Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
File: LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json)
Hash identifier: MQOwHD3sGaybE2W/lNBgZcg57U7y1GQWhokvV/udPkE=
Subject key identifier: CF:83:B5:CB:99:21:32:35:3B:9A:40:91:FD:0F:63:8F:12:BD:73:4D
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial: 01969F3F240ED11F36BADC0A4CA9288630A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
Manifest number: 14BA
Signing time: Mon 05 May 2025 07:00:37 +0000
Manifest this update: Mon 05 May 2025 07:00:37 +0000
Manifest next update: Tue 06 May 2025 07:00:37 +0000
Files and hashes: 1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: vI47BKT6IC1ubcZfau6C4EwGWYxnYitGEJGGbj05tEg=)
2: jS_G6el4wEcgi8my5R0XT21ut5Q.roa (hash: Q5lJn0D9zs18LOmkVI8eROdi6ECwhGDbp8byuxpzAUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:24:0e:d1:1f:36:ba:dc:0a:4c:a9:28:86:30:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Validity
Not Before: May 5 07:00:37 2025 GMT
Not After : May 6 07:00:37 2025 GMT
Subject: CN=cf83b5cb992132353b9a4091fd0f638f12bd734d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:e3:1f:14:5b:29:22:85:7c:e2:32:37:ae:
59:20:db:47:0a:aa:75:fb:a7:fe:32:da:59:cd:1a:
42:7e:0f:c7:f7:17:a2:9d:c4:ad:6f:78:9a:65:5c:
41:c7:b1:ce:2b:e1:c0:22:ad:22:eb:54:be:81:2f:
52:ca:ad:f7:b6:60:d4:74:6a:9e:c0:7c:08:f8:9d:
78:bc:12:d7:6a:e9:dd:6f:50:f3:00:fa:7b:9d:9f:
f5:61:40:2b:53:37:00:ef:de:92:89:b6:2c:68:34:
52:45:5d:c7:b5:d3:bb:85:a2:11:eb:da:19:f8:47:
86:74:22:75:47:e7:71:e7:2b:19:4c:c4:a7:37:48:
07:ee:e0:23:79:e5:90:3a:d1:96:a1:99:f4:80:38:
f0:c2:3d:dc:f3:ed:f5:b5:35:8a:0a:d0:d6:fc:e6:
2f:3b:10:97:15:df:36:06:e5:b5:7f:b8:9d:d7:72:
21:f1:5b:e2:f7:55:c5:51:8a:9a:6a:f7:dc:3f:c2:
18:81:31:7f:18:6d:ab:0a:2a:5e:a8:71:a2:af:6e:
2e:0a:3f:ed:3f:d5:be:46:60:66:03:a6:df:b7:36:
61:46:90:89:05:ec:59:aa:ef:ea:63:d3:57:6e:3e:
8f:45:95:70:c4:fa:70:74:c9:36:09:d5:50:98:ab:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:83:B5:CB:99:21:32:35:3B:9A:40:91:FD:0F:63:8F:12:BD:73:4D
X509v3 Authority Key Identifier:
keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:d4:92:a0:b5:2e:00:31:b2:be:e4:e4:33:1f:63:7a:2c:fb:
d1:36:ca:c9:82:05:e1:68:5a:f0:5a:22:e0:45:8b:9b:0b:94:
b0:b3:01:30:29:cc:7b:84:1c:5e:a1:8b:fe:ae:77:b2:72:3e:
5f:da:b2:70:0a:8a:a7:58:94:11:f9:a0:0c:bf:39:24:48:b0:
d6:85:2e:7a:37:25:69:83:fe:a5:ab:d7:70:c2:d0:9a:7a:7a:
07:1b:70:9a:29:f1:21:ef:68:b9:33:2a:84:ab:d4:8b:7e:c2:
e5:55:b3:9c:bb:3e:7f:e2:f2:6e:c7:d3:21:f9:5e:b4:28:6f:
ea:e2:09:23:5f:4b:3d:cc:f2:43:b8:f6:7e:71:e9:78:82:b7:
9e:d6:bb:47:bb:a2:83:ba:6f:6f:3b:69:ac:d3:3c:08:16:bc:
76:d6:86:44:1a:32:1a:0f:1d:90:cf:d3:d5:3e:37:73:1e:a2:
97:cd:55:a8:13:b3:11:e8:48:b4:bf:1f:92:c5:f9:f9:3d:4b:
e5:18:27:5a:57:e7:1d:08:69:06:67:72:b8:d0:9c:5c:30:82:
73:69:40:49:4f:74:b3:38:0c:ae:96:00:b7:f6:b2:c0:e7:42:
02:15:01:95:05:37:cb:0b:46:96:e7:74:98:44:ac:3a:e9:ff:
31:c3:01:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:04:27 2025 by rpki-client