Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: 5ViitkGAlK20XsAePvCRC3cDpHqK2mmLHLwAB3nkqwc=
Subject key identifier: 6A:F0:3B:9B:58:D4:13:3B:BA:F4:A5:DF:BE:4B:8F:98:E0:51:8E:43
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 0196A3C0EDBAA652B2AF2083A649FE15252B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: BF
Signing time: Tue 06 May 2025 04:00:52 +0000
Manifest this update: Tue 06 May 2025 04:00:52 +0000
Manifest next update: Wed 07 May 2025 04:00:52 +0000
Files and hashes: 1: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: 5YNQvR0o9JJzb/IR7x38/DDjS+XPze//Kdz7b8vlQ0M=)
2: fLlv5aqJH-Xyc8xZ7zKtVoErMgY.roa (hash: NhTDsXx1rGZ6x/7/rknUayaETp5dTu1vdjx00J+ePS8=)
3: g4OghidcBHhG6H0ygzNjK0BOBQ4.roa (hash: yN/WoqH4d4SXT4k7UzUmKgAO2KnbhoqPw7tsWQrX0cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:c0:ed:ba:a6:52:b2:af:20:83:a6:49:fe:15:25:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: May 6 04:00:52 2025 GMT
Not After : May 7 04:00:52 2025 GMT
Subject: CN=6af03b9b58d4133bbaf4a5dfbe4b8f98e0518e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:bf:af:17:6b:0f:64:de:99:19:86:16:b7:
24:d9:77:24:06:22:a7:65:79:7f:eb:12:1d:7a:b9:
0a:77:bb:47:07:5b:1c:69:d1:c4:1b:4f:0b:48:3a:
88:2a:ae:96:64:7a:e8:6d:67:47:46:f8:93:5c:23:
0e:cc:a8:fa:fb:e4:6e:b4:48:fc:d4:d8:98:e6:64:
0c:a0:9b:2a:eb:d7:89:e4:ea:62:b2:4a:f9:07:d4:
4e:7b:0a:8c:64:0b:e4:ba:d1:96:15:04:3e:c8:5d:
33:33:1d:d1:af:61:5b:bc:b3:f8:41:2a:ab:9d:7b:
65:be:47:b1:7b:40:c3:9a:1c:60:ea:fa:09:5b:aa:
96:f3:95:db:17:78:16:27:8e:c9:b7:9a:6a:3c:95:
04:a2:e7:55:d2:db:8e:d2:89:42:53:01:84:f5:aa:
8a:e4:51:2c:4b:aa:f9:13:b7:97:08:13:2c:2f:f0:
27:53:83:e2:ce:96:be:e0:5d:61:31:44:34:ea:0e:
9b:f0:42:ad:0e:ab:a9:12:e8:2b:dd:f9:28:25:34:
fc:2b:40:da:57:03:75:e7:8f:bb:f5:f9:9c:58:ac:
b3:cf:6e:1f:42:4a:49:d2:8c:46:e9:59:78:12:1f:
4b:f5:0f:0f:1e:1f:4e:53:1b:bc:2a:f2:14:d8:f8:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F0:3B:9B:58:D4:13:3B:BA:F4:A5:DF:BE:4B:8F:98:E0:51:8E:43
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0d:07:c4:aa:b1:81:fe:29:8a:3e:fb:1d:8b:b0:0b:2a:c7:
64:50:6a:03:5b:57:01:27:28:ed:d3:43:1e:5e:09:2f:4e:05:
ec:76:f3:0b:c2:0b:cd:33:6b:f5:8d:8c:26:a8:8c:99:08:83:
aa:8b:ac:97:33:8b:92:13:9f:28:93:36:7f:64:2f:4e:d9:90:
d6:1b:4f:3a:77:4f:d6:f0:1b:e8:4d:30:ed:04:e1:6a:74:1a:
6a:0a:7f:6c:3c:20:47:d0:03:51:4e:64:3b:7e:92:53:74:0e:
42:fb:82:24:e3:7f:48:0d:4b:41:ea:7a:00:f1:7b:6c:ec:eb:
d0:7f:53:4e:53:d3:64:2d:ab:24:ee:34:0d:70:66:42:15:91:
5f:6e:bb:58:94:34:35:90:10:51:19:5b:b7:c7:c0:2e:ff:ba:
38:d4:e4:50:af:05:6d:11:06:af:7f:58:13:9c:52:89:98:dd:
93:f6:3d:06:fc:84:1a:c3:66:a6:6e:a4:21:b0:29:28:5a:a3:
97:bb:7e:68:be:f3:ae:b4:39:a4:47:1b:e2:b2:a7:94:dd:98:
92:1a:fa:9c:3d:cd:2f:a4:c7:ac:61:d1:cb:dd:ae:05:83:95:
09:e5:3d:36:42:5b:fb:91:a1:70:ee:53:eb:1f:f0:7f:36:02:
9b:4f:f9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:15:42 2025 by rpki-client