Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
File: LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft (raw, json)
Hash identifier: 1ByVYN1ztHb4KZwQ3Xlq7LIsP8ZofBb8c0v2fNBUPwc=
Subject key identifier: E6:C3:B6:1B:8E:B4:CC:F2:D1:69:61:73:58:2F:09:51:CD:13:01:00
Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
Certificate issuer: /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Certificate serial: 0196BA487362D24FA17D8891C318C7DCC413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
Manifest number: 2B
Signing time: Sat 10 May 2025 13:00:32 +0000
Manifest this update: Sat 10 May 2025 13:00:32 +0000
Manifest next update: Sun 11 May 2025 13:00:32 +0000
Files and hashes: 1: 65LOTWbYKO8WgYG9BzJDe2-WQYw.roa (hash: r/wzovoY8RroYrCDVvJnayhwU+roMgwKwl/4ua4F6NI=)
2: BNA4ARff29zCBfR6242MtTb6TGg.roa (hash: tJrTcm7xH3ApI498oc2nbD1Dbkv2EhPah1ZZUS9A5bs=)
3: HLToq3nf5OApFMJ_DLN91h1Fnjo.roa (hash: 1jDZSo5xWA1TudXcCIeUFspwv8s1DeU3J7ObH+JPAu8=)
4: LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl (hash: Oh/p7amjMBezjvVbCKsMHwyKtA/2aoZbYCwfFhO/gFs=)
5: m150QYtpxXBTiSlnK92QRVRD5zo.roa (hash: ebTEJw9nejGCIduesrnIYj5ZZrinqeTVbBAfSnKeowc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:73:62:d2:4f:a1:7d:88:91:c3:18:c7:dc:c4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Validity
Not Before: May 10 13:00:32 2025 GMT
Not After : May 11 13:00:32 2025 GMT
Subject: CN=e6c3b61b8eb4ccf2d1696173582f0951cd130100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:23:1a:61:08:90:0e:16:7e:50:da:3f:4e:
4b:58:66:78:46:63:fc:e3:f1:5a:2a:3d:2e:a0:b7:
fc:fe:ad:7a:fe:f3:68:1d:7d:e7:92:21:12:d3:fe:
6b:11:f0:c1:d5:bc:8f:3b:06:7f:3d:1a:42:73:d9:
da:6f:6c:82:46:ad:85:0a:5b:44:87:a4:46:5b:d8:
d1:b1:18:5f:c3:e9:c3:8d:a5:71:b6:fc:d4:ca:7e:
bd:cf:8c:0c:ac:cd:6b:f3:b0:81:73:3b:dc:5f:ac:
54:62:2b:fd:1b:8a:59:53:2c:44:0c:33:38:5a:e8:
3a:70:80:8a:73:f6:b0:44:7f:92:9f:6d:ba:b6:c9:
18:79:08:d2:2f:26:36:17:12:03:50:47:3e:1d:f1:
d0:f3:7c:41:90:a3:b5:60:49:db:9d:fe:41:ad:ae:
aa:1c:77:9a:b1:c7:5f:d0:d0:88:b2:3a:cf:d0:49:
b4:51:2d:43:84:30:1f:51:8e:d7:23:da:d1:42:e6:
d4:09:5e:d2:3e:3a:f8:e9:26:42:4c:46:a4:7d:69:
5f:bd:5c:e9:47:0a:30:65:94:5a:af:97:80:3e:f5:
e1:f2:ee:7e:0b:36:50:2b:15:26:d5:15:c5:88:eb:
7c:d9:02:da:59:12:c0:8e:4a:19:1a:9f:35:64:b4:
61:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C3:B6:1B:8E:B4:CC:F2:D1:69:61:73:58:2F:09:51:CD:13:01:00
X509v3 Authority Key Identifier:
keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a9:50:11:fe:00:6c:6e:54:49:a8:8b:cc:ef:c0:48:7a:ae:
fa:fe:88:71:96:69:45:6f:f5:ed:35:de:0e:7f:48:00:e8:0d:
8f:38:98:62:a2:5f:49:c1:8a:97:82:82:40:79:f7:fe:35:ac:
16:ed:89:25:75:65:1b:7d:0a:20:9f:22:c8:6a:cb:49:9e:71:
59:3e:67:0e:c2:78:31:81:01:08:bf:9d:33:4d:a3:57:4e:b1:
1e:92:ad:14:ad:18:8c:cf:bd:35:61:fe:fc:0f:c7:31:80:13:
c0:07:89:a5:58:64:e3:e3:63:dc:d2:b2:47:e7:a1:83:ec:95:
4a:c2:a4:d4:88:34:c2:ff:d2:eb:01:2d:a2:7f:88:69:4a:50:
ef:7d:d2:04:d4:24:26:42:b5:fd:69:0c:50:53:e3:73:f5:2a:
3e:06:b0:e2:53:2c:4f:3c:c7:f3:4f:aa:57:11:c2:e5:14:39:
db:c2:51:b7:59:e3:a2:e7:eb:25:c0:3e:f7:0e:88:68:ea:43:
72:2c:5a:f0:31:2d:e2:57:59:d5:fa:e4:15:29:cc:e7:27:ee:
ed:c9:eb:e3:0c:79:a7:82:5b:4a:6f:53:20:4e:49:eb:15:af:
cb:40:04:e9:97:82:e6:06:7a:99:43:2c:23:37:e0:95:7f:1d:
a3:4b:d7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:22:05 2025 by rpki-client