Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
File: LgO_8-c1I3MjiWRkff2JOyajs0k.mft (raw, json)
Hash identifier: /Fg5XUOPKjAKtNVGgjWScAKDu9xJ6VNIqHVBkOpIosU=
Subject key identifier: BF:A3:F2:11:CB:70:EB:9B:3D:6D:3B:E3:75:21:AC:45:04:4B:13:8E
Authority key identifier: 2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
Certificate issuer: /CN=2e03bff3e7352373238964647dfd893b26a3b349
Certificate serial: 0196AEE96661EE431EC3FC82CBB36E9DD1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
Manifest number: 152B
Signing time: Thu 08 May 2025 08:00:53 +0000
Manifest this update: Thu 08 May 2025 08:00:53 +0000
Manifest next update: Fri 09 May 2025 08:00:53 +0000
Files and hashes: 1: 4Ks29m0KEvqQ2u_x82i2_AGUJYc.roa (hash: LAlVvGEw43G7VBWh8V8Fzw/Vs6vev/GRjzgqnNcn5CU=)
2: LgO_8-c1I3MjiWRkff2JOyajs0k.crl (hash: +a9yOSGcy9Hvy3wFJKpzjVJb61yVXOE891OKC7b0flQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:e9:66:61:ee:43:1e:c3:fc:82:cb:b3:6e:9d:d1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e03bff3e7352373238964647dfd893b26a3b349
Validity
Not Before: May 8 08:00:53 2025 GMT
Not After : May 9 08:00:53 2025 GMT
Subject: CN=bfa3f211cb70eb9b3d6d3be37521ac45044b138e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:b8:eb:af:26:7e:60:98:ba:69:4f:88:ee:
e1:a3:06:b3:e3:d5:e1:b1:90:a9:f8:82:5c:d1:bb:
4e:10:81:32:0a:88:10:f8:c9:19:e3:6f:4b:02:ab:
14:e9:6d:a6:0e:6d:0e:cc:c8:ac:bd:04:80:a7:96:
c2:79:2d:97:49:21:c7:e7:e5:ba:45:45:4d:2e:4b:
eb:b1:98:f9:5c:0f:02:ee:02:af:76:a5:da:57:21:
8b:f9:b3:87:e4:c6:f6:93:fa:d5:96:09:b1:48:8a:
29:f7:8b:b7:1f:f9:53:10:df:bf:bb:ff:b7:38:42:
4d:7e:5a:73:ca:65:61:72:41:58:49:68:74:73:b0:
46:f9:55:1d:6c:a7:c1:aa:63:3a:24:87:b6:7d:01:
70:61:ed:4f:1a:ab:ea:8e:9b:61:09:56:79:28:b6:
6c:95:aa:b4:7b:99:95:f7:7a:f4:81:6f:73:97:aa:
cc:4b:e5:cf:a0:39:1f:98:76:55:f2:c6:7c:d0:f2:
64:e1:bd:81:e6:ae:2d:79:dc:13:b8:4f:50:ff:25:
57:40:2a:aa:a8:4f:03:ab:d9:c2:74:0f:0c:eb:93:
a2:b3:ce:a9:55:b9:a8:9f:cc:ac:c5:d6:bb:80:0e:
43:5b:33:44:00:95:a1:25:77:9b:ce:18:57:a4:b4:
8b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A3:F2:11:CB:70:EB:9B:3D:6D:3B:E3:75:21:AC:45:04:4B:13:8E
X509v3 Authority Key Identifier:
keyid:2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8c:68:be:93:17:c4:87:7a:17:0a:33:7d:35:04:51:c6:bd:
f8:c5:f9:4b:a7:23:8b:c7:c1:b4:3c:e3:19:45:8d:96:88:e9:
a4:b7:ab:78:58:9d:c0:da:d7:af:fd:cc:b7:10:2e:b9:52:b7:
b8:ba:9e:a7:18:d8:75:79:9e:2f:fb:3c:ca:f6:b0:fc:c8:fe:
47:b9:23:99:92:6b:98:79:98:33:88:26:8e:c6:1a:b1:e3:dc:
c5:b2:06:f5:91:03:6b:96:85:37:dd:08:18:1a:81:27:65:73:
b4:4f:2e:f2:b4:2c:8e:08:35:2d:4b:7d:76:5c:50:9f:95:3e:
ca:62:3a:d0:99:ca:7c:d9:06:c8:66:53:ba:dd:e5:ba:b9:9a:
e0:0a:77:cb:3e:0f:55:37:d5:65:08:8b:ee:d7:c8:e0:c7:fc:
99:22:93:10:96:c4:50:61:3c:f5:f6:d3:ca:53:92:b2:ed:12:
8a:6b:f9:61:f9:de:fd:2c:29:d5:0e:7a:85:89:eb:19:fb:21:
a7:67:8d:95:e5:ca:78:00:1b:52:b7:9e:cf:5e:e0:ac:6e:1d:
4e:98:19:39:c2:f0:84:9f:84:dc:ff:a0:5f:a2:71:fc:5b:c6:
d6:98:1d:e9:54:39:a3:a6:33:8b:17:02:57:73:f7:f3:88:03:
f6:4a:5e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:34:05 2025 by rpki-client