Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json)
Hash identifier: uCOTXcxwWedTXdvD6A5vMBKW1UFQcy4u2R5WrfgljCc=
Subject key identifier: 6A:81:AC:59:0B:0B:58:F3:5B:7F:6C:83:81:43:E2:E4:AF:5D:17:AA
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 0196DE8BCADA6C19C7BC69FC7A1D972817D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
Manifest number: 122B
Signing time: Sat 17 May 2025 14:00:25 +0000
Manifest this update: Sat 17 May 2025 14:00:25 +0000
Manifest next update: Sun 18 May 2025 14:00:25 +0000
Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: qOwGZ8V6jSC2BTeEXRhuvIZGq0GIdbXJ7Mir5orWxBY=)
2: g5xnqTmVEZ7ZlTEWt6r937lOqAI.roa (hash: W28IbFUf6cfPKtxTT1Bs+8ajjdC7s7Nv39N6DzwHNwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:de:8b:ca:da:6c:19:c7:bc:69:fc:7a:1d:97:28:17:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: May 17 14:00:25 2025 GMT
Not After : May 18 14:00:25 2025 GMT
Subject: CN=6a81ac590b0b58f35b7f6c838143e2e4af5d17aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:c3:09:66:76:2c:a2:0f:5f:4b:42:cb:65:
e1:a3:e6:93:6a:98:80:e3:17:c8:33:91:68:52:f1:
27:e5:4f:98:1e:fc:71:82:89:11:23:f6:e9:3b:58:
7f:e1:c8:1c:1b:93:6e:0c:7e:57:40:12:6b:f6:23:
6e:ab:df:36:1b:db:da:26:32:3f:11:c4:59:7e:39:
e8:a5:fc:d5:1a:8e:0d:09:c0:d8:a7:c3:c2:8f:9a:
87:bf:3a:cb:4d:a3:9e:57:05:42:43:cb:9b:21:c7:
8e:ea:b2:11:ac:1f:12:ec:a1:7e:49:e8:72:fc:db:
ac:9a:97:6c:be:2f:69:6a:fd:e2:85:b3:d9:a8:84:
d1:37:65:ed:a8:2b:fd:2e:48:cd:73:4e:98:ff:5a:
28:39:8b:ef:0b:2c:bf:f1:a4:23:63:d3:af:91:a5:
60:5d:1d:f5:bd:ce:aa:1f:c5:c7:51:c8:37:6e:75:
56:4c:5e:23:88:54:c3:b2:47:b6:e2:4d:af:ea:96:
e8:9a:7b:be:58:6b:1c:64:06:2a:4c:32:3f:b9:41:
b4:1c:85:37:9b:23:b9:71:fe:ef:55:e1:3a:b8:da:
69:d8:4d:37:6e:81:91:cb:9c:8b:c7:a8:6c:3b:6b:
a3:8b:49:52:cb:6c:d3:b3:c0:cb:2a:3f:7a:3a:fd:
55:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:81:AC:59:0B:0B:58:F3:5B:7F:6C:83:81:43:E2:E4:AF:5D:17:AA
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:66:65:0b:c1:95:3a:bb:6f:97:40:8b:c9:2f:a7:2c:43:70:
d0:af:08:39:fb:26:8c:44:3e:2f:34:4f:88:53:0f:26:2c:41:
7a:82:75:07:92:97:3e:f5:b8:42:9d:c1:8e:ee:c7:d0:35:95:
35:62:0f:15:88:dc:27:9b:68:50:78:3e:8c:bb:ff:a1:df:c6:
eb:bd:2e:fb:8b:0a:e6:23:0a:51:b1:69:90:12:06:82:bc:45:
79:38:1c:85:ff:b1:bc:a4:65:d4:9c:9e:66:8d:4d:c1:b7:1a:
7e:a3:55:d0:38:40:6d:8c:2f:65:40:d0:ae:7b:25:c2:6b:2d:
2c:b1:91:e8:8f:8a:db:2b:83:c5:b8:57:5f:a9:7e:6e:10:26:
71:eb:8c:18:80:65:59:ac:42:58:dd:c5:f8:06:4c:91:ea:63:
d6:1e:bd:1a:64:6d:4e:26:8b:bd:d9:98:69:4c:d4:50:9a:7e:
cd:ae:1a:4c:29:6f:e2:6d:9e:cb:1b:90:01:bf:3e:8f:03:84:
93:0f:5a:42:e0:a3:a7:58:1b:0c:7c:d4:2c:04:60:f5:63:16:
04:09:b7:dc:6a:9f:c1:f3:00:93:c0:b1:58:c7:8a:a7:5c:f0:
90:cb:c7:4d:72:1d:9d:a6:c4:ee:9a:a0:7a:71:ed:66:e4:6e:
24:87:06:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:41:19 2025 by rpki-client