Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
File: LrqqxROYKzwk02DG1GXPgkIFaok.mft (raw, json)
Hash identifier: wNtsl6lV1l88dX9A8G/30E0qNRG3cPFTs/q+oJINrbI=
Subject key identifier: 6C:01:3B:A8:AE:66:79:3A:17:68:86:2C:C1:89:55:A8:28:59:6F:51
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Certificate issuer: /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial: 0196BFA5CA336E352583DC95007F5BB21CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 14:00:35 +0000
Manifest this update: Sun 11 May 2025 14:00:35 +0000
Manifest next update: Mon 12 May 2025 14:00:35 +0000
Files and hashes: 1: GY1X78tUCHALN-6VezXTntkS1S0.roa (hash: B4/LrjmuUdItXDnKDdePMAJjiq+F77UrPT1SZV8fodQ=)
2: LrqqxROYKzwk02DG1GXPgkIFaok.crl (hash: 5CBoXEk9v28oFUcVcVqoD8Qd50fOZEkQYMz3MefEPSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:ca:33:6e:35:25:83:dc:95:00:7f:5b:b2:1c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Validity
Not Before: May 11 14:00:35 2025 GMT
Not After : May 12 14:00:35 2025 GMT
Subject: CN=6c013ba8ae66793a1768862cc18955a828596f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8a:dd:67:28:d6:ca:4e:56:d2:3c:23:f7:06:
96:f2:c6:47:b0:11:a0:ca:e3:8a:74:71:30:33:27:
f6:da:76:57:f9:f1:65:9b:12:ee:37:f9:01:a8:c2:
7b:83:06:4d:54:72:dd:54:76:94:30:5c:3b:61:76:
7e:dd:9c:9f:b0:32:7f:b1:a0:26:f8:8e:c6:ac:ff:
8d:94:22:1c:de:21:bd:23:f0:e1:f4:15:15:92:81:
31:67:b4:b9:3d:cc:98:b4:ea:09:94:bc:4c:6d:d3:
c6:e8:0e:c8:56:5f:12:51:89:fa:4e:97:de:4c:7c:
c3:a1:5a:f7:fd:aa:7f:7d:4c:68:d0:54:4a:4d:01:
de:4b:49:b1:cd:6b:6f:6b:12:ce:13:9a:33:31:0d:
87:99:19:de:a1:4e:43:6b:a5:53:7b:7d:50:6e:fc:
05:a7:32:cf:5a:3a:9f:24:22:bc:4e:a7:98:f6:9a:
9f:42:1e:b7:e9:cb:27:b3:8b:93:1d:88:d2:3d:4f:
c8:de:d5:1e:7f:4f:58:c9:28:22:28:9e:c9:fc:65:
ec:ca:e2:14:da:1a:01:3c:47:2f:39:3f:7d:b3:3b:
0b:56:db:74:2f:99:56:9d:6d:ba:45:55:4c:c9:95:
9d:3c:c9:f4:e5:59:e9:e2:ad:e9:35:48:a9:44:b2:
0d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:01:3B:A8:AE:66:79:3A:17:68:86:2C:C1:89:55:A8:28:59:6F:51
X509v3 Authority Key Identifier:
keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:05:fa:79:86:01:dc:37:ce:41:05:2d:7b:f5:bc:12:ad:3d:
a0:54:0e:fa:15:c3:80:fb:c6:a2:d4:00:58:5f:7d:c1:4e:c0:
6a:e4:95:7d:17:86:73:a0:fe:f4:cf:db:75:9f:2b:77:7a:a4:
04:49:c2:f9:3f:7a:45:f8:67:23:17:b9:c0:1d:44:e8:33:fe:
d5:3e:37:6d:61:29:94:74:a8:25:ad:32:91:b0:b2:89:40:d6:
6a:48:ae:8d:85:b6:d9:2e:ca:19:24:54:7e:1a:75:6f:f7:04:
17:7a:17:10:5e:ef:1d:7a:92:6e:45:5a:40:82:1c:0c:d4:e9:
3e:1a:83:6d:17:78:b7:e3:9b:4b:11:8e:ec:d2:6d:84:38:49:
85:4b:b0:57:fc:f4:51:22:11:68:d7:4e:b7:1c:fb:b6:fc:21:
26:a0:81:49:4e:83:54:24:58:f1:2c:ee:0e:be:b7:82:92:94:
06:32:49:3b:a1:70:2d:76:90:fc:0c:a6:5d:70:48:47:61:85:
bb:45:41:91:1a:eb:82:4c:eb:17:f1:d4:d1:0d:1a:19:e6:83:
97:6f:a2:73:52:58:d2:07:0a:c5:ca:5e:38:fc:13:1d:a6:28:
d2:8e:7b:cf:da:61:67:5f:b3:06:54:d7:71:e4:7d:1e:6e:5d:
78:8a:3f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:14:52 2025 by rpki-client