Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
File: lAueGO6wlNkS3rWV3HqshmGw1sc.mft (raw, json)
Hash identifier: XhJXyCt/DQwx7QIM8+gv3clvCuOSXQ7xWU3Fcf0M+UM=
Subject key identifier: 51:6C:94:04:5C:76:B4:EC:B0:40:50:9F:BD:75:58:63:C3:B3:7C:7A
Authority key identifier: 94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
Certificate issuer: /CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Certificate serial: 0196C57124B36C85407763CEF57F9242C530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 17:00:48 +0000
Manifest this update: Mon 12 May 2025 17:00:48 +0000
Manifest next update: Tue 13 May 2025 17:00:48 +0000
Files and hashes: 1: LAIYSHBNgDJwVs33iUQdNmBywEc.roa (hash: InEjvH48yKZ/JYP0Dutv2j5z1AvlQ/oufM81Pmqxk2w=)
2: VSA2PLMqpOv7dlTMBPyD4an4HVU.roa (hash: eXWyLM0MZufkmn0XWy2I12Cyf+5VVc0lvhOa7vlAv3E=)
3: lAueGO6wlNkS3rWV3HqshmGw1sc.crl (hash: Y007HVq1aVAnfT+YxZzBMTUVkfho09hn2R8QEex6gJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:71:24:b3:6c:85:40:77:63:ce:f5:7f:92:42:c5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Validity
Not Before: May 12 17:00:48 2025 GMT
Not After : May 13 17:00:48 2025 GMT
Subject: CN=516c94045c76b4ecb040509fbd755863c3b37c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:29:50:c4:38:f3:39:16:44:95:c0:38:a4:
55:1e:e2:14:ae:e0:72:f4:64:dc:fa:b7:bd:5a:ba:
a8:43:f0:ae:a2:e9:3f:5f:37:1a:9b:67:64:c5:0e:
9a:f6:b9:b3:ef:14:47:d4:ed:c9:77:2c:6d:70:47:
db:b3:26:82:6e:33:51:44:3e:db:0d:2c:8e:71:b5:
5e:45:cd:0c:a7:0f:80:e5:6d:4e:59:dd:5e:da:c6:
c7:68:7e:b4:26:4a:b6:67:c5:b0:ef:d6:ae:a6:1d:
70:32:85:de:86:4e:9b:3a:d7:f5:3b:bc:79:af:df:
cd:33:3b:c5:a3:be:12:29:ba:07:52:f1:04:cb:0d:
74:67:39:5d:94:27:6d:f5:01:f4:5d:a4:98:92:35:
b0:9d:b9:55:98:80:6e:67:03:6c:df:1c:44:40:eb:
43:2f:fb:e1:da:7b:cf:2b:1f:5a:45:b4:75:0d:78:
67:2c:dd:a9:58:5f:ae:13:91:6d:81:2f:22:c3:cb:
5c:34:7f:30:6a:7e:18:88:ec:19:51:13:23:cd:bc:
8d:b6:7e:92:5d:67:a1:5a:ce:59:49:bc:62:d8:98:
a8:72:92:d3:e2:e7:d2:fb:97:d0:88:23:37:d3:f4:
c5:61:1c:1a:cf:76:0a:0f:d8:86:5b:18:6d:7c:da:
85:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6C:94:04:5C:76:B4:EC:B0:40:50:9F:BD:75:58:63:C3:B3:7C:7A
X509v3 Authority Key Identifier:
keyid:94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d6:82:39:ed:ad:f2:33:c2:66:d0:48:14:e9:2e:42:ba:e5:
d2:85:cc:96:b3:2d:45:77:b2:50:70:8f:85:e8:a8:1f:c0:2a:
dd:7a:fe:4e:86:78:98:7f:c6:2e:63:f9:16:a2:a2:8f:82:b3:
c9:d9:b9:26:6e:34:92:8b:ab:4f:8c:7b:53:b4:69:09:57:fc:
78:3d:0f:28:77:d5:77:90:ad:d9:73:21:27:76:4c:fa:d8:a5:
44:86:04:94:60:c7:c2:a6:b9:9d:3c:be:d3:7d:48:e9:40:2a:
0e:84:52:43:c1:14:2b:3f:a7:cc:c0:ef:c2:a8:61:0f:6c:91:
4c:c6:71:05:a8:ec:d2:ff:aa:50:35:55:a7:0c:45:d2:54:dc:
93:8b:90:5f:b0:02:1b:b2:d9:d4:8b:3b:b8:59:06:c1:8d:66:
2a:a9:9d:b4:88:3b:1d:4e:c8:80:f5:3f:52:29:d8:68:4a:92:
06:cf:81:98:34:0c:b6:6e:23:5e:0e:88:9c:b1:28:c5:2b:5b:
60:f3:05:d4:e4:fe:73:0d:ea:22:0c:01:64:fa:4e:e7:16:bd:
c5:aa:8b:a5:12:1b:63:d0:11:b7:5e:b5:b6:ee:4a:52:c2:ba:
6b:c3:d3:31:16:7b:7c:87:22:c3:26:c1:8c:90:65:c9:fc:93:
5e:bd:f0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:26:02 2025 by rpki-client