:5a:6d:48:17:ac:0c:a3:a6:16:f6:23:f5:39:
6f:38:b9:56:60:7f:07:43:7a:e1:50:b7:2c:a4:12:f0:0f:8d:
98:15:0d:c0:29:f5:0d:db:3e:e9:c1:f7:78:76:8f:e1:d5:1a:
ad:a6:dc:60:a8:85:cc:b7:fb:be:98:97:aa:24:01:2d:05:95:
ca:bd:91:23:15:92:51:cc:96:50:40:89:c9:ee:69:8c:7b:2c:
6d:09:03:85:d1:45:1b:88:4c:3d:39:76:81:37:cd:b7:66:15:
7b:af:1a:2f:7a:5b:13:ee:06:33:ed:8a:6e:cf:a6:0f:5e:e4:
1b:79:c3:03:9f:65:94:d7:49:59:fa:6c:7a:44:4e:f4:d5:af:
ea:2f:13:d9:c8:09:bb:4e:58:70:1c:0a:c6:2e:e0:1b:5a:5a:
35:91:46:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:41:12 2025 by rpki-client