Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
File: lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json)
Hash identifier: 0A5LhRV4rnV0Pc7FOx52IpCfs39bWTcIo8TVL60HNEw=
Subject key identifier: 2F:C4:39:11:DE:E0:F9:DA:8D:D0:9C:1D:0F:1D:14:37:03:36:C3:AE
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial: 01967C0E4F7DC6F89597DE4BD1BCBEEBC79E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
Manifest number: 10AB
Signing time: Mon 28 Apr 2025 11:00:34 +0000
Manifest this update: Mon 28 Apr 2025 11:00:34 +0000
Manifest next update: Tue 29 Apr 2025 11:00:34 +0000
Files and hashes: 1: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: 7qvG7pfii12PygLgs0iY3qEc8GaeeTwBphPna56DNUw=)
2: pvaPM5j3-BPWJpSuaWFE01jgVBg.roa (hash: vcFvxHEzp1YnutqV+Bq+p/f/FPwpa1xjzTG6Rie7rFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:4f:7d:c6:f8:95:97:de:4b:d1:bc:be:eb:c7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
Validity
Not Before: Apr 28 11:00:34 2025 GMT
Not After : Apr 29 11:00:34 2025 GMT
Subject: CN=2fc43911dee0f9da8dd09c1d0f1d14370336c3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:01:69:97:d5:68:eb:bc:72:52:62:0c:62:
fa:ba:59:af:a2:bc:15:89:a7:5b:72:a5:e5:29:38:
24:8c:d4:df:57:49:c8:ee:5d:85:07:e1:04:2b:ae:
5a:a1:66:21:71:17:3a:c7:e8:f5:b2:5a:23:66:19:
ee:5d:2c:1c:a1:3b:84:95:ce:2c:de:1b:5b:70:6b:
b6:f4:28:5c:46:04:83:a9:5f:cf:5e:c9:4e:67:af:
99:ea:46:20:91:2e:0e:11:d2:20:e3:8e:02:85:a8:
bf:09:89:0a:ef:57:db:7d:7a:47:8c:a3:c2:94:42:
1e:c2:75:d2:80:f4:35:81:8a:ee:fd:1c:4b:af:18:
2c:3b:55:a2:2f:00:2d:7a:22:8e:55:f2:c0:ca:ab:
fd:ba:7d:36:e4:00:11:2b:d1:8e:63:1c:fc:69:a1:
05:ee:cd:e7:3d:ee:91:a2:22:ef:04:e9:ce:08:d7:
f3:00:ab:70:5c:d6:54:32:72:5e:17:37:6c:71:23:
af:ce:a0:68:39:8d:94:6a:2b:5d:e6:4c:78:d0:67:
12:87:79:b1:15:8e:4a:b0:14:91:e2:33:ac:68:4d:
a5:d2:82:50:75:56:64:6d:78:0f:e2:da:21:ef:8e:
fe:24:cd:04:07:db:0b:d8:ac:0a:ca:33:12:88:89:
b5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C4:39:11:DE:E0:F9:DA:8D:D0:9C:1D:0F:1D:14:37:03:36:C3:AE
X509v3 Authority Key Identifier:
keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ba:ba:0f:93:e2:02:d5:62:0e:2a:79:fa:ea:d6:7d:c9:b3:
05:f6:9e:b9:5b:85:9a:f7:5a:e4:8f:bd:43:cf:3f:01:53:9c:
42:f4:ae:2b:a0:03:87:18:8a:e9:0a:7c:f2:34:94:e5:ab:68:
07:8c:4f:00:5a:18:eb:33:19:0c:1b:ef:19:d2:32:4a:b2:85:
25:50:d7:ae:f3:e9:ed:57:e2:89:34:67:a6:a5:f7:6a:11:c1:
35:0b:d7:94:ef:d2:de:cb:68:2c:fe:f1:2b:37:48:70:8c:87:
88:0d:94:50:d2:09:13:27:b4:84:02:88:0b:29:04:f9:8c:d9:
55:6c:10:97:24:e1:49:ed:23:69:b2:99:a8:5d:c3:7a:8b:45:
61:72:f8:4e:c4:88:cd:34:8d:5f:7c:8a:d7:b4:2e:9d:67:c0:
28:55:7f:29:c7:42:9a:7c:a5:c3:fb:7e:7d:ff:37:c8:30:d8:
9c:21:d9:83:64:f5:61:d8:d8:a8:58:c5:1d:91:72:d4:95:88:
74:32:0a:43:34:71:d2:5e:5c:89:a4:96:e4:fc:0a:6c:73:9b:
6e:1a:5c:39:88:42:f4:b1:d7:fc:4e:09:2b:ca:7e:b1:99:e3:
a2:e0:a5:85:63:37:ff:1b:18:1f:8d:dc:16:fc:b5:70:60:bc:
c8:40:04:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:25:15 2025 by rpki-client