Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File: lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier: loCcd3VshNv8ovWkrou3Uxu/BGzo2aaQYqd+5kaHk2A=
Subject key identifier: 4E:18:E2:3C:1C:32:8C:7F:CF:F5:DB:A1:21:7F:99:A0:EF:92:23:48
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 0196C3F06BFEAA3C8A4FC9EEE782978E9957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number: 1209
Signing time: Mon 12 May 2025 10:00:35 +0000
Manifest this update: Mon 12 May 2025 10:00:35 +0000
Manifest next update: Tue 13 May 2025 10:00:35 +0000
Files and hashes: 1: 1jamJZhJQCxnBF2gQL6E1EEMOTA.roa (hash: kBKBG2m2NE0a6jTDEjeZmk4l4aHSEPbRY7SVjCst1XE=)
2: 6uBRMAdPwa-lKO2ylO9DlsGgsHY.roa (hash: +m2JD+JFXF9SBNg+lpjDT6mDr6YnDMqmBejWjKgStAQ=)
3: VRYfwJddtKzQsHE8MbAEFYO6ZHo.roa (hash: EYXXmNlMh3UrU0hKdU6hQ+CFn2MC63mGZvBuDrRNCLw=)
4: aQ92mv4OX0TrGXRhoE4qVRj9Lwg.roa (hash: Sn7Iy1mnHMRUkHR2YiOO0Z7B9rvVJ+lItzyRTfMio1A=)
5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: q7rhZWaoO0DiFxhvLGDQ/qTyfLcQiNLxm/HctWd2JvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:6b:fe:aa:3c:8a:4f:c9:ee:e7:82:97:8e:99:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: May 12 10:00:35 2025 GMT
Not After : May 13 10:00:35 2025 GMT
Subject: CN=4e18e23c1c328c7fcff5dba1217f99a0ef922348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:7f:dc:85:6b:3e:69:6e:31:d4:63:e3:95:
82:19:8e:2e:37:9d:1c:88:99:b6:bd:20:6f:69:99:
32:45:46:56:44:4c:de:ca:66:6e:1a:d9:81:f5:6a:
9d:1b:31:da:05:d6:0c:d9:29:ef:1f:b4:88:db:52:
31:56:67:20:4f:80:92:db:13:af:27:d8:5f:32:6c:
eb:78:cc:88:b4:80:87:a2:62:48:9c:4c:e7:1a:a6:
39:26:8a:0d:47:d9:c8:a8:01:b8:b7:c6:15:9d:48:
1f:30:ef:1e:cc:b6:4b:92:f1:da:ae:b8:3c:6f:b1:
b3:60:1f:55:16:b2:c4:0c:a3:13:ba:08:e8:5c:d8:
7e:7c:2b:13:6f:4a:48:d4:5d:73:a8:f6:1d:15:b6:
94:ae:2e:b9:3d:0e:93:dd:93:0a:8d:c1:f9:3f:b1:
69:10:27:cc:2c:5d:ae:5a:46:22:2f:6b:bb:27:5c:
ae:14:fa:cf:3f:18:15:55:e3:41:97:b4:e2:44:d9:
0c:37:25:2a:b5:f8:6c:9d:ac:3d:08:33:88:5f:9f:
24:a5:2b:85:32:60:e6:34:87:43:cc:05:e3:9b:84:
09:1c:47:df:9f:97:d2:80:d1:9a:3d:6a:b8:8e:02:
09:1b:7a:be:a8:4c:5d:b8:c6:02:c6:69:e2:9a:3f:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:18:E2:3C:1C:32:8C:7F:CF:F5:DB:A1:21:7F:99:A0:EF:92:23:48
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:63:02:3f:9b:24:65:24:53:57:7f:5f:c6:34:9d:99:e7:c8:
07:30:58:5d:fd:b2:45:ad:c3:cd:93:b4:ba:2d:ae:51:f2:43:
c1:b2:ae:4d:55:e2:dc:d7:62:71:15:30:0e:6e:00:a8:b9:98:
70:ae:17:0e:a9:53:0e:e0:0c:7b:75:35:56:3d:1b:01:88:40:
22:87:31:aa:2a:ac:0a:52:b9:3d:e0:8f:75:e9:c4:ad:40:36:
85:18:74:05:c0:eb:36:3c:83:99:1a:a5:60:2d:94:0d:a6:81:
3e:46:9e:45:bb:34:26:05:21:01:90:50:24:26:75:37:61:32:
c5:a4:e2:ed:33:3e:8d:b3:bc:67:96:e6:ca:69:f8:5c:64:79:
b7:60:3a:29:4c:3f:2f:0d:4f:4c:e2:7d:0b:ae:3b:f6:b1:6d:
c6:f9:78:63:cd:34:a1:4b:f3:84:80:d1:10:90:de:61:68:a5:
c7:db:fa:86:fc:d7:77:57:d4:d4:50:9a:e4:1e:21:33:85:a7:
20:7f:70:10:ea:7b:76:6a:03:f8:e4:c2:c6:30:cd:32:49:bb:
62:9c:da:36:1f:ee:80:a7:07:9a:b2:04:bc:33:37:56:73:55:
2c:77:d5:25:e1:fe:40:24:cb:ad:49:04:27:79:35:3b:ec:8a:
c4:c7:6f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:23:52 2025 by rpki-client