Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
File: LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json)
Hash identifier: yfODEfvlpzCqyWBj5Av03EZWwnrbS8JgkIt4m7rhD08=
Subject key identifier: E0:10:8A:1F:E6:31:1B:DE:28:F1:51:19:BB:CC:7F:4E:82:4D:B2:F1
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial: 0196B747A0C0A74CA1555571E120347E3EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
Manifest number: 0EF8
Signing time: Fri 09 May 2025 23:00:46 +0000
Manifest this update: Fri 09 May 2025 23:00:46 +0000
Manifest next update: Sat 10 May 2025 23:00:46 +0000
Files and hashes: 1: 6_d9VSWBVNToOGPNlpWA61QmprM.roa (hash: 57355UO7axP5A8MR5ssS/djmBZAYmcZTAffNl5b7yUY=)
2: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: v6BF67Z9Vv+25TmOQc1WJsJ8gnspno8uGrkjooHFqMw=)
3: h79SEaHwXYiVzt4p0CBMPa0GFjY.roa (hash: LtDXQ1PILY1+EGPsQbs1Ku9N9hF4cubp+4vVwoPrfN4=)
4: uc4NY9XdDoUNm-7G0TF_f0pLIfg.roa (hash: Kdxkp+N3BeWYNrfae94aDnYFKHtejikhtbXsxsmUtiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:a0:c0:a7:4c:a1:55:55:71:e1:20:34:7e:3e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Validity
Not Before: May 9 23:00:46 2025 GMT
Not After : May 10 23:00:46 2025 GMT
Subject: CN=e0108a1fe6311bde28f15119bbcc7f4e824db2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:24:85:04:a0:3c:32:b6:44:36:3b:5c:5e:
96:6c:3e:b3:84:82:95:9d:bf:dc:63:d1:74:75:33:
5d:42:64:4e:74:57:36:85:ee:8f:c3:64:9c:30:d5:
32:6c:41:54:15:aa:f6:c6:af:85:de:8d:e7:a2:73:
27:a2:a9:1b:f2:75:98:40:68:da:e6:5b:e3:28:bd:
40:58:16:a0:ce:95:28:cb:27:39:af:01:29:c5:6a:
57:5f:a7:09:c0:fb:55:7e:b8:d0:1a:c7:f8:79:77:
b4:d4:89:86:64:4e:19:c9:f9:e6:1c:33:79:4c:11:
a6:e1:82:13:00:ec:a3:bf:e6:e6:c7:28:2a:09:10:
dd:9e:c2:de:89:6a:3e:da:09:eb:50:70:49:03:5a:
87:2c:82:44:22:d4:93:2e:e7:30:85:e8:e8:5d:c7:
96:fa:25:dc:84:4f:28:1d:e4:7c:64:d1:a1:5f:1d:
71:47:89:48:bc:8a:6d:80:a2:3a:46:6f:e6:19:1d:
6f:60:fe:c9:13:61:cc:b5:7b:05:cc:a2:24:e1:b8:
67:0b:12:f0:63:6a:ca:58:ba:73:ae:9b:06:b1:4d:
7c:be:f3:ec:ad:f4:90:2e:5c:a6:e4:bd:35:b2:a5:
b1:8e:d8:e7:a4:39:bb:6e:4a:95:03:c6:4d:bf:df:
a3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:10:8A:1F:E6:31:1B:DE:28:F1:51:19:BB:CC:7F:4E:82:4D:B2:F1
X509v3 Authority Key Identifier:
keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:06:f2:e4:a2:16:a1:db:83:80:c7:e7:1f:89:2e:a5:f5:e8:
86:b4:88:3d:2b:89:6e:18:f4:c8:40:36:52:54:53:ec:66:f9:
54:aa:23:5e:e7:f8:f6:9c:84:93:20:28:6d:02:f3:e6:eb:bc:
83:12:42:ce:bc:08:fd:49:a0:32:b7:ff:48:84:9e:75:98:61:
24:6d:ba:54:19:0d:c3:e8:0a:88:f6:bd:f5:02:d2:67:92:66:
cd:2e:6e:5e:a3:8f:2c:0f:fa:e4:78:bf:4f:aa:35:ca:1b:95:
b0:6b:f7:cc:28:c2:b0:0f:d0:7d:66:b7:60:f9:69:bd:a4:57:
b4:8e:ee:c2:f4:f7:1c:0e:c0:36:cc:c4:bd:92:cd:24:9a:b8:
0c:ba:c8:65:f3:1c:37:0c:06:bc:b2:2c:93:7f:f3:37:2d:6f:
34:96:8a:3f:e8:67:bb:a4:5c:a0:d5:d3:d4:0f:78:c5:3a:55:
e4:5f:9b:65:06:28:e0:ab:95:6b:83:72:54:ca:9c:11:63:e8:
eb:78:9a:4c:0c:d6:b2:9a:ab:f8:6d:de:d8:2e:17:ae:b5:24:
a2:74:62:f5:c6:40:a7:bb:f4:d3:e6:fb:35:b4:63:6c:df:c3:
d7:ec:fa:5f:dc:39:c2:50:1d:78:54:72:46:9b:66:9a:e3:8f:
74:60:df:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:37:12 2025 by rpki-client