Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
File: LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft (raw, json)
Hash identifier: Vo1NtiTP6NhJ24OyM77HFrIyZmIlOOyXEMNj9sYluh4=
Subject key identifier: AD:2C:AE:C4:70:C5:CD:FE:30:26:DA:53:B4:E7:D5:2E:34:87:80:44
Authority key identifier: 2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
Certificate issuer: /CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Certificate serial: 0196B6A276A01C83E2A2774CAF6217D1332B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
Manifest number: 01A3
Signing time: Fri 09 May 2025 20:00:22 +0000
Manifest this update: Fri 09 May 2025 20:00:22 +0000
Manifest next update: Sat 10 May 2025 20:00:22 +0000
Files and hashes: 1: LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl (hash: oKEl57VqIWB4LmD16T/tNxJ4So3iblNL0Dc9TkBFF4M=)
2: gs1oqbY6yQy7zAFFldXKYUCI-wY.roa (hash: ZNZX8jrrMnmqL1is9AmdkQLXAoTMMp75O03M5D0JqjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:76:a0:1c:83:e2:a2:77:4c:af:62:17:d1:33:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Validity
Not Before: May 9 20:00:22 2025 GMT
Not After : May 10 20:00:22 2025 GMT
Subject: CN=ad2caec470c5cdfe3026da53b4e7d52e34878044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:f4:d4:f0:6a:ef:17:d3:fb:e8:3a:60:14:
d8:a5:ab:eb:a3:9e:a6:32:e3:f1:40:65:fe:bd:5e:
12:58:80:42:b1:ac:cf:94:05:93:b4:02:d2:fd:94:
89:02:9b:5b:30:b2:07:6c:2d:58:52:c3:b7:8d:3f:
25:51:f4:ad:5c:2c:6f:71:60:21:75:b3:0c:16:81:
03:cd:42:2f:82:6f:ae:b1:65:0b:17:48:d3:37:02:
f6:13:c1:af:fb:41:b0:dc:19:0b:22:f4:9a:f9:ec:
08:55:ac:c8:1e:99:9e:0e:fa:9e:e7:63:49:b7:cf:
ee:6c:ff:67:df:4c:36:f0:05:87:8b:75:b4:7f:66:
af:3e:f1:e6:1f:10:7e:c1:6b:dc:6b:8c:ca:6b:f8:
08:81:54:79:3f:8b:68:53:52:f7:37:2f:26:c0:9a:
12:11:20:d4:ea:8d:10:df:45:d8:a1:4c:38:ba:da:
f7:27:2f:e5:94:d2:2f:d5:dd:3d:de:f7:fe:50:c9:
2c:5e:4d:f0:8c:97:72:6e:eb:17:84:cf:4c:b8:17:
c3:02:4e:bf:da:77:ba:a1:0a:44:84:43:92:b5:dd:
5d:b4:65:0a:aa:ad:86:e7:ac:b7:20:a8:78:10:73:
fb:c6:3c:2c:07:ff:ab:47:47:ed:3d:bb:41:1f:ce:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2C:AE:C4:70:C5:CD:FE:30:26:DA:53:B4:E7:D5:2E:34:87:80:44
X509v3 Authority Key Identifier:
keyid:2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:23:47:c0:0f:c1:e6:f6:88:31:95:b0:86:de:e3:69:5a:96:
72:99:d7:fe:76:59:ca:9e:5e:cc:0a:32:21:1f:c7:9c:27:3a:
5d:49:12:59:d4:b4:7a:1c:50:05:ad:d7:fd:ed:8e:f2:5e:82:
ca:1c:09:20:cf:e4:7e:0a:a0:12:64:3b:63:65:1c:f3:94:59:
ff:e9:67:1f:72:04:d4:f6:e7:b6:2e:3c:44:41:4b:34:d7:27:
4b:2e:7f:78:98:64:6e:21:98:0b:c4:70:84:37:e7:01:68:56:
77:40:1f:2c:cb:8f:96:8c:7c:e4:79:cc:65:91:9e:51:41:2b:
fc:ef:cb:9f:e3:38:18:da:ec:ff:c2:1f:6e:49:e5:28:8d:75:
b5:ba:67:c9:58:55:5b:7a:fc:cf:50:1e:ce:35:03:4e:ca:ba:
cb:6a:dc:2f:43:9e:b0:4e:f9:3c:52:e2:ab:6e:2c:26:2c:1f:
47:d4:21:37:ce:94:25:0a:4f:aa:d1:0c:3a:1c:0c:e5:75:fb:
e4:b6:92:3d:13:83:0c:0b:23:78:8a:94:1b:97:d4:8a:11:32:
cd:33:16:c4:9b:65:56:62:be:24:0d:01:95:53:9c:af:19:67:
58:bf:d9:84:6b:4b:67:ab:40:1a:49:dc:b1:2f:ee:a0:00:31:
d7:fb:7e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:32:00 2025 by rpki-client