Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
File: LcgdJMRd2qNF-QZN4p-8p7EppSw.mft (raw, json)
Hash identifier: INRBrh7aaOcK8x4Ryju6QkBzJedPx67X4wRBjmh7V80=
Subject key identifier: 60:5F:E8:DF:03:27:FF:48:7A:55:A0:71:29:42:93:29:CE:81:92:F1
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial: 0196A79D30C20F2087733D2AF321B174A01C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
Manifest number: 153C
Signing time: Tue 06 May 2025 22:00:18 +0000
Manifest this update: Tue 06 May 2025 22:00:18 +0000
Manifest next update: Wed 07 May 2025 22:00:18 +0000
Files and hashes: 1: 1-Gxr6vIW4yBzcBwkpTyv09TdOlo.roa (hash: Ez8uNLSpiX9S8lz0pVk5NS7jK9ai+KC6g5pGfPW50c4=)
2: LcgdJMRd2qNF-QZN4p-8p7EppSw.crl (hash: VvuII9Fqsi2Vypu2qm1R8VTkWWyGvBtxHHkh7F45uj0=)
3: Tqry6ntz7b3kTeJ5OCnwPvloJIw.roa (hash: y/Hg2mPZLnUNHUkA7kXq+J0F+bsaFDCzyOC2OJvkyTk=)
4: fd3RJJ6-t5MPxFMjaOieMyrNj1Q.roa (hash: Gp0oxYbqR8uF0JIVNiZGflyEv6T2n/2lVC4AqntijqM=)
5: iCEtvdo35QYS0XZzbCSkUBvLIzs.roa (hash: zyoo6UPzEwr9Wic7Dppcx0mzsl7aajEnMpuXSdefYMA=)
6: yGvOgFMZISJsfSPqCjNlOqtAHMM.roa (hash: Y4gEqzV+We8lCW3rGQRh7ia7nliYhdhTWgBtjF9WRdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:9d:30:c2:0f:20:87:73:3d:2a:f3:21:b1:74:a0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Validity
Not Before: May 6 22:00:18 2025 GMT
Not After : May 7 22:00:18 2025 GMT
Subject: CN=605fe8df0327ff487a55a07129429329ce8192f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:25:17:25:29:2f:66:37:41:e3:7b:39:0a:
54:d9:cf:b9:0d:36:35:7f:62:2a:92:f1:6f:43:03:
92:73:4c:dd:a1:06:70:ae:ea:99:0e:64:73:7b:2a:
d1:6d:a9:eb:ad:7e:ca:bb:46:0a:9f:42:c9:bc:aa:
e5:5f:d5:f0:be:0c:cb:75:88:83:07:b5:20:6d:60:
3a:d9:f5:02:5d:46:0b:55:f5:f9:b8:b7:da:83:64:
be:f4:26:ea:0c:21:ca:10:6d:47:6b:82:ca:ee:1b:
c2:bd:18:32:0a:27:57:de:15:5e:ec:eb:bd:76:92:
42:64:0a:68:a9:04:b7:a9:21:44:70:2c:c2:a7:0c:
8a:7e:c6:fa:0a:a5:1f:fc:33:b5:0c:b7:e7:2b:38:
b5:01:26:d4:21:45:5e:93:cf:ee:44:8c:6a:9c:43:
09:ee:f9:a7:d7:7d:39:05:52:60:ec:06:ea:79:f5:
ca:18:3a:d8:6d:be:69:77:cb:a2:ff:88:ad:90:51:
7f:d9:f4:c5:4e:e0:70:df:9b:2b:ef:56:0a:87:5f:
29:0f:57:44:2d:e5:be:1e:58:01:d7:cb:82:88:19:
ca:79:02:14:96:9e:31:21:a5:07:e5:07:b5:2e:13:
1c:4f:47:a7:26:cc:52:6f:03:d3:89:b8:be:de:e5:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5F:E8:DF:03:27:FF:48:7A:55:A0:71:29:42:93:29:CE:81:92:F1
X509v3 Authority Key Identifier:
keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:59:31:bb:f9:a6:94:cd:2a:24:fa:8a:83:da:4e:20:74:95:
be:a6:83:2f:26:c6:4d:e6:b9:0d:b9:0b:2e:39:dc:85:f3:2a:
3b:2b:fb:ed:a6:db:a8:83:01:dc:a1:bd:db:bc:5a:35:9b:c1:
93:fa:f9:7f:d6:3c:61:1d:cd:1c:9f:c1:5b:b0:2d:be:cb:18:
60:98:54:4c:3b:a4:f9:4b:69:3b:5c:37:2c:31:a8:f9:4b:9a:
54:c2:ad:27:41:e0:10:a3:94:d0:10:4b:20:02:26:65:54:3e:
2e:42:5e:c4:ce:0d:fd:f2:47:0e:ef:38:33:32:38:b0:4b:4c:
48:89:e6:fc:e0:66:6c:ff:e6:7f:41:fd:3a:8d:d0:6a:9e:1f:
87:62:72:9d:29:dc:a0:aa:24:12:07:65:d1:1e:97:59:35:31:
e6:05:88:04:10:07:e6:58:9e:00:dd:05:45:43:86:ee:b4:62:
00:f5:ad:b6:5f:a5:c3:f7:f1:9d:d9:84:3e:1e:9f:26:3f:0e:
52:67:b4:0d:b6:63:36:56:7c:65:97:9a:5a:fc:1f:c2:12:71:
53:8a:7c:f7:c0:17:f9:32:56:ed:db:a2:71:5c:17:42:f5:ad:
ac:dc:00:f6:22:8a:e2:07:ca:83:79:6b:96:13:28:e6:6c:4b:
9d:00:e3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:14:31 2025 by rpki-client