Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
File: LBGlP232MAtJEs4T9vqbEA_OJIg.mft (raw, json)
Hash identifier: Io5QzEV6cYHzjKlOau+KEg81HwFqVMJ/oiKmJTeGFRM=
Subject key identifier: 45:F4:E6:77:17:DD:8E:05:F2:66:D4:F5:F8:FD:FE:B2:26:51:AC:A6
Authority key identifier: 2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
Certificate issuer: /CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Certificate serial: 01969F07FAD0D095EC38F82498FED5623F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
Manifest number: 1232
Signing time: Mon 05 May 2025 06:00:22 +0000
Manifest this update: Mon 05 May 2025 06:00:22 +0000
Manifest next update: Tue 06 May 2025 06:00:22 +0000
Files and hashes: 1: 54SDy2hBAf60rRk7Cn2SENdLnF0.roa (hash: W4T7JvYJiD5Kubx3/xyHkSB0zOGjx+2ez3Dgx71rGrg=)
2: LBGlP232MAtJEs4T9vqbEA_OJIg.crl (hash: zYM6tq416taPXB9A85XDkjwRxkHELS8BYDL0c4r8gu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:07:fa:d0:d0:95:ec:38:f8:24:98:fe:d5:62:3f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c11a53f6df6300b4912ce13f6fa9b100fce2488
Validity
Not Before: May 5 06:00:22 2025 GMT
Not After : May 6 06:00:22 2025 GMT
Subject: CN=45f4e67717dd8e05f266d4f5f8fdfeb22651aca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4c:7c:ad:27:75:ea:36:cd:c2:e1:9f:31:1a:
11:d1:11:1d:76:50:a2:19:a7:95:8b:c7:7f:a7:cb:
72:bb:24:82:d8:79:6c:83:14:0b:7d:0b:b4:45:ba:
56:59:28:b0:02:d5:7f:0f:00:9d:ea:f3:9c:b1:e0:
be:89:55:df:db:58:87:c9:2e:21:fb:83:25:31:1e:
11:43:c0:f9:d1:da:86:25:1d:42:38:8f:b7:f2:20:
2a:9d:36:68:9d:7e:53:48:95:4e:e1:de:00:9c:6f:
86:a7:24:c0:59:db:30:2c:f8:de:aa:01:8e:eb:5e:
f9:b1:88:b1:60:8f:a0:95:e7:7e:4b:54:1d:da:68:
ba:74:2c:ca:64:12:bc:4f:b3:8a:fe:b0:b7:e1:be:
ea:08:20:e1:21:2f:bf:18:e1:04:bd:08:3a:58:8e:
6d:9d:6d:3f:2e:51:dd:fd:d9:6f:73:55:dd:58:ec:
f3:24:c1:c1:32:c1:1e:40:dc:9a:44:45:32:a0:1a:
77:28:de:73:4e:e7:91:f3:c9:3a:07:36:41:a8:9e:
3f:1e:aa:db:4d:1c:72:f3:a1:2a:e4:d2:69:0a:71:
12:3e:13:95:41:9f:0c:76:f0:7f:9c:e8:64:1a:60:
2c:2e:e5:2d:72:e9:02:ec:82:de:30:ae:a7:8f:da:
de:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F4:E6:77:17:DD:8E:05:F2:66:D4:F5:F8:FD:FE:B2:26:51:AC:A6
X509v3 Authority Key Identifier:
keyid:2C:11:A5:3F:6D:F6:30:0B:49:12:CE:13:F6:FA:9B:10:0F:CE:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBGlP232MAtJEs4T9vqbEA_OJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1df8e1-6e80-443c-b6e8-d9f905fdc89a/1/LBGlP232MAtJEs4T9vqbEA_OJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:87:28:c3:96:19:5a:cc:71:43:f3:01:30:03:57:9b:b2:ed:
fd:a7:95:88:63:dd:b3:f6:7e:6c:5c:e3:ee:67:7c:c0:80:51:
eb:46:d2:a8:fa:e9:55:19:17:90:14:f2:fa:8b:ca:e6:1f:37:
b0:94:1c:b0:9d:6f:29:e7:d6:ea:73:4b:55:40:f8:9e:98:d3:
65:20:9b:52:a6:75:82:80:9c:a9:ec:f3:52:90:29:ea:1d:f2:
e3:31:27:ce:81:09:ed:c3:66:8d:a5:2a:55:25:a7:1f:40:a1:
35:6c:88:27:c7:c7:c1:4c:37:20:41:04:da:7b:7b:44:82:87:
86:65:41:b2:5d:67:c0:b2:40:57:4a:6f:f9:bf:61:b0:2c:21:
b3:e8:3b:ca:ce:fa:81:2a:63:c8:ea:93:d5:12:56:04:a6:ce:
a5:fc:90:ba:c0:86:eb:f8:24:28:76:3b:23:69:80:af:72:a0:
7a:66:71:ae:79:d5:47:11:0c:5e:93:d8:da:0e:c9:35:6b:c7:
05:c6:c5:94:86:4b:fb:60:84:f1:bc:f9:5d:d1:e5:0b:6d:e1:
de:bf:9b:f7:fe:84:07:c0:55:d3:3f:ee:46:2b:c9:6f:14:77:
12:83:b9:26:1b:fb:41:95:a4:37:eb:fb:40:c8:c9:18:42:40:
db:dd:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:57:41 2025 by rpki-client