Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
File: LO4pmOhvp0iOa2T47bwDLOFdG8w.mft (raw, json)
Hash identifier: +QOWOQ2wJRHwOCJync8LdN1dOIOIT/aNzaOeOKOidi4=
Subject key identifier: 5E:13:F4:24:1D:31:68:E3:3E:E1:91:AE:68:96:2D:7F:D1:0A:C4:24
Authority key identifier: 2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
Certificate issuer: /CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Certificate serial: 0196AF56D6FE941E310AD68FD37D180C9C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
Manifest number: 0CB0
Signing time: Thu 08 May 2025 10:00:25 +0000
Manifest this update: Thu 08 May 2025 10:00:25 +0000
Manifest next update: Fri 09 May 2025 10:00:25 +0000
Files and hashes: 1: LO4pmOhvp0iOa2T47bwDLOFdG8w.crl (hash: 37Zqe0EURFAO7j2ybOIL6Bhw65dat+Ms0K63IRVQWl8=)
2: YXxh1XSQz2hJg4wU0JwpLVfgRPc.roa (hash: fKQqPt+1938ZgXlhZdhE3xLSu/gu+cSj1bUfoNu6uac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:56:d6:fe:94:1e:31:0a:d6:8f:d3:7d:18:0c:9c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Validity
Not Before: May 8 10:00:25 2025 GMT
Not After : May 9 10:00:25 2025 GMT
Subject: CN=5e13f4241d3168e33ee191ae68962d7fd10ac424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:9f:29:63:ab:cd:d5:2b:09:6f:40:d6:5d:
70:0e:3c:4f:35:d0:ae:bf:bb:e7:62:ca:42:53:cc:
98:b3:d1:f4:62:2e:83:d2:60:83:ea:49:92:61:fc:
0c:4f:89:09:8a:c0:9d:c7:92:0a:18:0b:2f:59:13:
10:65:3b:5b:8b:b2:6e:ba:39:af:0f:58:23:61:33:
ca:4d:4b:f6:23:eb:7e:43:6e:8e:89:8b:2e:ec:2b:
bd:20:78:fc:1b:dc:ae:9e:48:50:da:47:45:0f:d0:
ae:f6:54:b0:2a:a2:d2:27:9c:a8:8b:a5:66:6f:fb:
9b:40:55:80:5b:26:e1:5b:2e:00:6a:93:21:39:98:
a2:ef:c7:05:8c:22:81:2d:bd:cf:52:66:45:3a:59:
2b:fa:86:0e:e9:0c:33:31:c4:d4:86:e7:62:9e:d5:
2e:e6:07:51:ab:5a:47:ea:62:c2:5e:e4:07:55:0f:
4d:a8:28:77:9a:ed:b2:3f:99:a7:5c:7a:e4:9e:86:
eb:24:91:0e:70:3e:dc:57:5f:f6:95:ea:0e:e3:24:
15:13:38:46:26:33:85:3a:39:0f:42:42:61:fe:db:
67:dc:d8:38:7e:a1:75:63:3e:6a:78:43:e8:ab:90:
70:11:1d:cb:d5:60:0b:56:b0:eb:1d:20:7f:d9:a3:
37:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:13:F4:24:1D:31:68:E3:3E:E1:91:AE:68:96:2D:7F:D1:0A:C4:24
X509v3 Authority Key Identifier:
keyid:2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:0b:21:fa:84:e0:c5:20:ac:44:d1:29:07:42:06:7d:68:70:
6a:c3:2c:4a:16:cb:4a:9f:c0:7e:0d:43:46:6b:48:25:23:c5:
fe:1a:bd:59:c2:3c:b7:2a:9c:61:36:6f:48:10:c3:6c:9d:e8:
3c:48:e1:de:00:fa:2f:12:41:4d:05:bc:84:82:b8:22:a2:39:
34:cf:22:92:a2:a9:8f:b5:3d:e2:86:f0:8c:39:6e:82:11:ce:
32:7c:5e:b7:7f:a3:27:44:06:ac:80:51:e0:6f:2c:b8:3a:b7:
4a:09:8c:dd:73:a1:c6:84:fe:04:c8:f5:2c:de:11:74:62:38:
39:50:27:d8:37:28:f3:1b:37:b0:b1:31:a5:50:7a:4e:5b:55:
fb:38:94:99:cb:04:67:6d:ed:f4:4d:97:05:a3:dc:33:09:45:
4c:f1:ee:56:8b:9d:08:13:24:bb:21:68:11:a8:dd:27:f1:0f:
2f:98:1c:e4:0a:b3:e9:86:c0:28:8c:2e:c2:99:9c:b9:e8:d9:
92:85:49:63:95:26:63:35:f5:67:e7:f8:55:73:d6:5d:d6:ca:
d2:2b:9a:7c:89:bf:8b:7f:af:2c:d2:c8:e2:9d:77:40:cd:19:
76:d5:8f:96:d5:31:1f:a1:d7:bd:e2:b5:6f:77:ac:ea:5e:59:
ce:96:ab:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:49:03 2025 by rpki-client