Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier: 1iIC24wEguQcoNgewjW+oFD5A20BdbQJqcp4TnqBDT8=
Subject key identifier: 84:01:C6:92:60:4B:31:BE:E5:43:07:8A:17:AA:6D:10:B5:28:17:7D
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 0196A276B87BB6D50B6A72F249414118F180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 22:00:11 +0000
Manifest this update: Mon 05 May 2025 22:00:11 +0000
Manifest next update: Tue 06 May 2025 22:00:11 +0000
Files and hashes: 1: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: LbVvVum123Sg/Fa2V0SPHMbMLybIS4mCzKisrWGoBwk=)
2: RIRzVPPhcE8vA4XvF5JriP-fYwY.roa (hash: WtatU7VzUfyqgkJxN/FnJMt83P40z2B19888ZIjTAHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:76:b8:7b:b6:d5:0b:6a:72:f2:49:41:41:18:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: May 5 22:00:11 2025 GMT
Not After : May 6 22:00:11 2025 GMT
Subject: CN=8401c692604b31bee543078a17aa6d10b528177d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:67:8d:cd:4a:7c:fa:0a:38:ac:9c:f4:1c:
3c:a5:bd:8a:b3:76:eb:52:da:d0:f0:a8:73:41:3c:
44:8b:bd:21:9c:44:f0:93:55:3a:9c:0e:29:4f:b3:
36:fc:42:f8:0d:ce:42:93:f3:81:79:ee:45:d5:85:
7d:40:b1:60:b6:70:ea:b3:e1:c1:37:85:d7:ce:3a:
6e:7a:1f:0d:2c:e5:2d:5d:83:46:eb:29:f7:2a:e0:
a0:e9:6b:9d:23:fe:8e:1f:f7:b3:e7:11:46:ee:35:
ea:2e:df:91:a7:7a:78:b9:48:2c:a5:5b:ee:a9:ed:
89:7c:f3:e2:8f:65:a6:13:28:b8:18:5e:32:ad:6f:
02:e7:a5:9e:06:97:0f:8c:bd:7f:a0:79:66:1f:67:
d7:72:48:83:58:85:64:27:b4:58:9a:a7:95:12:66:
99:13:90:2b:a5:da:64:74:24:dd:7b:e2:c0:46:29:
29:10:78:84:3d:29:f0:47:67:5b:22:1e:bd:2b:55:
a8:e8:46:e0:73:35:85:cc:eb:a0:88:d6:0d:8d:28:
0c:54:a3:f2:01:82:15:ad:e4:6a:9e:16:d1:0d:39:
ab:f5:d1:15:35:e4:b0:ed:7e:e4:76:2b:3e:d4:0f:
ca:7f:c0:27:40:d1:4f:61:30:46:83:42:8a:ec:db:
0d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:01:C6:92:60:4B:31:BE:E5:43:07:8A:17:AA:6D:10:B5:28:17:7D
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d7:cd:47:e7:e6:d3:ea:63:02:51:73:c1:ed:44:0f:1e:fa:
9a:e5:6d:f9:23:f3:95:ba:6d:f9:af:62:13:30:9d:cc:e7:52:
1c:44:f4:5d:17:bf:a8:f8:4e:ac:7d:a8:ea:cd:e0:f1:66:3e:
4b:92:df:3c:b4:c2:95:cf:14:9f:a1:17:64:09:d1:40:fc:7b:
8c:a1:8d:37:51:c2:be:00:b4:00:48:5f:6d:b4:13:87:f7:88:
ed:ab:3b:c7:ce:9b:c2:fb:60:c1:4e:29:40:b3:fa:86:49:b8:
ca:30:c1:33:1a:2a:98:f5:54:3e:15:90:1a:38:06:0f:59:80:
97:55:9f:49:88:3a:10:04:19:d3:88:ee:82:69:fd:57:be:e0:
5a:0b:11:c8:3f:cb:1a:c2:34:35:fb:d7:6f:b2:f7:ec:0e:ab:
e8:ad:5a:32:02:17:30:b5:15:54:91:d4:7f:53:e6:b6:02:89:
65:fa:d0:4f:a0:cf:8d:2a:9d:71:b9:78:ec:8d:d7:57:bd:ed:
74:ee:42:3a:6c:34:b7:57:e8:b9:2e:42:86:92:4a:21:14:1f:
ef:d8:42:97:91:9f:b1:a5:95:7c:fe:af:4f:dc:97:2b:26:7e:
23:27:9d:72:0e:c5:9e:76:e3:3d:08:62:31:b2:31:2c:f8:22:
5e:e6:b0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:45:39 2025 by rpki-client