Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
File: lKMuRFwk3tm4UhLUebiACBZevbo.mft (raw, json)
Hash identifier: knRAdAanEBMDUS3IOBJFurwFXIVi2kcdWzGDxr0R6MM=
Subject key identifier: C4:91:61:7C:F8:30:89:B5:49:87:8F:63:D8:12:14:FC:0D:23:5E:C5
Authority key identifier: 94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
Certificate issuer: /CN=94a32e445c24ded9b85212d479b88008165ebdba
Certificate serial: 0196AB437CAC016510A6D1C1114536FC4630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
Manifest number: 152D
Signing time: Wed 07 May 2025 15:00:48 +0000
Manifest this update: Wed 07 May 2025 15:00:48 +0000
Manifest next update: Thu 08 May 2025 15:00:48 +0000
Files and hashes: 1: dYkQua5WhbFXO1rro2ZBTmTi5ak.roa (hash: 7+ifBlco706sKWOweWSkXcCzg5XIlet661PdjQ3A/uE=)
2: lKMuRFwk3tm4UhLUebiACBZevbo.crl (hash: +M5RUkk2E06FIZvIEXUDI3zdz6oYfJIqKFED5KEEAlY=)
3: qrJ2-0cTvD-M2EZlQRWwfc9W0ek.roa (hash: 4bA9jmULg0CvGkkToEtHl5uaDxzTVZEhsLwmhxwDpEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:43:7c:ac:01:65:10:a6:d1:c1:11:45:36:fc:46:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a32e445c24ded9b85212d479b88008165ebdba
Validity
Not Before: May 7 15:00:48 2025 GMT
Not After : May 8 15:00:48 2025 GMT
Subject: CN=c491617cf83089b549878f63d81214fc0d235ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:18:1d:94:0e:b1:b7:e0:3a:81:6f:69:6e:
d8:a9:81:9d:b6:92:e2:ed:82:40:a1:86:a1:30:ef:
88:3e:41:48:c1:ab:a9:81:32:b1:af:d3:48:49:50:
a8:bd:80:f7:b7:96:24:68:2d:40:19:89:f2:9e:cc:
05:40:5f:1b:f7:ed:e3:25:5f:bf:d1:49:5b:e1:16:
30:12:4f:20:eb:50:b7:0a:fa:9d:9d:48:5c:a3:37:
7a:66:a1:1e:63:b7:5b:e4:c0:5a:52:40:80:88:81:
6c:b6:13:ee:83:f0:74:61:6e:29:33:08:1f:23:65:
ff:d2:c6:7c:92:1d:4b:36:0d:b0:b3:e2:a8:5d:df:
7b:2f:ed:d5:cc:3f:d8:a1:ec:e1:ed:83:ab:5b:09:
2c:e8:6b:a6:4d:5c:5e:f9:dc:06:20:c4:c8:ae:8d:
aa:4a:5c:82:b1:5a:ad:b4:cb:aa:d9:cb:0b:48:89:
6e:f8:bb:10:83:e3:3d:5c:b1:9c:22:cb:88:7d:46:
20:b1:aa:b4:2f:f8:3a:55:9b:1d:ce:02:b3:8a:12:
6a:c0:30:ca:51:d6:6f:89:d3:10:c3:a3:fc:33:38:
5a:ec:61:04:fd:8d:d0:3b:c3:08:4b:7c:1d:ab:b7:
7f:7e:c9:02:2e:3c:07:4b:e7:4b:58:b7:2f:07:e8:
57:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:91:61:7C:F8:30:89:B5:49:87:8F:63:D8:12:14:FC:0D:23:5E:C5
X509v3 Authority Key Identifier:
keyid:94:A3:2E:44:5C:24:DE:D9:B8:52:12:D4:79:B8:80:08:16:5E:BD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKMuRFwk3tm4UhLUebiACBZevbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f891c4-19ac-437c-b782-e1487a54c1e5/1/lKMuRFwk3tm4UhLUebiACBZevbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a0:cc:13:74:4c:40:9b:fe:d1:45:63:b7:66:86:1e:93:51:
16:0d:f4:38:5e:b6:18:0e:17:18:c5:8c:0a:a5:70:8f:a9:7c:
24:e9:bd:43:be:dd:eb:d7:99:7c:98:ab:fa:a9:90:5f:a9:33:
51:a2:f5:6f:95:ae:30:d8:21:d9:58:24:aa:72:80:79:ab:15:
22:08:af:b8:8a:53:f7:6d:a9:d0:51:8f:fc:53:0d:bb:1a:75:
f7:84:59:59:94:12:3e:6f:3a:c3:31:66:87:44:ef:f0:99:7d:
ae:53:0f:eb:36:39:28:2e:75:a8:0c:2d:59:8a:a3:12:b7:6f:
02:35:6d:6d:01:c4:1b:e3:39:83:92:44:65:4f:e4:e0:b1:27:
9a:e8:e9:b7:55:59:d6:2c:81:4d:3e:85:36:b7:02:7d:0a:b6:
9f:92:ff:6c:ed:93:2b:95:94:73:55:a7:72:50:d4:a0:53:b2:
59:ae:74:70:86:f4:5c:0f:68:c8:88:18:40:b9:d9:31:b0:a1:
f5:ea:0b:4d:aa:af:f5:e1:68:9a:e8:a3:55:17:8d:ea:ac:fd:
16:06:56:0e:fb:ed:9a:84:58:9d:c9:08:59:c6:fd:ef:d2:a7:
8c:80:0e:e0:d2:43:a8:d0:ce:91:84:9b:23:88:04:0a:3f:6f:
84:b3:75:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:36:36 2025 by rpki-client