Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
File: LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft (raw, json)
Hash identifier: RlLd5yk7pUyv3sE6GRZJOqFL5a6zc0o0dHStnkQHyso=
Subject key identifier: 0F:D6:31:DA:07:69:95:F3:4F:7A:2A:41:EE:19:11:60:92:4F:79:B2
Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275
Certificate serial: 0196A24008C350263A61D0810DFCB253EF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
Manifest number: 148C
Signing time: Mon 05 May 2025 21:00:27 +0000
Manifest this update: Mon 05 May 2025 21:00:27 +0000
Manifest next update: Tue 06 May 2025 21:00:27 +0000
Files and hashes: 1: LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl (hash: DbxFef+ex1QBneU019TvMBrlZyiMZGBjLQxECQGdOjo=)
2: aMqTYIPJtRefR0bitojO91iFNhw.roa (hash: OsvcsotFS3YcVfF2tEICtxMnztWh2PTqW1dy/KMi8wk=)
3: i_35ud5OERiEDAx-BasHnsgHc48.roa (hash: mSZd0LC2OMh83YslBHZYulpSTQBAbQlb9kFIbiISICE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:40:08:c3:50:26:3a:61:d0:81:0d:fc:b2:53:ef:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275
Validity
Not Before: May 5 21:00:27 2025 GMT
Not After : May 6 21:00:27 2025 GMT
Subject: CN=0fd631da076995f34f7a2a41ee191160924f79b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d6:ad:27:7f:91:84:46:9d:ae:b0:32:67:34:
2c:3f:37:e3:e0:a7:e7:6a:1b:42:b0:82:27:13:89:
d7:59:3b:6f:aa:a9:73:f3:3b:f7:21:28:3e:b9:c4:
5c:a2:8c:e4:79:e1:2c:2b:ed:b0:fe:b0:a7:82:4f:
1b:fa:97:eb:1d:b8:69:ba:ad:6e:76:bb:55:63:4f:
fa:e6:2d:ec:a8:ea:76:f0:fd:d0:90:87:06:9a:f5:
41:f4:93:3e:49:d7:70:be:2e:b7:c7:c2:2e:ec:ee:
30:44:93:ba:3c:21:f5:83:1a:b4:39:4b:cc:9c:73:
aa:a2:21:b3:c3:8d:35:b5:72:fe:4e:7c:fc:fa:c7:
4c:71:90:80:29:11:e2:8b:d1:70:59:ed:5c:fa:c0:
ca:2a:66:d6:18:3f:a5:4c:12:95:4e:65:b6:e8:ce:
14:e4:32:c6:95:5e:7e:2e:9a:ad:b0:9e:23:8d:54:
ef:8a:be:4e:8f:e0:6a:1b:23:5f:b3:07:31:4f:cd:
be:0f:da:38:10:c7:b3:6a:34:99:7c:48:70:a4:f5:
b8:47:0e:ce:9a:2c:c8:46:55:1c:ea:72:7e:4a:41:
8c:f7:5c:02:39:60:b2:4a:1e:f6:8e:5e:71:59:1d:
8b:c5:8c:17:f1:5e:5f:48:9b:56:d9:60:f5:16:9c:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D6:31:DA:07:69:95:F3:4F:7A:2A:41:EE:19:11:60:92:4F:79:B2
X509v3 Authority Key Identifier:
keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:01:cd:11:0c:e8:c4:4d:3e:b8:08:29:fb:d7:60:37:de:0d:
3e:dc:4f:77:ef:65:3d:be:81:07:69:a5:6d:49:bb:12:23:bd:
fa:fa:bd:a0:a3:02:38:0e:9c:ec:62:95:62:c9:a7:c3:c6:67:
37:6f:b5:74:2f:db:b7:1f:5c:61:6a:33:56:3d:b0:50:3c:b6:
e9:13:fb:e1:30:09:10:fb:aa:c9:a0:e2:36:81:d4:3d:4b:af:
e7:b3:0a:70:79:72:92:45:85:21:df:9f:b0:04:b5:7b:9f:a4:
e1:1f:60:d3:41:25:fa:2d:cc:e7:67:58:5e:5f:ff:a6:52:71:
ec:6b:d0:9e:42:5d:ab:05:76:de:14:cb:b4:f4:f0:15:1f:3d:
2c:f3:f7:ae:15:77:35:34:f6:35:74:7c:9c:78:a2:9e:57:cf:
4f:4b:31:35:28:26:6c:d4:70:cd:20:f0:64:7f:9d:fe:49:ee:
79:bf:f6:07:81:e8:09:60:23:dc:a1:34:e9:37:2f:ba:d8:05:
01:d9:cc:06:8d:f7:e4:d7:b2:10:88:ca:a1:ad:13:73:1d:c7:
0b:5c:e2:3a:9b:e0:6b:13:6e:25:c1:bc:87:8d:08:eb:c0:31:
e6:fc:26:bd:e2:28:7e:f5:d6:66:00:91:fc:70:2a:57:9f:e9:
df:72:fd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:14:53 2025 by rpki-client