Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: Pk7DyWgc7XlpDPE2wzQqSC6rMPmMw00fvtK8MAjj6f4=
Subject key identifier: 7E:5B:6B:52:B9:0B:DD:7E:AA:16:11:71:59:97:7C:18:82:52:6F:2B
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 0196AC1F4215A2B803B475EA077E06DE1547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 0AA2
Signing time: Wed 07 May 2025 19:00:51 +0000
Manifest this update: Wed 07 May 2025 19:00:51 +0000
Manifest next update: Thu 08 May 2025 19:00:51 +0000
Files and hashes: 1: EYwLNQ0R_Ied-v-mXvUH_vf6GVA.roa (hash: TajJUilMmDGZNmoTd4v8tDuWl6eHYmByCynqf999DBU=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: dQiV2i494ejVlegg5ESd9Ut4gYjVNBGlO0Yb7Ol/IoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1f:42:15:a2:b8:03:b4:75:ea:07:7e:06:de:15:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: May 7 19:00:51 2025 GMT
Not After : May 8 19:00:51 2025 GMT
Subject: CN=7e5b6b52b90bdd7eaa16117159977c1882526f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1d:3f:71:c1:8a:3c:33:57:60:81:7a:2b:d7:
1c:1f:d6:ff:4e:4a:63:ad:e5:1a:50:ee:71:53:ea:
32:3f:f5:84:bf:3e:31:84:89:6f:d6:6e:00:5c:a8:
95:10:57:f8:a2:d6:6a:a3:30:cc:6c:dd:e8:34:4b:
f9:dd:cf:f1:b5:37:af:a5:45:28:97:b1:1b:4a:db:
64:33:fe:e9:91:8a:79:da:28:6d:80:ac:4e:f5:aa:
97:4f:67:07:29:cc:78:b3:8f:86:6a:47:3a:42:e1:
87:49:6d:e3:a5:e0:3b:82:d2:2c:98:c6:a6:ea:89:
8b:e9:98:e9:61:11:ff:bf:88:ed:91:d1:16:59:6b:
c4:e5:4f:21:f7:05:3a:ac:9c:11:b9:df:43:a5:7f:
e3:61:a6:2a:4f:a0:63:e9:6e:70:f1:7d:cc:0f:ea:
1d:33:3d:55:34:a7:e4:f5:3b:7d:10:22:9d:ef:db:
a1:0f:a8:00:b4:79:92:c5:71:64:f3:73:ac:59:95:
c8:a7:e2:51:89:68:67:ac:08:0f:d6:13:08:e0:a4:
c6:d8:d6:a4:3a:07:be:d1:53:77:eb:5f:1e:bf:ff:
ba:f2:17:3b:46:ef:07:b0:a1:e9:20:da:c6:af:d6:
7a:a6:3d:f7:f8:3a:3b:4e:93:81:64:a6:f2:e2:64:
d5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5B:6B:52:B9:0B:DD:7E:AA:16:11:71:59:97:7C:18:82:52:6F:2B
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:15:73:01:3c:d5:75:db:9d:1e:1c:99:fd:94:7f:a0:c0:fc:
12:76:23:51:83:50:41:73:3a:3c:28:d5:95:99:29:3d:9c:23:
29:49:34:b5:cc:21:a0:e8:1d:bb:c8:06:27:58:9d:55:93:8a:
f1:65:40:e2:c1:3e:e5:44:98:52:03:f4:63:00:d3:19:63:9f:
0b:7b:6d:c5:35:d5:71:18:11:11:86:5e:4c:ec:01:ee:d7:fd:
5c:1b:c8:9f:fb:04:c4:26:26:d8:75:8d:44:22:f0:ef:42:88:
bd:86:1b:e7:16:24:cd:f0:b4:c7:1b:59:c4:e6:6e:dc:24:db:
3d:d3:41:48:cf:35:d3:2d:48:64:1b:cc:cf:06:76:21:9c:22:
3b:98:b2:07:e4:9f:40:f1:87:8c:31:8e:0f:85:70:ab:7c:4c:
b5:af:9f:0d:d2:d2:31:24:c7:08:fe:7c:ed:54:28:c1:28:a4:
50:b3:bb:3b:e9:f0:f8:41:12:b8:16:b9:57:24:8b:6a:da:82:
a8:8f:14:f1:ec:09:21:7c:1d:4b:46:43:41:d5:b7:bb:04:2e:
d1:37:37:88:b6:21:56:f4:cb:8e:c0:58:40:25:b9:94:c1:21:
c2:7f:37:0d:b7:d4:53:45:53:a8:0f:45:6c:f3:03:19:f7:62:
7c:0c:ab:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 01:29:49 2025 by rpki-client