Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: 1wjdEUZcK02Ns7qCsPprCZ8Yz6yQyOYfjVXHKK3JLCQ=
Subject key identifier: 3F:D3:09:DD:EB:74:3D:78:0C:65:29:AD:57:E3:B1:7A:00:22:D3:F1
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 0196C502B607D85349766A44FE5DCE16C482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 1540
Signing time: Mon 12 May 2025 15:00:11 +0000
Manifest this update: Mon 12 May 2025 15:00:11 +0000
Manifest next update: Tue 13 May 2025 15:00:11 +0000
Files and hashes: 1: 9cXZNBVPbFK7YgwhAS48hqVN3Q8.roa (hash: P8nablk4XjPWocUs0+w/NDTZnQaNhHciAel+enfRgUQ=)
2: GJ7X3NXNPspZEiv4IaMeRbRsKjQ.roa (hash: +RNCIDZL3jBzsc6WtooEau4eUrswSESksvuz73mPQ2Q=)
3: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: o+P8TFagb5lMnAZRk5KsCH55MWV00otu2LedkFJ6S88=)
4: g2LuFjEhsXOpJYmb2qeJVNKQyUw.roa (hash: gXxbZRZ22rqSRTpziJlqNBg77T4+7Pe2wPiUn7l87EQ=)
5: kEq9Sa-aYq3KR4A40M5VyPd54wg.roa (hash: UxvV1YF4/u8pr981HOY28yhkvm5jpeElKKL/ei/Iusw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:02:b6:07:d8:53:49:76:6a:44:fe:5d:ce:16:c4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: May 12 15:00:11 2025 GMT
Not After : May 13 15:00:11 2025 GMT
Subject: CN=3fd309ddeb743d780c6529ad57e3b17a0022d3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:6e:b7:ae:8a:17:e5:de:70:32:25:5c:ec:
97:a7:39:3a:cf:55:a9:5a:3b:ca:ff:6b:98:2c:cb:
22:4f:9c:91:c1:7b:ab:1c:ac:0c:2b:0d:d3:8e:b2:
d7:23:cb:f9:1f:02:fa:ff:7e:fb:da:9a:10:fa:1b:
c6:e8:62:6b:63:fd:8b:d4:5f:a0:c8:be:9c:dd:49:
c2:59:a5:8a:8b:e5:5c:ad:c7:73:15:a0:46:67:da:
c1:85:f3:0c:67:77:14:b9:ef:11:0b:33:db:5c:41:
55:aa:34:a5:c1:3f:87:20:dc:d3:18:20:18:d6:47:
96:90:92:4d:78:62:6f:c8:5d:e6:ac:24:ff:2e:b7:
97:50:0e:35:9a:8b:85:34:38:44:a1:a1:b1:7b:82:
a0:6c:6e:1e:af:f8:e3:05:9d:7e:fb:b3:a2:e5:d6:
af:dc:2d:3f:42:e7:6c:15:e8:e2:50:b0:86:52:7d:
08:57:b8:65:b5:ff:63:fc:94:b3:f2:01:ed:4a:ae:
21:7d:db:d3:30:52:3b:57:4e:6e:bc:d3:5c:fd:f9:
95:0c:5b:6c:70:c0:71:c3:da:24:f1:3b:46:66:1b:
71:58:69:03:98:f0:eb:b0:38:28:c6:d5:14:1d:a8:
6f:45:49:97:38:c7:87:de:de:fe:28:a3:d3:5e:c3:
a2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D3:09:DD:EB:74:3D:78:0C:65:29:AD:57:E3:B1:7A:00:22:D3:F1
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:26:58:f8:23:27:f2:67:d6:db:b4:fb:cc:b6:e8:88:db:ad:
a4:84:e9:3c:ed:1b:59:5b:b5:f9:21:b1:72:28:7b:af:d3:2a:
29:ec:80:f1:cc:a0:6b:9e:ac:c3:05:80:88:5f:46:6e:f0:e7:
85:73:32:9c:6c:b0:f4:82:6d:04:f8:7f:63:80:b8:7f:f3:b0:
42:30:b7:f0:7a:92:c2:03:d3:b8:ed:41:11:86:87:30:5f:8d:
6a:1b:fe:d9:e8:e5:5c:99:08:46:d0:80:ce:ee:e8:9f:c8:9e:
1e:40:5f:34:d4:ab:9c:4c:74:89:6f:96:14:0e:86:c6:ab:8e:
e9:6c:76:76:3b:7e:e9:dc:ea:83:05:dd:73:ad:66:f1:8c:98:
ad:54:6e:53:ea:5b:f1:f4:40:54:06:a7:a2:fc:b7:96:53:93:
15:d8:52:3e:d1:52:a5:27:fa:0d:45:d2:d9:07:d5:4c:ac:89:
87:1d:36:7c:fb:cc:6d:e7:83:06:b5:8c:88:84:c9:17:17:00:
fc:4e:3e:a8:4e:0d:4d:fe:3f:d9:db:ae:11:be:77:62:2a:21:
7b:b0:c9:08:8a:ae:ec:fc:f1:92:26:11:87:18:1a:c6:7d:70:
cc:8f:69:2b:f4:40:b8:39:2d:af:0e:04:96:8f:1c:ef:7e:6d:
61:d0:cc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:14:10 2025 by rpki-client