Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
File: LPtHb88xPP8pXeDRcJFWrwJT188.mft (raw, json)
Hash identifier: gWH5EYFTGU+neEuvN752FHPzcAsvL2wAXNdf8xd+8dI=
Subject key identifier: 4D:38:DB:DA:57:58:9C:FE:46:33:38:DC:91:EC:AE:DE:BB:0F:C8:16
Authority key identifier: 2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
Certificate issuer: /CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Certificate serial: 0196C15DEA35660C015974D88A3248EFC521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 22:01:19 +0000
Manifest this update: Sun 11 May 2025 22:01:19 +0000
Manifest next update: Mon 12 May 2025 22:01:19 +0000
Files and hashes: 1: LPtHb88xPP8pXeDRcJFWrwJT188.crl (hash: t16c/+wCrIiHADdGQHGNeuW32Fo71ACfiJ9vVRxlby8=)
2: QG26uYioHVmhp2a5DlzMfuEJFvQ.roa (hash: QYW9l61NzSQ8p9p0VXIlshNNkTFPqxE5hMNyzeqT5Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:ea:35:66:0c:01:59:74:d8:8a:32:48:ef:c5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfb476fcf313cff295de0d1709156af0253d7cf
Validity
Not Before: May 11 22:01:19 2025 GMT
Not After : May 12 22:01:19 2025 GMT
Subject: CN=4d38dbda57589cfe463338dc91ecaedebb0fc816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bf:56:57:41:f0:95:30:cd:0b:88:43:a5:12:
87:b0:0d:03:ec:66:0a:37:fb:0c:6c:20:c3:77:93:
52:aa:9e:f6:dc:d6:8f:53:88:37:c6:95:86:6c:42:
77:97:52:f4:79:2c:a3:e5:1e:3b:a1:4f:8c:1d:85:
5a:ab:6c:b8:07:40:bc:68:4d:0b:2f:75:3d:d8:4a:
f3:a8:c5:48:6f:fa:5c:5d:1c:c4:d1:e3:89:22:e4:
80:36:d9:72:9d:21:ac:89:19:17:89:9e:e5:16:7d:
35:45:5e:25:79:32:45:40:c1:58:f1:30:eb:3b:3e:
01:d2:af:ba:fd:ce:a5:f0:de:d9:ea:6a:1a:ef:0e:
9c:05:ed:5b:19:47:0d:83:bf:46:b8:3d:4b:ff:d5:
e9:ea:51:77:23:f0:cd:cb:c3:ad:61:30:d0:08:95:
63:79:1b:cc:2a:3e:fe:c2:c1:20:15:43:2d:67:ec:
70:99:c3:6c:3b:de:29:d0:0a:39:94:89:14:79:9d:
ab:89:f5:eb:dd:5a:d5:63:6c:91:f0:e8:ba:e8:fb:
36:34:fc:17:a6:db:27:52:cd:58:f5:22:5f:7f:03:
78:8b:b4:94:f7:0e:dd:51:3e:cd:00:07:1d:0b:62:
3a:10:a3:d3:2d:49:7e:9d:7d:e2:f0:ff:60:b6:81:
59:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:38:DB:DA:57:58:9C:FE:46:33:38:DC:91:EC:AE:DE:BB:0F:C8:16
X509v3 Authority Key Identifier:
keyid:2C:FB:47:6F:CF:31:3C:FF:29:5D:E0:D1:70:91:56:AF:02:53:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPtHb88xPP8pXeDRcJFWrwJT188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/811b1b-3a72-4402-b4fd-fa4dd21ae3dc/1/LPtHb88xPP8pXeDRcJFWrwJT188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:83:85:95:17:5c:cf:44:72:89:15:ac:1d:32:61:50:22:94:
43:0d:51:5f:4d:62:37:f2:08:b8:ef:70:6f:ce:7c:00:2c:1d:
c6:7f:6c:fd:50:90:e6:66:8e:de:76:e4:31:81:9d:54:32:17:
12:6f:d1:46:93:59:3e:99:06:8d:d4:e1:6e:f2:c8:00:a8:71:
96:2b:d9:5a:d3:1f:2c:14:a3:f0:ae:3a:25:e8:a6:66:f5:26:
18:61:a5:a1:02:5c:fc:0c:01:ff:48:a8:30:c3:cb:fa:44:ab:
7c:0c:3e:d1:d0:00:f8:62:44:3b:52:af:70:3c:cd:ab:23:49:
3f:cb:ea:d5:22:f8:a7:2c:be:e3:e8:49:78:9b:2b:b7:4d:d6:
f0:0f:e9:ac:af:22:59:29:ee:4d:9b:cc:62:52:89:9c:97:bd:
29:ac:53:bd:b3:8a:df:60:19:4f:17:07:7d:b2:e0:25:7e:b9:
d8:98:fd:e1:4a:42:bb:46:20:ac:4b:91:10:71:9d:aa:22:bd:
dc:08:53:45:71:f3:39:74:f5:71:98:46:44:87:19:d7:c9:0c:
b4:3a:47:4c:90:63:be:2d:69:a0:03:0f:94:2a:c5:40:02:8e:
b9:a0:dd:3e:13:c4:61:19:2d:5d:ec:44:7e:8d:23:9b:fe:1e:
2d:dc:59:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:21:31 2025 by rpki-client