Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
File: LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft (raw, json)
Hash identifier: UsUkfNynt3hBTWTJNp0fT30dTbtpIAZEmRnUWhPZCT0=
Subject key identifier: 10:0F:77:35:07:AB:3A:25:7D:FA:55:A1:60:6F:55:F2:66:91:04:68
Authority key identifier: 2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
Certificate issuer: /CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Certificate serial: 01969F084520ED103730E819884FA434681D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 06:00:41 +0000
Manifest this update: Mon 05 May 2025 06:00:41 +0000
Manifest next update: Tue 06 May 2025 06:00:41 +0000
Files and hashes: 1: J1sR_X7OX5sAAqL6nR2mRajFZCc.roa (hash: JEROqpt8+G0T5t0g0HCpE0svxugQA9UuID00O94SMT0=)
2: LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl (hash: BTZheNIzaVyGwUbO3jD0/jhEeXHUvyJY7mo1NEi0YOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:45:20:ed:10:37:30:e8:19:88:4f:a4:34:68:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Validity
Not Before: May 5 06:00:41 2025 GMT
Not After : May 6 06:00:41 2025 GMT
Subject: CN=100f773507ab3a257dfa55a1606f55f266910468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:bc:f1:66:27:60:1c:32:ff:f3:e0:06:9a:
cb:72:0d:44:c0:75:3e:e1:fd:ba:11:40:c0:69:5f:
88:0a:2c:cf:67:74:f1:34:b0:d2:5d:29:82:f0:a8:
ea:38:bb:43:5a:7d:f8:04:24:c9:d7:12:40:5a:03:
df:f0:76:24:87:17:01:0e:0e:0d:a4:7a:83:60:fe:
e7:23:93:dd:64:8b:57:53:da:55:c1:3b:6e:79:c3:
77:88:e6:56:45:bf:e2:78:00:db:61:6a:92:38:ef:
aa:98:08:27:b7:df:6b:47:9c:a0:b1:70:71:d9:bd:
5c:90:e3:e0:36:9f:58:1a:42:93:8d:3f:5e:66:eb:
35:46:24:71:26:ff:6f:c3:f0:4b:f8:b1:98:31:ca:
eb:74:30:e8:c4:4d:6d:18:38:45:83:95:a7:ba:70:
8a:a9:a9:4e:af:91:2d:9e:9b:2a:f0:b6:dd:00:d8:
07:32:2e:ce:82:e9:51:e2:ae:21:a2:ac:2b:3a:30:
b3:ff:bb:48:a0:4c:f3:45:bb:f8:de:b7:b8:f3:c0:
ec:ab:3f:cd:8e:ec:4c:ce:a2:ce:fd:86:f7:91:84:
aa:52:63:27:15:26:52:5f:65:56:1e:61:e6:49:ff:
0f:02:89:20:00:b7:80:c9:6d:08:0c:f8:a4:7e:ab:
6f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0F:77:35:07:AB:3A:25:7D:FA:55:A1:60:6F:55:F2:66:91:04:68
X509v3 Authority Key Identifier:
keyid:2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:75:51:85:4e:10:97:66:e9:09:e4:45:f8:fb:1f:a7:36:3a:
cf:69:d6:76:85:00:a2:7f:6f:c3:68:0b:c3:bc:11:ed:3d:74:
f2:6a:b3:58:dc:42:d2:cf:62:af:dc:96:55:0b:4a:69:7e:d4:
9d:48:7a:d5:ee:a0:73:70:47:c3:19:c3:a9:0d:03:74:8c:95:
11:c9:eb:cf:24:93:3d:d1:51:09:b3:5e:d9:d5:33:47:20:91:
93:43:ed:b6:c9:02:fb:4f:a3:8a:6f:b1:68:60:d7:7e:87:8c:
cd:07:70:ca:ea:3e:8b:71:10:b3:df:01:ae:0c:39:16:af:eb:
00:d4:93:6c:4b:98:76:ea:4d:b0:5b:e9:1f:03:19:af:a5:2e:
f8:95:fb:52:c0:b3:ab:e3:8d:1f:48:8c:eb:0d:aa:5d:33:37:
81:22:7e:50:2f:b9:6f:10:dc:c7:10:92:0e:28:03:be:7d:2c:
37:4c:3d:59:df:7f:96:1f:de:27:ca:a4:b1:e0:88:72:c3:6d:
3f:29:40:5f:0e:8e:7d:44:c4:f5:46:40:9f:d2:ee:24:94:c8:
d2:15:2b:1b:9f:19:c8:8f:30:5a:f5:fc:78:b4:c5:2b:a9:84:
38:b2:9b:27:fa:59:89:70:7a:bf:99:f8:4b:ff:1b:a1:5a:8c:
95:0a:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:20:55 2025 by rpki-client