Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: H3QI2imAZSQyNp3ikw1Fs8Wa5KfCl9nDIYD7XXlPsB4=
Subject key identifier: D3:C4:1F:F1:38:46:A3:70:61:F3:72:26:CD:62:AF:9D:F3:3C:1B:4F
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 0196B0A0D91457805CD61891666A8BABB4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 1530
Signing time: Thu 08 May 2025 16:00:53 +0000
Manifest this update: Thu 08 May 2025 16:00:53 +0000
Manifest next update: Fri 09 May 2025 16:00:53 +0000
Files and hashes: 1: Ai3_NgCb2mwvHHHWVo7OjI6Wj04.roa (hash: mxmvKEH6k3H+fHWxr8AaesSD9p5zVNhT7qFX1XU+vIQ=)
2: EZLjMnt3YY1uGOfZ3nimgNl-yLU.roa (hash: Ko07ZGo7IwS8NL/yJPyHpJ9m0iW9ngaJs3DqWmHrpi0=)
3: RIQPOEjptB8udCiUyrk1eA7kGsQ.roa (hash: iUSixJ9qOvizzSlye8GPbxagX4TAp65dTuqFovVtZ00=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: 0mGymisrYHddURU+YgybqfRdasTIDWifHrdYznIJCow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:a0:d9:14:57:80:5c:d6:18:91:66:6a:8b:ab:b4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: May 8 16:00:53 2025 GMT
Not After : May 9 16:00:53 2025 GMT
Subject: CN=d3c41ff13846a37061f37226cd62af9df33c1b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:e0:cf:06:f9:0b:bb:d6:ce:ef:e8:c4:36:
01:42:30:53:55:70:86:ef:6a:e2:be:55:9c:70:be:
9e:01:d0:69:cc:12:2d:fb:23:c4:d5:47:3a:89:65:
ec:c8:ef:37:b7:ff:e0:7a:59:da:16:51:4c:11:99:
47:ec:f9:19:bb:36:ae:84:ec:cf:a3:fc:99:e0:f7:
14:4e:99:2c:ca:94:d3:76:e2:e5:0c:e0:7d:72:f9:
2d:76:2d:0e:33:39:dc:16:8a:98:53:e5:f7:61:80:
45:37:5b:90:2d:68:fd:cb:f8:1d:8c:e6:30:eb:a6:
62:57:92:50:6c:15:60:12:03:20:64:63:cc:39:98:
5a:1e:3c:29:fe:b3:99:b6:68:5f:46:88:01:d9:8d:
d1:45:04:48:d2:90:50:7e:04:ed:20:08:17:c8:54:
e2:10:65:9c:61:30:c9:4a:50:1d:9c:89:fc:6a:e9:
80:01:bd:6a:6f:34:ee:19:bb:5a:b4:8f:53:a6:0f:
49:1f:11:56:29:87:53:46:1b:95:8b:fb:96:f5:39:
e5:61:20:13:6c:05:e9:62:99:5d:56:d9:a2:63:97:
44:df:25:b9:c8:11:29:a6:73:b2:97:78:29:60:64:
59:93:98:dc:68:fe:00:81:97:e8:68:bd:9e:01:dc:
44:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C4:1F:F1:38:46:A3:70:61:F3:72:26:CD:62:AF:9D:F3:3C:1B:4F
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e2:61:13:03:14:ec:ad:60:ee:b8:cc:86:66:2f:f8:e8:7d:
ae:ef:7d:60:e3:e4:9a:9b:6e:ba:a8:ab:c6:72:40:23:a4:5b:
0e:b7:63:35:40:0d:58:a5:17:db:ed:df:98:01:1a:ea:3e:3d:
87:b2:40:f6:0a:d0:d5:20:9e:9d:87:ba:7f:55:f6:ce:c9:19:
0f:bf:d3:a3:d0:1f:6c:58:a2:e0:6f:44:bf:d2:4f:87:3d:ea:
2f:2c:8f:c8:ea:82:2b:c3:09:cb:cc:a6:8f:1e:81:89:59:05:
7b:aa:b2:c4:75:bf:e9:22:46:31:b3:bd:1c:25:12:b3:17:a6:
98:2a:f1:56:c1:da:87:b0:7b:4f:de:46:8f:45:ba:49:c0:2e:
83:73:27:48:5a:e4:03:31:8d:21:0d:32:f3:df:79:93:47:07:
0f:b0:b8:d2:6a:1a:b9:1e:7f:18:08:33:e7:c0:ee:b3:a8:9f:
a1:7c:14:26:d9:73:0f:68:3c:3b:26:a2:85:57:0d:0c:26:55:
b6:5b:52:15:f1:17:83:ff:15:5c:95:b5:e2:34:5d:d8:01:a3:
9d:eb:db:fb:46:cc:72:0a:60:b9:08:54:cb:7a:32:63:70:de:
56:9b:df:59:97:50:40:81:65:6b:e1:d9:64:dc:10:a5:c8:1c:
cd:c2:c9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:45:35 2025 by rpki-client