Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
File: LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft (raw, json)
Hash identifier: vwTPw3/kiLpb0yJS++rfyYuIYbnADtVrRZNXxc66AkE=
Subject key identifier: 4D:6A:A1:97:1A:91:67:D3:5E:FA:5E:82:46:95:6A:C4:A0:B2:F2:CE
Authority key identifier: 2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
Certificate issuer: /CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Certificate serial: 0196ABB14FC371012C84708E75074D6200B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
Manifest number: 0131
Signing time: Wed 07 May 2025 17:00:46 +0000
Manifest this update: Wed 07 May 2025 17:00:46 +0000
Manifest next update: Thu 08 May 2025 17:00:46 +0000
Files and hashes: 1: 0XZQM4HI3XhlmYvdoGd0b4phC5w.roa (hash: U0I63h+zWa/76rG6uJx/JmYr6Xgzo7IgH0GTSgv+Tfg=)
2: LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl (hash: LV5IAaDlPAPND85VvCbq25mD3cPi1NBdLGLMlUvwO4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:b1:4f:c3:71:01:2c:84:70:8e:75:07:4d:62:00:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Validity
Not Before: May 7 17:00:46 2025 GMT
Not After : May 8 17:00:46 2025 GMT
Subject: CN=4d6aa1971a9167d35efa5e8246956ac4a0b2f2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:24:ec:f9:eb:66:c0:fd:bb:71:f1:ec:f4:
b9:08:f0:62:04:94:01:99:da:d7:4a:84:06:e6:c0:
0e:48:4a:9a:21:e3:dd:f5:09:d8:ba:45:bd:b6:53:
61:a4:33:5b:b2:9a:47:2d:c6:ec:83:2a:57:74:73:
09:69:ba:1d:7f:41:94:7e:5f:a1:90:b0:f6:dc:98:
6e:74:1d:12:8d:af:f7:54:74:fe:33:3e:c6:fb:ee:
55:8e:34:81:b3:ad:13:bd:bf:c0:e4:2c:01:e8:7c:
da:0c:97:f3:a8:c5:be:cd:bc:22:0f:11:1e:77:21:
32:28:01:5e:66:e6:f7:99:64:a8:00:a7:72:a3:29:
00:55:3f:98:20:51:56:2d:3a:7c:49:6a:63:b9:2e:
e8:c6:e8:43:0a:95:2b:4e:4d:28:aa:a2:41:2e:70:
70:be:ca:69:57:e2:a0:62:9c:23:53:aa:56:29:e1:
4e:f8:01:70:08:98:5e:d2:1c:4b:64:90:89:72:6a:
6c:34:2b:11:e9:65:3d:71:45:b3:cc:36:9e:c4:41:
33:fc:fb:89:b8:70:1b:fc:bc:0c:04:71:36:c5:f5:
ef:9f:33:73:5e:d7:1e:9b:e5:b2:40:5e:42:af:5e:
f4:db:5e:20:3d:42:a3:75:34:6a:7e:52:2c:bc:98:
f3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6A:A1:97:1A:91:67:D3:5E:FA:5E:82:46:95:6A:C4:A0:B2:F2:CE
X509v3 Authority Key Identifier:
keyid:2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6c:23:c1:fb:8a:8f:df:3c:06:5e:76:6e:ae:41:5a:4b:2a:
59:15:3c:53:f1:22:20:b2:7d:2b:32:97:98:c1:40:5f:a7:f8:
2f:f6:1e:95:1c:07:0c:39:ec:26:1b:57:b8:03:4e:97:c9:45:
26:9d:3d:4b:7d:bd:a2:c3:a2:86:cd:63:32:46:63:26:8d:e8:
59:b1:79:8f:63:bf:9a:5e:05:2a:09:66:43:4a:21:6e:69:f8:
85:ea:a5:92:8e:f1:a1:08:1b:8e:8f:61:fc:67:fb:6f:8b:e6:
12:b6:a4:fd:ff:28:e1:74:a8:1a:52:e7:08:1d:94:81:f1:30:
d4:8e:fa:f0:ab:98:8c:63:6d:5c:c2:99:56:52:2a:cd:85:ef:
89:29:f8:9d:a8:32:e3:cd:69:08:e9:36:89:bf:70:fe:70:bb:
db:0c:8c:b8:16:a0:82:41:a5:bc:b8:06:b0:2f:33:c8:dc:09:
ce:d8:8f:7e:e6:f1:b4:f6:d6:72:6c:35:e1:63:0b:08:f7:19:
aa:da:66:5a:91:fa:8c:74:c8:ed:88:85:68:47:99:27:78:41:
49:d7:4e:f3:e9:ad:37:8a:d6:68:7a:27:f8:08:cf:12:66:35:
6e:95:db:01:b5:f5:ca:f3:89:8a:d7:00:c5:9b:b3:c8:11:15:
48:b6:51:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:19:16 2025 by rpki-client