Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: GyeudPZdFrwpb9rrgii9LeeXnRFLUbGoPINvqsqFuJ8=
Subject key identifier: 9D:B0:AC:9E:8C:42:48:30:04:5B:30:95:34:01:2B:DC:0F:0D:AF:2F
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 0196C53A386CD832BBF935B4EC2223E760BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 16:00:49 +0000
Manifest this update: Mon 12 May 2025 16:00:49 +0000
Manifest next update: Tue 13 May 2025 16:00:49 +0000
Files and hashes: 1: Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa (hash: 4wHVTXOU9z+SM/PpUwslG9Qh7bHf21AbIIUgGIPuA60=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: HA//UyS4lxkDqiLNykKutHu2NPTy5OgHxbCi77LrHy0=)
3: sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa (hash: UF7xshn/lezkLw7gZiOHSmc0ml+xgRop+HTs7XfValk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:38:6c:d8:32:bb:f9:35:b4:ec:22:23:e7:60:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: May 12 16:00:49 2025 GMT
Not After : May 13 16:00:49 2025 GMT
Subject: CN=9db0ac9e8c424830045b309534012bdc0f0daf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:13:88:4c:32:da:12:6c:71:4b:92:0d:ce:d7:
17:b5:3a:df:34:a6:63:a6:cf:71:37:87:c4:a0:27:
03:81:8e:97:23:46:a8:47:85:b3:21:65:04:b3:ff:
68:cc:b6:8b:7b:66:2d:c5:d9:77:e7:8c:ba:65:19:
65:51:1f:50:e4:c3:2c:3d:2f:49:da:fb:7d:c0:09:
70:a8:61:d6:91:ef:f6:1a:33:8e:4f:4e:cd:36:a9:
c9:55:25:66:37:cd:d5:5d:cc:61:a4:00:f2:de:16:
7d:79:a4:e9:08:2f:17:c8:b2:56:af:77:6a:34:fc:
73:e5:44:1f:ad:e8:65:78:3f:62:01:dd:f8:31:c0:
67:61:09:b8:09:34:81:ca:40:d0:cf:2f:26:5c:72:
cc:13:3d:9c:6c:b9:60:1f:5e:1d:1c:f2:c6:aa:c7:
50:bf:dd:19:67:47:55:91:c9:e1:a3:6e:09:48:9e:
71:40:64:79:91:e2:41:c3:c0:74:4c:d8:21:89:61:
1c:e7:f1:93:d0:6f:85:e5:78:2d:88:f3:fa:4b:a5:
a7:f6:95:cd:76:7b:1a:ca:a2:74:ba:61:c2:2f:b2:
66:8e:8f:ca:dc:57:e3:e8:51:65:54:28:38:1f:1f:
cb:ec:62:ff:d4:56:e3:ad:d8:d6:73:33:7a:ae:c6:
6b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B0:AC:9E:8C:42:48:30:04:5B:30:95:34:01:2B:DC:0F:0D:AF:2F
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3c:47:12:81:14:35:b2:72:67:85:e8:c0:ac:84:c9:1a:26:
42:85:e2:3f:46:72:9d:d5:a0:77:de:39:28:ce:3b:30:43:d5:
a4:82:0b:b9:2f:90:94:b4:99:57:19:60:c0:bc:5e:77:1e:1c:
10:93:bd:ce:50:dc:93:59:84:e2:d4:b0:58:52:20:45:01:eb:
3d:5e:9b:de:bf:e6:88:b0:1e:0c:a9:87:ab:e0:8a:8b:f7:3a:
cc:14:d9:bf:c6:60:33:b3:98:22:66:98:d2:d0:2b:ed:7b:2e:
0a:5d:7d:cd:c5:68:0f:5b:72:37:8d:47:2f:69:f5:6b:82:e9:
dd:43:5e:5b:a3:0e:93:3f:0d:1b:2c:10:c8:4c:86:bf:a7:47:
41:44:72:d4:fe:53:ec:0c:f1:01:a2:cf:14:f2:c1:87:72:96:
e8:da:5d:6b:60:08:0a:e3:6b:6b:23:62:33:48:2c:d9:32:63:
25:25:49:c3:11:09:c3:42:94:93:5b:10:b5:e2:57:37:df:bc:
f5:2d:77:b3:ee:3c:28:53:14:c8:64:0f:9b:81:b2:1e:af:61:
0e:84:a6:41:40:f4:05:47:c1:4d:f4:0a:cf:dd:24:b7:07:26:
2a:13:2d:aa:75:ba:65:74:a8:59:f1:49:08:67:17:d6:a6:af:
e5:54:ef:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:26:07 2025 by rpki-client