Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
File: Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft (raw, json)
Hash identifier: ior7UFwW11DEkc2IR3Z9pXCT7ALc3wZo11oDKqvaKYk=
Subject key identifier: 6E:09:22:F1:BC:81:E3:93:C3:29:79:F6:C2:28:DB:6C:71:AA:B8:6C
Authority key identifier: 2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
Certificate issuer: /CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Certificate serial: 0196AD9F416CB30A61F1DB99627DFD225730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
Manifest number: 152F
Signing time: Thu 08 May 2025 02:00:17 +0000
Manifest this update: Thu 08 May 2025 02:00:17 +0000
Manifest next update: Fri 09 May 2025 02:00:17 +0000
Files and hashes: 1: LDfn0M5v99IHnOQFUNXp12Nf90k.roa (hash: do0pH7tAz4W21wYBRY5jEznU82Zdd3DteyiFEbjbCqA=)
2: Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl (hash: HmF+2RPOqPOhLbU+CJ3Uql3XL3s2uevqKT9OEJ9x83o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:9f:41:6c:b3:0a:61:f1:db:99:62:7d:fd:22:57:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df8779a3c82f00fc14435ee7d8d0b8d6dd8204e
Validity
Not Before: May 8 02:00:17 2025 GMT
Not After : May 9 02:00:17 2025 GMT
Subject: CN=6e0922f1bc81e393c32979f6c228db6c71aab86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:21:ef:e7:ac:b8:74:e0:2b:69:66:93:70:
af:2f:67:d1:19:92:3c:18:19:eb:45:90:4b:a7:77:
30:4d:6b:ef:e0:be:d2:ab:04:45:a3:90:cd:99:cd:
4d:1b:a4:e6:0d:13:61:5f:db:aa:07:3b:62:d0:6b:
08:8f:62:61:e3:08:dc:ef:24:86:b3:66:5a:46:19:
13:3d:7e:a2:27:52:8a:17:4f:fc:0d:9a:6b:62:ff:
2d:ae:1b:f2:a3:b3:8e:e5:1f:0f:31:f8:fd:4a:d0:
12:00:4d:b8:b6:bd:28:a9:10:e6:44:6f:7a:38:b9:
91:47:8c:82:8d:62:37:fe:f6:6d:a0:25:bd:43:9a:
71:ce:58:40:c2:ea:0c:d6:1a:cf:a6:7e:a1:55:0c:
eb:d0:13:55:c4:61:41:1f:dc:65:3c:d0:8a:11:48:
bc:2e:5f:0d:8e:ad:24:ca:77:bf:c2:94:75:6f:0d:
f3:c8:d5:39:64:97:58:53:1f:6d:fb:46:ff:1a:b8:
a4:a8:06:21:19:78:d0:7e:f0:59:c1:3d:86:43:b7:
70:fa:6a:3e:6a:32:d0:86:f3:5a:69:03:ab:6b:e1:
77:8b:7e:45:41:60:c5:ac:45:1c:5d:08:d4:06:04:
a6:df:37:cc:7a:53:ec:71:22:0f:34:2e:ce:c3:d1:
65:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:09:22:F1:BC:81:E3:93:C3:29:79:F6:C2:28:DB:6C:71:AA:B8:6C
X509v3 Authority Key Identifier:
keyid:2D:F8:77:9A:3C:82:F0:0F:C1:44:35:EE:7D:8D:0B:8D:6D:D8:20:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lfh3mjyC8A_BRDXufY0LjW3YIE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ccd96e-133e-45b7-88b7-e2ae055eced1/1/Lfh3mjyC8A_BRDXufY0LjW3YIE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:cf:1f:b1:db:7f:20:72:2f:27:d6:06:da:5d:55:5d:47:0b:
2b:3a:49:d2:55:ee:2c:b5:01:8e:30:a3:ef:95:8b:ec:17:86:
82:db:f7:f3:5c:54:d4:0e:ec:d5:21:1d:e6:e7:71:05:f2:3d:
f6:0c:76:0e:b7:38:d7:df:82:b7:88:97:1e:5b:d7:b2:d7:a6:
f2:a3:52:7c:7f:59:7b:ea:4f:cc:58:c6:ba:1f:14:7c:95:4d:
26:cd:99:50:68:95:77:ff:ce:23:77:60:fc:33:32:b5:27:1e:
93:24:ee:6e:c2:08:56:b1:35:b4:29:75:ea:ba:cd:4e:c9:a5:
6d:10:37:19:4e:f8:33:fe:fb:22:25:fe:75:0c:8d:c2:ea:9e:
fa:6e:89:ea:98:90:6b:82:3a:9c:1e:ed:a6:79:ac:22:58:b3:
cf:1d:3b:77:ad:67:9b:29:2c:e7:d8:90:83:f4:d4:59:a6:70:
4d:35:24:81:69:5d:64:8e:2d:ac:6e:7d:de:e1:f9:82:6f:b7:
b0:b9:2f:64:fa:b8:ec:f3:ee:08:1b:e8:c6:e1:48:f2:4e:3b:
08:0f:ea:9b:8e:1b:f3:97:9c:66:44:9f:02:d2:6c:0f:5c:a3:
42:99:8d:34:51:5d:9e:a2:9d:24:2b:a9:da:fe:43:d1:16:68:
46:1b:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:11:39 2025 by rpki-client