Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
File: LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft (raw, json)
Hash identifier: xfFuTlk3e2f+uSrjmEWqRVLXa2k4XahZqoUvAWTAnQE=
Subject key identifier: 70:BB:C3:A1:17:8D:08:F7:F2:EB:C1:F3:08:98:9B:68:98:59:C1:A6
Authority key identifier: 2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
Certificate issuer: /CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Certificate serial: 0196A01B058BA6928318FBFDE3D3D2855E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
Manifest number: 0473
Signing time: Mon 05 May 2025 11:00:47 +0000
Manifest this update: Mon 05 May 2025 11:00:47 +0000
Manifest next update: Tue 06 May 2025 11:00:47 +0000
Files and hashes: 1: 1-CqksZEngiad9GJ1laZb9kmUhDs.roa (hash: RFGoumzL1Ot9LozFC8/pBRuEEMi1Nkwj8cBdnCtnZ+Y=)
2: LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl (hash: BM5IPKGhZVvQPMxB3ICQ3HXJACVAbWmSvw+CBvDvsBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1b:05:8b:a6:92:83:18:fb:fd:e3:d3:d2:85:5e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Validity
Not Before: May 5 11:00:47 2025 GMT
Not After : May 6 11:00:47 2025 GMT
Subject: CN=70bbc3a1178d08f7f2ebc1f308989b689859c1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:2f:84:c4:d2:73:62:2c:10:18:32:5a:31:
d8:1b:05:a0:28:ad:11:6d:92:e6:d6:3c:1b:40:19:
4b:00:32:bc:78:73:66:18:14:bc:95:ad:f7:b0:f3:
85:14:44:85:d0:db:95:71:b8:70:01:32:3d:8a:79:
85:84:4b:80:d7:d8:5a:60:2e:f4:e9:db:b4:7b:d9:
65:6f:22:bb:04:2f:23:66:62:9c:d4:8c:c5:c2:fb:
63:76:ab:49:66:97:ee:ba:94:14:9e:1d:4d:6d:3b:
38:7b:49:64:7d:6f:a8:ab:1d:e6:93:d9:f9:99:1d:
80:08:2b:ec:f4:2e:62:e2:98:da:6e:bb:dd:6c:9f:
61:af:17:6c:38:f3:77:0d:56:4c:f4:06:f5:7c:0c:
11:ef:83:f2:0b:11:4c:76:2c:81:a7:e6:6f:79:4b:
bb:e2:69:a6:f0:00:64:72:a2:ee:d5:41:78:0b:2d:
af:ec:17:1e:b4:1d:76:d5:1d:a7:dd:f9:86:10:7b:
55:f5:8a:96:82:81:7a:f5:3d:50:7b:09:0c:9d:39:
4b:3d:b1:08:b7:66:b8:a8:71:87:1b:b8:61:9f:b4:
95:82:94:4c:16:56:20:67:4a:2f:6f:a5:23:04:d1:
77:f3:5c:9a:51:b3:f0:34:7f:48:db:a9:bb:fd:cb:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BB:C3:A1:17:8D:08:F7:F2:EB:C1:F3:08:98:9B:68:98:59:C1:A6
X509v3 Authority Key Identifier:
keyid:2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f0:89:b8:4b:fd:c9:91:aa:6d:3b:43:b1:28:a2:f1:7f:53:
d9:e2:52:74:2a:6a:25:29:1c:0d:e9:71:28:e5:cb:4e:be:33:
8a:d7:d6:7d:79:ee:e5:9d:8c:ff:d4:91:44:f5:83:80:4f:9c:
d7:eb:08:9f:c8:5a:8d:f8:94:5b:5c:2e:a8:e1:20:f1:74:ec:
70:0c:22:54:42:79:76:4c:74:b2:88:2a:16:2a:48:93:bb:f5:
db:27:10:f4:19:ed:04:bb:fc:e6:88:19:ef:1f:80:21:00:ba:
42:8b:e3:ef:af:ae:c2:48:2e:36:62:33:3c:14:07:a3:d6:5d:
44:e7:f8:fb:c6:73:ba:50:62:98:c7:d5:6e:e6:1b:c7:07:17:
83:0a:c8:33:29:29:c1:87:55:ac:e9:c2:e6:69:9b:39:d1:c3:
64:f5:94:97:48:06:40:24:fd:91:0c:f8:1d:5b:4d:80:ba:2c:
1f:ff:45:a5:90:58:09:24:f2:0f:bd:57:ef:ae:70:19:d9:8a:
3c:0e:ac:fc:37:d5:62:75:1f:3b:cf:68:7d:84:59:7d:b5:f1:
5a:2f:12:89:ff:90:1a:f8:8b:57:2f:2f:e0:37:6f:64:68:0d:
11:63:ba:65:1f:17:81:18:8d:7a:56:8d:52:42:ef:62:06:5c:
a8:e8:aa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:58:45 2025 by rpki-client