Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
File: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft (raw, json)
Hash identifier: 6G+zrXhhcD/hfHNoWJ6Rsydy03j8pOqNahdkN1rnA+k=
Subject key identifier: 29:F9:C2:CA:D9:8D:BE:97:10:F6:C2:AC:2E:12:2D:BF:C5:62:FE:68
Authority key identifier: 96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
Certificate issuer: /CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Certificate serial: 0196A389EABC7E860C791E52324F9FE04355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
Manifest number: 0111
Signing time: Tue 06 May 2025 03:00:46 +0000
Manifest this update: Tue 06 May 2025 03:00:46 +0000
Manifest next update: Wed 07 May 2025 03:00:46 +0000
Files and hashes: 1: l8QB-PHUK_LEuNNWFKARbwIaMRU.roa (hash: W02KjqYvETrR9gAMAORKt4swyV9tqxzh/G6YzbTzQpY=)
2: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl (hash: wWDvL1YCf25lfzp2AgbYaoSae0UD5oE4DwiA+8AqKrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:89:ea:bc:7e:86:0c:79:1e:52:32:4f:9f:e0:43:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Validity
Not Before: May 6 03:00:46 2025 GMT
Not After : May 7 03:00:46 2025 GMT
Subject: CN=29f9c2cad98dbe9710f6c2ac2e122dbfc562fe68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:f1:52:33:16:29:20:50:97:14:7f:38:f6:
f9:a1:43:d2:d8:64:1f:8c:10:0d:bf:68:ec:ff:6f:
85:63:10:68:68:7a:c9:b6:ff:71:60:ce:4a:ac:9f:
22:5a:04:5a:6d:af:2f:11:d7:9d:3c:56:13:8e:dd:
fd:72:7f:38:a8:d4:61:53:dd:33:eb:25:a0:c1:a8:
a5:46:e3:2a:93:67:6a:24:17:15:3d:73:3a:a3:3b:
27:c3:e1:a9:c0:94:62:67:d6:35:cd:f1:55:da:ec:
4d:c5:eb:fc:a9:b2:a8:67:2d:50:34:e7:42:2f:7b:
2d:9b:94:1e:a5:4c:20:b9:11:cf:45:32:43:f1:41:
6a:e3:1a:3f:ee:53:bf:8e:11:2a:85:3e:2e:76:ad:
c4:a8:a9:b7:7f:76:cc:64:40:a6:9a:6f:31:ae:6b:
45:0f:55:d5:e4:6f:d8:af:23:96:87:3b:86:14:21:
dc:ea:28:d9:4d:47:ae:bc:bc:03:4a:67:b0:3f:b5:
9f:01:7e:89:95:7c:32:0f:7b:5e:91:3e:d2:22:16:
ef:d9:77:78:62:ea:32:50:a9:ae:48:4c:87:11:e1:
ab:50:29:ac:80:71:bb:d5:70:82:66:02:d8:b9:49:
e9:5d:7b:ea:8a:e6:7e:91:10:c3:3f:26:7f:25:a7:
38:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F9:C2:CA:D9:8D:BE:97:10:F6:C2:AC:2E:12:2D:BF:C5:62:FE:68
X509v3 Authority Key Identifier:
keyid:96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:03:3d:98:57:76:7f:ad:c4:6a:18:c0:46:63:fd:7d:73:d5:
5f:f3:ef:90:c1:4c:3e:d6:07:cf:ca:65:fb:69:ab:c6:7d:fe:
8a:19:1a:6e:07:ce:84:32:39:f1:8c:2b:bd:25:b7:d1:54:95:
a6:09:af:1b:7c:44:a9:42:a3:bb:f3:d8:ba:c5:a2:df:36:ea:
1a:3a:21:61:e7:fb:28:6f:ee:a0:a4:ca:9e:2e:98:bd:06:b5:
c4:5d:ca:60:4e:dd:c8:33:4c:44:97:e7:95:a4:03:93:4a:20:
ae:ff:bf:ac:bd:34:59:8d:c5:d2:c5:f3:b3:26:0b:37:68:70:
2d:dd:5e:59:83:b9:3f:bc:dc:8e:8c:2b:3d:12:a0:6e:1f:2b:
cc:93:82:a7:d0:2c:58:87:98:48:1b:ce:62:d7:98:22:c1:c8:
13:fa:db:2f:09:c4:39:bc:f6:bb:c7:24:e6:1a:54:21:bf:20:
32:dd:2c:0a:80:8e:7d:a6:ad:fc:4d:b6:e7:56:9c:86:8e:4f:
22:c2:bd:cf:37:23:9d:ca:3c:be:78:0b:80:9a:16:5d:13:df:
cc:2f:9e:c3:bb:cf:be:b3:f3:53:ab:b3:2b:78:97:c9:9b:56:
48:8f:62:2c:58:cd:48:95:b4:45:f7:ff:a4:93:ab:5c:6b:1e:
47:af:bd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:30:37 2025 by rpki-client