Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier: b0ICUGVplTx/3o+vYMgUOjpRd9+FpwXn6s9V+anjiN8=
Subject key identifier: EB:7F:94:D6:E3:DE:9F:01:89:8C:61:24:55:69:82:15:CC:D2:94:A7
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 0196A051927DAE76DB8D1CD3A34AC97F463B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 12:00:22 +0000
Manifest this update: Mon 05 May 2025 12:00:22 +0000
Manifest next update: Tue 06 May 2025 12:00:22 +0000
Files and hashes: 1: GPUtwAKGNzSr8rbND1H2VHmziE4.roa (hash: wN90966l4XV79/BKSCd9OwNn9HsZ4W1mhOHAW0ThFWA=)
2: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: obbOocB9KiVUwWMEjSJEXtZjja/zKNrKD+0buUynRcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:92:7d:ae:76:db:8d:1c:d3:a3:4a:c9:7f:46:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: May 5 12:00:22 2025 GMT
Not After : May 6 12:00:22 2025 GMT
Subject: CN=eb7f94d6e3de9f01898c612455698215ccd294a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:13:7d:c7:ff:64:0b:36:f1:7c:84:2d:3c:
13:2b:82:bd:af:87:09:c5:b9:88:56:6d:60:a3:bd:
93:6d:6e:b4:32:c7:61:8e:42:0d:75:97:f9:52:d1:
20:87:79:63:6c:eb:02:1e:fd:67:98:c1:24:3e:fd:
e0:e4:d1:b2:f1:c4:4d:f0:bb:17:4e:4e:3a:e2:de:
5f:b0:7d:23:c7:7c:50:9a:72:20:3a:51:36:ac:a5:
1c:e7:90:e3:a0:43:28:9b:44:c5:ba:e5:60:35:58:
9c:24:db:b4:07:c7:97:f6:73:21:79:a6:f5:e3:7b:
16:18:bf:87:8b:52:f3:0e:eb:a1:f7:52:39:5d:2a:
a7:86:ed:d1:71:82:8c:08:1b:95:fb:0e:d3:24:08:
aa:8c:5e:40:28:33:3e:04:a5:4d:f3:9b:0f:d8:23:
cf:04:73:bb:1c:29:ad:f3:cb:65:56:0c:51:7a:a2:
d0:d6:0c:07:66:0f:14:5b:c1:96:63:e9:84:00:61:
43:d1:70:bb:ce:28:75:70:06:d2:68:a2:1e:4e:b7:
23:29:37:91:68:26:3a:cd:bf:5f:16:32:c6:0d:fd:
c1:dc:af:bc:9e:1d:ff:de:f9:cd:b2:1a:a5:82:c0:
13:cc:cd:62:7b:32:81:e8:83:6d:7a:4e:d7:2e:60:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7F:94:D6:E3:DE:9F:01:89:8C:61:24:55:69:82:15:CC:D2:94:A7
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7e:63:8c:b1:6a:aa:cd:3b:9e:af:c2:e7:ab:d0:bf:b2:74:
25:e8:c0:f0:96:ce:3c:9f:24:02:0f:b0:3a:86:b4:45:54:11:
de:9c:2d:a0:38:cd:42:59:ef:54:1a:27:5a:74:17:fd:60:09:
f0:ce:27:08:7a:1f:c3:67:6c:08:61:4f:aa:79:96:b5:9e:af:
48:72:d6:40:0e:f1:fa:d1:28:a1:79:64:d1:e6:dd:0e:00:16:
34:2b:8b:ed:d5:7a:f4:46:05:8c:d5:e5:80:ff:37:d7:19:7d:
a6:58:f1:79:20:ac:e4:61:c3:84:9b:21:f1:a9:d4:07:90:b7:
9f:89:f2:92:16:71:d4:83:a0:a4:78:53:7b:35:ea:47:d0:2f:
64:d4:fe:5e:37:08:2c:62:5f:ee:e4:47:2c:9d:80:f3:4e:9e:
c9:8f:e1:87:18:dc:a2:72:de:7d:4e:23:f7:3f:1e:ce:84:7b:
e9:6a:50:ac:79:45:82:0e:8b:68:b1:c8:33:f8:b7:35:f6:bf:
ca:1f:78:e3:58:f5:32:49:29:d7:79:01:7a:f8:8e:12:43:19:
17:fa:22:48:99:52:8b:09:c3:75:9d:10:f7:81:10:f7:9e:5e:
b5:3f:60:b5:aa:b4:73:ec:67:dd:8d:be:74:cb:e6:b1:6f:41:
70:7b:fd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:39:08 2025 by rpki-client