Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
File: LuVtTXsdGgbOifdG95tlbHNIxSU.mft (raw, json)
Hash identifier: FO324+46qPkqshtlMZBQHvsr/Ts9rkby66d+/abPp80=
Subject key identifier: EB:F9:7E:C9:98:CE:20:8C:55:EA:1E:C6:81:50:58:E5:21:9D:74:20
Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
Certificate issuer: /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Certificate serial: 0196B93580853B540826A34D9F02BA33073C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 08:00:13 +0000
Manifest this update: Sat 10 May 2025 08:00:13 +0000
Manifest next update: Sun 11 May 2025 08:00:13 +0000
Files and hashes: 1: 2aLxopPcHENcfLMPsouZcp1_F6M.roa (hash: h4R/reMNBt8uBqG3DatHK1fJyHrvX4LbUEuuPBCoJK8=)
2: LuVtTXsdGgbOifdG95tlbHNIxSU.crl (hash: dIVJ6fKrl8TyiGfb5ou5ltmcCcBKDEZqz1Bezbj+eMo=)
3: VUTE9O5_hq_bVZqW49cK8Uyj9bo.roa (hash: xI9AJIQruyMmhbpTp5z9YUSoSRn5ytxFSzSALijAUX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:80:85:3b:54:08:26:a3:4d:9f:02:ba:33:07:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525
Validity
Not Before: May 10 08:00:13 2025 GMT
Not After : May 11 08:00:13 2025 GMT
Subject: CN=ebf97ec998ce208c55ea1ec6815058e5219d7420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:56:ed:b6:20:00:45:de:21:73:2d:86:3b:2b:
4b:55:7d:62:e0:ae:4e:7d:77:a4:5e:09:11:6d:5f:
44:b2:59:ab:24:05:ca:f7:a7:43:bd:9b:c2:92:01:
cd:01:06:26:09:ce:1c:fc:58:8c:7b:71:97:e3:35:
11:a8:f2:c8:0b:f6:15:72:56:0a:3e:a5:b3:97:5d:
a7:09:e3:c8:98:16:fb:df:41:3a:2c:c9:9f:47:16:
d3:63:66:72:b9:42:4f:2e:5f:92:6a:3f:0b:4b:50:
7b:c6:b4:36:2a:03:55:69:d5:cd:c6:83:1f:17:b2:
e8:2f:fa:32:75:3d:9a:69:84:c9:f1:d1:78:be:ca:
b7:d4:9b:6c:bd:de:ab:23:9b:75:56:73:69:d0:62:
1e:a7:b0:91:4e:17:49:68:6c:d5:53:f0:39:a9:e2:
2b:b0:02:7f:ab:02:12:8f:ce:33:58:e9:6f:ee:f0:
ea:86:d2:7d:c8:69:f0:02:4b:55:e5:da:d1:ab:82:
ed:f4:d7:2f:bb:ec:33:c7:f0:53:f7:70:38:08:ed:
45:1c:dc:b3:64:6b:f1:0a:7c:b6:60:e8:94:d0:73:
9c:64:52:04:a9:7c:52:21:8a:a8:7b:d0:f9:c4:9e:
4b:35:3a:ce:82:df:02:53:e6:c8:d8:c7:14:24:1e:
56:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F9:7E:C9:98:CE:20:8C:55:EA:1E:C6:81:50:58:E5:21:9D:74:20
X509v3 Authority Key Identifier:
keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:65:c3:55:09:89:e0:20:6c:f2:b0:4f:6b:59:9b:08:57:b3:
29:b9:1c:a7:17:1f:45:60:d4:65:3f:34:61:18:7f:a4:9a:04:
cf:5e:e0:d8:12:13:a1:fd:5e:76:76:b2:e5:f9:8a:24:61:a2:
6a:e8:64:91:0b:2c:3c:60:cf:cc:98:01:40:01:a3:b4:54:83:
00:4b:db:a4:a6:a9:d9:9c:c7:51:c6:2e:5b:f2:ad:c0:37:f8:
77:bd:21:e2:4a:50:b0:44:8e:75:a4:2c:ba:dc:3c:8c:57:8a:
5d:32:9e:b0:59:2a:bb:1d:c8:97:1b:68:39:b3:a7:9f:79:56:
06:58:de:ce:33:ae:34:96:ce:8f:06:29:d9:5a:2d:b5:7f:29:
c4:15:85:50:db:42:2a:bc:b5:ba:40:3a:96:28:0f:a5:5d:c1:
ae:8f:e6:9b:c4:e6:3c:2b:70:93:92:b5:04:6e:81:44:22:bb:
aa:0d:18:6d:ce:cc:01:e5:d7:d0:52:ba:13:79:ce:c9:ab:90:
bb:8d:cb:a6:d5:14:3b:69:2c:4d:37:6d:04:0c:de:03:64:c6:
e6:34:0f:bc:37:56:c9:78:98:ab:1d:96:c0:f0:02:30:21:66:
b5:5e:0c:5a:1f:79:d3:15:08:5e:f9:82:72:01:2f:6a:6a:1b:
66:39:d7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:50:43 2025 by rpki-client