Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
File: LQSlVAgkJpvlwR8gEouGQUzVWUU.mft (raw, json)
Hash identifier: zh46OEVoslP3ilXzDDMM3VX633w1rlDFpDuzcuPt3uA=
Subject key identifier: 04:54:C3:5B:EA:AB:ED:D1:1C:05:81:5F:73:80:47:1F:35:D2:4B:8B
Authority key identifier: 2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
Certificate issuer: /CN=2d04a5540824269be5c11f20128b86414cd55945
Certificate serial: 0196CBA9F0F40EDACB31B8A81D1493CAB625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
Manifest number: 8B
Signing time: Tue 13 May 2025 22:00:34 +0000
Manifest this update: Tue 13 May 2025 22:00:34 +0000
Manifest next update: Wed 14 May 2025 22:00:34 +0000
Files and hashes: 1: LQSlVAgkJpvlwR8gEouGQUzVWUU.crl (hash: aCoie0HcTf6INMEAJAn3izpNaRYyVgWfb8nS68rvnDU=)
2: LY5WGxr4gD_bvJfdNplUqALGFP0.roa (hash: tD9kvMegisj3R+7j2aUVrLlOEggEnyS436eQuZ4pUas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:a9:f0:f4:0e:da:cb:31:b8:a8:1d:14:93:ca:b6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d04a5540824269be5c11f20128b86414cd55945
Validity
Not Before: May 13 22:00:34 2025 GMT
Not After : May 14 22:00:34 2025 GMT
Subject: CN=0454c35beaabedd11c05815f7380471f35d24b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:ec:76:59:96:e4:93:90:97:38:ee:7d:f7:
f4:6f:00:9e:c6:36:60:ba:c9:dd:b8:f0:2b:7f:23:
54:ab:7e:d0:01:57:96:84:5d:56:80:c1:33:89:e2:
31:25:27:2b:13:53:47:88:eb:e9:4c:8f:af:88:38:
25:97:2b:cc:3c:34:0f:db:ac:30:33:c7:d1:14:32:
8a:51:5f:5e:54:5b:0c:77:85:78:42:ff:4b:17:22:
a6:d3:4c:5d:a4:4e:6a:e6:cd:6e:cd:98:78:7a:3d:
b9:1c:25:78:57:c3:f4:43:52:28:e8:6a:c5:17:25:
07:20:fe:b2:2d:6e:7a:cb:96:0b:6f:52:d9:eb:b0:
a5:55:39:09:de:91:c3:0b:ab:fa:43:b8:7a:b3:21:
6f:6e:aa:93:04:e6:11:76:c5:08:55:53:b7:8b:83:
62:e8:c3:bf:da:cd:f2:f4:c9:3b:15:f5:4b:0f:62:
38:c6:03:15:46:10:2f:90:aa:ff:9a:aa:2a:d5:0c:
88:e8:9f:e1:44:3e:03:80:5e:0e:a1:82:e6:c8:d2:
54:69:1a:d9:ce:e8:1e:e5:37:76:20:4b:28:d6:66:
c5:ac:2c:6c:b3:cc:25:75:7f:50:68:49:16:92:c7:
e8:22:56:47:26:f3:8c:b0:0e:cc:5b:77:e8:d7:c9:
01:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:54:C3:5B:EA:AB:ED:D1:1C:05:81:5F:73:80:47:1F:35:D2:4B:8B
X509v3 Authority Key Identifier:
keyid:2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9b:6f:e7:f9:2a:e7:4e:d3:15:98:4f:f7:48:b3:8e:2a:e4:
9c:38:9f:df:04:08:b2:e3:20:05:cc:ca:45:4c:ec:05:38:13:
bc:a6:00:a4:d5:cb:72:d6:47:b2:58:bd:f3:c0:2c:fa:9c:7e:
7a:54:eb:41:12:69:a0:63:82:35:b9:e0:86:b1:2e:b4:69:39:
be:4e:5b:82:38:02:59:2c:21:83:72:3a:e1:fd:f8:39:84:23:
b3:ba:fa:99:d1:02:36:f7:03:15:5f:6f:40:9b:0b:5f:de:63:
9c:43:c5:5e:1b:4e:c7:85:63:ea:fb:b1:40:e7:cb:99:98:84:
04:4c:0d:5c:80:0b:ec:64:f4:26:67:fd:fa:3f:3d:7e:0d:e7:
7b:a6:fb:8d:63:4d:de:b1:cc:49:3c:1d:e6:34:d2:a2:7e:33:
ce:22:4d:4a:38:49:e2:15:84:fc:a2:52:fb:ab:7d:d3:8e:0a:
31:ce:f3:b3:17:f5:dc:b2:cb:26:63:91:86:09:c0:75:92:0f:
51:0a:04:0d:c0:e0:09:70:db:e9:9e:45:99:b7:41:2c:4d:da:
89:5c:8a:d4:4a:df:48:b7:42:ff:15:bd:67:7f:eb:2c:26:61:
00:ec:43:ca:63:6c:0e:d2:83:9a:df:77:35:a1:2f:86:4a:4a:
d0:84:60:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:05:35 2025 by rpki-client