Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
File: lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft (raw, json)
Hash identifier: 3PPxPZqpnLBRD5Z2mjLjiaeCbDNr1JLrajBVXZutSDU=
Subject key identifier: 89:5E:58:1F:D3:8D:4B:39:D5:53:D1:7C:01:5B:02:80:E9:CE:E2:97
Authority key identifier: 96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
Certificate issuer: /CN=96edc682a944005117b8febed6dc8bac060f329a
Certificate serial: 01969D5125077DA60F33EC3ED2144D9ED25C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
Manifest number: 0418
Signing time: Sun 04 May 2025 22:01:02 +0000
Manifest this update: Sun 04 May 2025 22:01:02 +0000
Manifest next update: Mon 05 May 2025 22:01:02 +0000
Files and hashes: 1: GuRsW05KP8iWPMSp7vb_kToeinc.roa (hash: xtfuu25jYNsHOYwVnrJ3v+/nadbPfCZESTGZfRgdXIM=)
2: lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl (hash: EkSZinzgZN6kVFPtgi9rfF0+u7uTEMx8MWmZgjgCAPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:51:25:07:7d:a6:0f:33:ec:3e:d2:14:4d:9e:d2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96edc682a944005117b8febed6dc8bac060f329a
Validity
Not Before: May 4 22:01:02 2025 GMT
Not After : May 5 22:01:02 2025 GMT
Subject: CN=895e581fd38d4b39d553d17c015b0280e9cee297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:16:fa:19:a6:97:8c:48:17:52:52:7c:50:
9b:22:89:c8:85:bf:59:12:30:b0:b7:49:eb:21:f2:
80:0a:4a:18:43:5f:0b:6a:eb:5a:b8:29:b1:2f:75:
2e:bf:42:2c:0a:f6:5e:8a:2e:a5:32:16:86:00:8b:
77:69:08:83:3f:9b:d8:f7:ea:a4:a6:52:61:58:3d:
91:44:63:ea:3e:d4:16:b4:2d:46:bb:c4:e8:e7:a8:
9e:1d:59:21:40:25:bb:0b:d0:2d:50:04:3c:57:8c:
36:47:09:7d:0f:d6:f9:bd:7e:f5:34:32:74:cc:d6:
37:2b:fd:29:df:c6:9b:59:fb:27:cd:50:74:08:ad:
b5:23:a9:49:8f:d0:51:63:e3:26:0c:3a:28:0b:c3:
58:c9:c8:a7:eb:20:44:2a:f5:1e:2d:76:55:c7:06:
98:2c:12:c2:38:7f:3c:0d:57:3d:f7:5c:1e:24:8c:
d7:15:04:79:84:b9:f6:8e:f5:86:c4:7b:76:78:4a:
54:e3:d0:72:b1:2a:40:23:c1:42:4b:fe:6f:57:b7:
9c:af:71:bf:7a:15:80:5a:f3:c7:a5:40:ea:9b:fb:
8b:49:2d:2c:41:33:2a:c2:70:84:11:9a:ec:e9:ac:
ad:4b:72:fe:07:d4:eb:ef:bd:4b:ef:5f:e3:70:65:
4f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5E:58:1F:D3:8D:4B:39:D5:53:D1:7C:01:5B:02:80:E9:CE:E2:97
X509v3 Authority Key Identifier:
keyid:96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:83:af:69:42:5b:9d:9c:99:79:d0:d6:dd:7c:65:72:4b:dd:
03:b3:1d:3a:1a:28:1d:c7:09:fb:9b:a3:d3:62:a3:71:ce:83:
a2:d2:4a:bd:f0:f5:0e:5d:12:8f:8d:6b:4b:ce:99:af:ff:03:
08:c9:cd:92:a5:d4:e8:df:7a:06:2a:27:63:93:ed:3d:b6:6c:
4b:5c:a4:6b:80:4d:c2:47:79:f4:e6:20:03:eb:4e:59:b2:11:
5f:26:7b:20:ba:fc:fe:78:9e:60:a4:69:86:73:11:47:39:6f:
db:95:37:c8:a9:f8:36:b3:9d:88:de:26:cb:09:5c:6f:88:8c:
ac:02:14:54:36:b4:d2:1e:b5:0f:b9:7d:13:2a:15:dc:39:eb:
db:48:99:bd:7c:9c:3c:53:dd:b7:70:f0:65:63:b5:fe:8f:41:
e3:b3:04:d9:b5:f9:99:e7:0c:c4:3c:1d:a3:aa:d7:53:0f:9a:
bf:83:34:91:be:9f:21:e7:db:c2:b4:45:a3:a4:0a:c5:ae:27:
05:d6:5d:e9:c0:c9:ce:4d:d2:09:61:4e:c8:b9:37:ca:0c:44:
15:e1:9f:f3:af:26:22:7e:15:82:f1:55:2d:67:6a:1d:df:65:
2c:13:0d:47:0a:5c:b1:e1:19:e1:b9:6f:31:9f:b2:08:31:83:
3b:6e:d2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:16:00 2025 by rpki-client