Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
File: LnOtRfij6-Znq7GWoonWcZvruC0.mft (raw, json)
Hash identifier: xPsh8BNlPFveGzMPVpTPVDlmBXAeG44NcqQhdQMiExw=
Subject key identifier: 80:5C:F9:52:19:B8:90:BE:D0:2D:EA:99:46:8D:29:06:69:12:12:08
Authority key identifier: 2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
Certificate issuer: /CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Certificate serial: 0196ADD698620F4B48BA6E727C98C5C05E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
Manifest number: 152C
Signing time: Thu 08 May 2025 03:00:44 +0000
Manifest this update: Thu 08 May 2025 03:00:44 +0000
Manifest next update: Fri 09 May 2025 03:00:44 +0000
Files and hashes: 1: LnOtRfij6-Znq7GWoonWcZvruC0.crl (hash: aOEyWPRoN+Cj6b+DgDyuI3CgmD6N7IKD2HhaX9BaPEY=)
2: xBYzLNgtWEdItwv5XiwC0f2BVHs.roa (hash: M4igOLaB0nj0vGEKkqVeIm87sQmGzEgR39n8QW/vxOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:d6:98:62:0f:4b:48:ba:6e:72:7c:98:c5:c0:5e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Validity
Not Before: May 8 03:00:44 2025 GMT
Not After : May 9 03:00:44 2025 GMT
Subject: CN=805cf95219b890bed02dea99468d290669121208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e4:39:cc:58:47:c3:bb:fb:b5:56:bc:6e:80:
5e:bf:81:6d:e4:af:7b:ca:8e:2f:18:9b:93:f3:d0:
b4:5c:30:29:ae:d8:8b:a4:d3:c2:f2:41:5d:1f:ec:
90:fa:1f:19:68:e1:2e:58:65:0c:b2:fa:e4:b1:aa:
0e:ad:92:0f:5b:8b:68:d7:eb:29:d0:69:56:8d:be:
80:67:7a:d9:18:69:13:31:9d:3f:08:a6:f9:df:a5:
bd:e3:54:5c:75:01:75:51:e8:00:11:58:f9:8c:1c:
a2:9f:64:1f:df:41:a8:56:a7:be:34:53:d0:9b:8b:
77:76:b0:52:e3:84:5a:34:40:97:cc:cb:cb:27:00:
ef:8f:80:0b:bf:5b:c6:5e:be:bb:a0:ad:f4:50:81:
a6:52:cd:d1:22:45:19:9e:17:10:82:cf:70:03:97:
9b:a0:7c:25:be:46:51:d3:9b:d1:4a:db:c5:e9:b4:
a8:29:40:53:21:ef:82:eb:42:a6:ba:9a:49:2f:a2:
4b:8c:f0:9c:80:81:64:c6:bf:43:e8:d4:71:3e:86:
3a:3c:ee:50:e5:5f:1c:ff:fb:b2:bd:b0:94:9d:a0:
1e:1a:d3:32:e3:51:34:7d:28:2a:ce:c2:c3:3b:6a:
d6:54:c6:2e:34:f6:c6:c8:f8:ff:be:3c:19:e5:06:
29:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5C:F9:52:19:B8:90:BE:D0:2D:EA:99:46:8D:29:06:69:12:12:08
X509v3 Authority Key Identifier:
keyid:2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b1:4f:43:b1:96:60:05:ae:ce:76:d3:5a:a2:55:af:57:39:
a0:36:3e:e1:5b:f5:0c:da:fa:59:69:a9:9f:17:91:55:7d:44:
2c:07:80:d6:08:b1:0f:52:2c:3c:42:c7:85:2a:ad:60:09:ce:
22:f0:24:f6:09:80:ac:6b:7a:88:b2:a1:e2:17:6e:2c:cb:05:
77:48:b8:4f:71:f8:e2:f3:da:a9:89:11:c9:80:7a:f7:c0:7a:
39:53:17:6c:da:ac:b5:09:74:bd:52:15:57:09:23:e9:21:a8:
09:73:f3:f8:4c:0a:dc:34:88:18:8d:af:7c:75:ec:04:cf:fb:
ba:9e:fc:b2:1c:28:6b:eb:8c:d6:24:a9:78:db:b4:be:22:4c:
d6:2f:fe:af:9b:49:89:1c:c4:9d:90:6b:f5:be:41:f2:90:32:
f4:ab:ae:fc:1c:e1:b1:f3:a5:93:0c:1a:0e:4e:37:84:8d:4e:
48:7a:c6:d8:02:a4:01:be:70:a9:f1:7f:36:51:90:bc:85:35:
50:f8:5d:b1:c7:9f:03:21:c3:a8:0c:12:b3:2d:32:a4:cd:c1:
b4:d1:05:48:f1:35:14:7d:fa:15:3a:b2:a2:dd:92:21:9e:c1:
07:0a:1a:fb:42:c8:84:62:1a:bf:1a:63:0d:d4:73:03:7c:43:
ce:a5:e8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:04:20 2025 by rpki-client