Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: YgcSIz5cHWisaG6TGlrKfnEljdJs6ZrOyLZRUREqKlg=
Subject key identifier: 14:BE:69:20:E3:55:7D:84:B1:16:10:37:23:0E:72:48:8F:3F:44:4C
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 0196A5AF339BC3B435BA9125117D85A65B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 1529
Signing time: Tue 06 May 2025 13:00:44 +0000
Manifest this update: Tue 06 May 2025 13:00:44 +0000
Manifest next update: Wed 07 May 2025 13:00:44 +0000
Files and hashes: 1: 0jE-nEfR5T_d7BILsWZTUD9dG5M.roa (hash: av9KzOnABL0S/mILNTQRWW5+TsQkQ7Bk5uNHmlLtxtc=)
2: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: uTgOlIQBAq0ylzdE6mR26A75xngFyXn92Vz+x7EdZtk=)
3: gSdyPqr-OoyLVq-r6dULnURGpXQ.roa (hash: AJDr6l36OnIeYet8bGE+tBeIfs9sdxJq8CBSPv8HuMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:af:33:9b:c3:b4:35:ba:91:25:11:7d:85:a6:5b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: May 6 13:00:44 2025 GMT
Not After : May 7 13:00:44 2025 GMT
Subject: CN=14be6920e3557d84b1161037230e72488f3f444c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:9a:e5:b1:54:12:60:35:17:a5:9b:b3:aa:
37:44:52:f1:28:f9:9f:15:c4:c2:d4:7d:2b:4f:2d:
89:8e:f9:2a:b1:cf:22:38:9a:f4:52:2e:ca:ff:07:
2d:fb:ca:53:46:b3:ce:20:b8:04:1e:2f:38:95:29:
97:25:a4:c3:77:ab:a4:96:92:59:ff:8f:b4:d0:8d:
91:4d:28:71:09:6c:0c:ff:b6:4b:a8:65:fb:d7:35:
2b:fd:79:63:51:fc:d2:c0:9d:7c:c8:bb:b7:09:90:
d6:ad:38:16:c0:56:7e:60:17:c5:23:30:5c:20:c7:
6a:72:97:a3:c8:0f:d1:f6:f2:b6:f0:e3:40:9d:91:
fc:92:3a:6f:06:6a:5a:e2:1a:a8:f2:07:5f:4d:5b:
90:b2:67:6c:14:af:27:46:36:fc:3a:6e:9a:ee:9e:
56:ec:8c:63:44:a7:0a:40:8c:c9:2b:9c:60:64:f0:
ed:69:ce:ee:68:b4:c0:fd:50:f1:77:c1:51:82:77:
cc:7a:66:ae:70:db:8e:f5:99:c9:6d:c6:3f:11:6a:
49:55:18:0a:bd:52:08:5b:d1:da:7a:9a:7d:17:27:
82:4b:aa:cd:e4:b1:34:9f:3e:59:ca:2f:68:3a:24:
34:46:bc:fb:5f:c6:aa:78:a9:a3:37:bd:8c:0f:67:
19:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BE:69:20:E3:55:7D:84:B1:16:10:37:23:0E:72:48:8F:3F:44:4C
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d0:c1:39:4c:dc:18:b3:9a:56:ce:c6:a5:37:0f:50:eb:87:
f8:ba:ca:51:b6:ee:52:c7:65:ec:ee:5a:7c:ad:b9:05:3e:4c:
49:aa:af:dd:ff:d4:ec:7f:2f:07:76:b8:7a:54:f4:5c:54:f7:
44:f9:4b:88:9e:0f:56:15:d5:78:46:9e:78:dd:81:04:d4:4a:
16:17:0e:53:e9:d9:70:d6:db:2c:4e:99:e4:cf:ab:c3:17:d7:
4b:f7:0a:ff:7b:00:86:9a:34:6c:38:16:7d:50:3c:e9:cc:ee:
c4:54:ac:06:6a:83:54:72:b6:2b:27:31:c3:04:8b:92:b8:eb:
b0:66:f8:01:2d:d5:89:07:ec:2b:d1:b8:0b:3c:d4:54:15:53:
67:20:59:0a:9e:91:b4:0c:7f:ae:7a:be:f0:ed:41:0f:6a:34:
b4:e5:0d:73:16:66:b7:40:e8:82:fb:72:81:17:13:cc:00:7d:
26:31:1f:24:53:8a:4b:a3:7e:2a:e4:46:2b:6f:b8:6d:76:a3:
cb:6d:08:d9:da:87:69:ff:92:4d:d8:c6:5d:24:8c:97:b5:df:
3b:1f:4e:f1:80:a8:62:a4:69:f8:a1:fa:eb:38:55:d8:59:75:
e5:7c:12:d1:d4:d4:f3:d3:f1:e4:db:3b:e5:5b:2b:d2:8e:0b:
28:91:11:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:12:13 2025 by rpki-client