Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
File: gZTqPO1PE3ENNARM_LPR1WxVCGI.mft (raw, json)
Hash identifier: mhiLH8nbzAGEmCtFR+hB6BC/Sn8z9Z7sGx8NABC5CEc=
Subject key identifier: A1:63:45:AA:B9:BA:E3:33:F3:47:F3:8C:55:DB:1B:E3:AA:52:B0:CF
Authority key identifier: 81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
Certificate issuer: /CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Certificate serial: 01969E2C9689D48A1B0CF4C946E505A3B1EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 02:00:44 +0000
Manifest this update: Mon 05 May 2025 02:00:44 +0000
Manifest next update: Tue 06 May 2025 02:00:44 +0000
Files and hashes: 1: gZTqPO1PE3ENNARM_LPR1WxVCGI.crl (hash: fo044BhQa5rtd7sDO8K5nRT+74ZM1fLRprXEgth6M5g=)
2: p9ItdLtiYL4LWX5NZZnUSYwNxz8.roa (hash: c3ouMCi1srY/NIddYqnssOpjDGBDizKKZ8LNdOn0Anc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:96:89:d4:8a:1b:0c:f4:c9:46:e5:05:a3:b1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Validity
Not Before: May 5 02:00:44 2025 GMT
Not After : May 6 02:00:44 2025 GMT
Subject: CN=a16345aab9bae333f347f38c55db1be3aa52b0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:5b:3f:c5:d9:9e:3a:2c:1c:15:fd:dc:6c:
ce:6a:15:cf:4b:5e:12:79:c3:8a:b1:1c:ca:bc:3d:
49:f6:b1:25:1a:36:80:25:92:81:d5:15:21:af:6b:
ec:6e:38:d8:e1:72:e7:80:28:e7:c9:db:bf:a1:46:
69:3b:db:26:54:cc:0f:79:82:a4:16:77:5f:5e:0c:
c3:66:10:bc:7a:37:9b:75:05:a9:58:b5:ef:1f:dc:
a8:b9:b8:7c:5d:c1:d1:04:51:c9:30:72:98:f4:75:
d4:56:fe:d0:56:e5:42:a6:7f:e2:92:3c:5e:b3:10:
93:c4:7b:77:cb:6e:f0:01:e2:39:f1:94:ef:55:a5:
a5:f2:b7:60:69:b7:e6:14:f6:52:c9:15:98:b7:40:
c6:b6:13:7c:2d:da:3d:0d:94:42:a1:b3:0c:d4:ca:
aa:4a:82:cf:e4:dd:1c:fd:a7:c0:52:b5:ea:67:89:
0a:b8:2a:55:5f:da:7f:f7:6d:6c:55:8d:8d:e0:26:
8c:7d:8b:49:8b:c7:74:a7:4c:b6:8f:87:50:54:99:
79:f4:1f:74:dd:f6:ce:c7:c2:24:28:05:33:47:d1:
77:23:c4:a7:d6:92:b7:da:1d:f4:43:fb:ee:6b:4a:
f0:e5:ef:d8:d1:f5:8c:bb:0a:b0:80:df:ed:02:11:
2b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:63:45:AA:B9:BA:E3:33:F3:47:F3:8C:55:DB:1B:E3:AA:52:B0:CF
X509v3 Authority Key Identifier:
keyid:81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1b:2c:29:a9:ae:32:94:25:b9:a4:6c:cb:bb:65:61:74:7f:
77:50:c0:45:ee:d2:b1:cc:39:b5:f8:73:51:95:24:28:6a:53:
53:bc:d7:d0:a9:16:55:44:18:8e:78:b1:de:39:61:ae:84:56:
24:46:38:c3:e8:7c:07:c1:15:73:f5:1c:ea:44:65:08:5c:18:
08:b9:8c:14:79:c5:c7:de:4b:98:64:a8:49:b9:8c:a0:3b:61:
c9:8f:61:ae:5f:22:c3:39:25:a2:5a:fa:06:f1:f6:56:f2:77:
03:1d:31:07:66:5e:8d:50:3d:e1:7a:a9:e4:90:8e:27:6a:5f:
dc:d0:fd:b3:00:1a:73:a3:4e:f2:f0:8b:3d:24:70:96:dc:94:
f5:5c:24:85:05:65:1f:a5:ea:01:ba:7d:c5:ce:42:9e:ee:1e:
18:98:7b:7a:66:ac:a0:42:52:b0:0d:ee:0f:6c:e1:b0:a0:2f:
1b:08:ac:42:55:66:21:a9:ca:6a:d2:5f:0b:5d:18:cc:d6:cf:
29:f2:b7:96:25:f3:ff:2b:cb:d7:e7:ce:48:7a:1f:dc:a4:6f:
92:78:08:58:bb:fe:56:0c:fb:d7:ab:4f:0c:66:20:ea:00:43:
d1:c6:2d:8c:68:5f:60:3d:6d:e5:c5:ed:21:26:be:2c:00:cf:
11:93:97:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:59:43 2025 by rpki-client