Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
File: LbYW860DY-cmnMLrWNG8CGzJdfI.mft (raw, json)
Hash identifier: GoWApsLmng2MiviBcj8vrIqDwMmgGSNzto9Pk98B3/U=
Subject key identifier: 25:91:28:3B:29:B5:AF:7F:CC:76:89:71:B3:BF:CE:DA:99:76:3F:EC
Authority key identifier: 2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
Certificate issuer: /CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Certificate serial: 0196B7B5F88407810AE3038DA3EE2327E11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 01:01:18 +0000
Manifest this update: Sat 10 May 2025 01:01:18 +0000
Manifest next update: Sun 11 May 2025 01:01:18 +0000
Files and hashes: 1: LbYW860DY-cmnMLrWNG8CGzJdfI.crl (hash: JzlGX7uJYrl05Dw01Esl+ki6RoHOn8I+XGPGTipi+rU=)
2: TtiFva0B7nBQnunu1qXuQVvAjRk.roa (hash: BCLtQWteuqq7HD+J7kkS4GO2lBhow7GRQ0k6IwJXdnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:f8:84:07:81:0a:e3:03:8d:a3:ee:23:27:e1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2db616f3ad0363e7269cc2eb58d1bc086cc975f2
Validity
Not Before: May 10 01:01:18 2025 GMT
Not After : May 11 01:01:18 2025 GMT
Subject: CN=2591283b29b5af7fcc768971b3bfceda99763fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2e:23:9c:71:76:f6:9d:52:4c:e4:2d:a9:60:
ad:13:95:d7:0a:17:e4:d7:c2:f9:58:cd:e6:aa:b3:
41:80:31:78:8c:9f:48:65:b2:fb:be:26:9c:a0:d5:
e3:bc:a2:f4:cc:81:c1:3b:6c:05:c0:a2:79:36:f5:
a8:cf:c1:1b:c7:42:e7:68:cd:de:8f:5a:ec:f5:53:
7e:81:0b:c4:76:8c:2b:f9:1f:5f:06:fb:9d:58:97:
02:62:bc:87:98:c8:ac:2f:50:92:48:65:7f:94:fb:
6d:5f:9d:c8:3b:df:90:46:90:80:ab:84:3e:49:17:
07:c3:de:a8:1d:70:2d:e1:33:33:d6:8c:72:67:dd:
aa:52:eb:e0:7c:6d:3a:26:cf:67:57:e0:a9:2f:8a:
c8:59:a2:93:93:46:4d:a8:93:5a:f1:d7:97:ba:8c:
31:7e:64:4d:1b:5a:bc:70:70:e8:d8:e1:de:ff:a0:
9f:c4:86:17:74:de:d1:2f:f2:48:89:14:de:e5:fa:
a1:e5:c7:4f:6b:07:28:e7:ef:69:84:42:bf:f7:00:
1b:fe:8a:6b:c6:9b:ae:9d:a8:40:f3:f6:34:e6:e0:
26:a6:f5:48:87:bf:3a:72:71:85:2d:27:11:6a:12:
6b:5c:04:ed:7f:28:0b:91:8f:a1:d9:fe:e4:40:b0:
69:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:91:28:3B:29:B5:AF:7F:CC:76:89:71:B3:BF:CE:DA:99:76:3F:EC
X509v3 Authority Key Identifier:
keyid:2D:B6:16:F3:AD:03:63:E7:26:9C:C2:EB:58:D1:BC:08:6C:C9:75:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LbYW860DY-cmnMLrWNG8CGzJdfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a226d-c72c-4c12-bbba-a4b55a71c228/1/LbYW860DY-cmnMLrWNG8CGzJdfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:95:60:af:7d:c9:2f:8d:c8:2d:3e:db:90:cb:a2:51:c3:1b:
80:24:64:7d:a4:34:d6:a6:80:3a:f9:b2:41:e3:d2:12:47:3d:
90:b8:47:33:27:b3:cb:77:73:09:c3:22:a2:f7:15:3b:ed:61:
26:50:9d:7c:33:5e:59:a6:0e:c3:6c:df:dd:36:61:be:5f:60:
2f:46:a1:ed:5e:1a:2d:a2:eb:9b:51:cc:94:f8:8d:36:81:46:
02:4a:cf:3b:02:2f:80:7a:82:9e:fe:94:a9:03:f3:3a:05:0c:
ea:f8:a0:3a:d1:1e:7c:1e:77:18:79:31:de:a7:e6:32:80:19:
57:98:45:cc:fc:8d:11:4d:ca:cd:4c:81:7e:76:4c:35:b5:65:
40:97:16:c0:ee:1f:cf:dc:9b:a4:4b:83:5c:d2:d8:b2:59:ec:
3d:a5:eb:c1:ba:05:33:a0:50:89:5d:2f:3b:30:c7:26:9e:ce:
f3:da:51:e9:af:cc:f8:e6:dc:c7:f9:8f:91:72:29:8e:cb:67:
a8:93:6f:e9:39:09:7b:5b:75:04:32:16:e6:4d:ee:77:dc:c0:
72:ea:17:94:ec:7a:fa:ed:2d:a9:5a:b2:5f:d4:c0:27:a1:e1:
87:bf:43:08:62:c3:d9:37:85:0b:d8:95:b2:76:51:d9:ac:36:
2e:db:24:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:25:59 2025 by rpki-client