Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
File: lfdgXoUMnb8X2vC6OONvzGPCy_o.mft (raw, json)
Hash identifier: DrUI4DqiYMZcPv6TRa5vK2rWcAHST62n6cJA8z6NX7I=
Subject key identifier: A3:75:9D:8E:7E:4F:3C:34:A1:93:C9:E9:62:DC:F8:61:58:48:F0:24
Authority key identifier: 95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA
Certificate issuer: /CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa
Certificate serial: 019659EFDE6F7142DE0844A5D1742AFBDD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 20:00:14 +0000
Manifest this update: Mon 21 Apr 2025 20:00:14 +0000
Manifest next update: Tue 22 Apr 2025 20:00:14 +0000
Files and hashes: 1: 5-Dy59i1_U0ZRMyz_6apK6err6E.roa (hash: HTKVf7q+nYn6Qr/j/qsCTy9hUzuLpJ7dJx3pfn4b6GM=)
2: lfdgXoUMnb8X2vC6OONvzGPCy_o.crl (hash: sy9+cWwnkXvm5b1Ys/BUw7/WJotpes15IVh+Gs2V+iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:ef:de:6f:71:42:de:08:44:a5:d1:74:2a:fb:dd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa
Validity
Not Before: Apr 21 20:00:14 2025 GMT
Not After : Apr 22 20:00:14 2025 GMT
Subject: CN=a3759d8e7e4f3c34a193c9e962dcf8615848f024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c3:d0:7f:96:00:43:3c:6c:44:0d:ce:b5:c2:
db:93:c0:4d:e6:63:d8:18:7d:ca:59:ce:ba:4a:37:
12:5b:8d:02:78:62:a3:44:a8:3e:c4:63:53:55:3b:
1f:04:3e:db:b6:6a:4d:e1:24:61:3b:0a:24:3d:ee:
c0:41:a3:41:66:ec:21:c1:a9:99:19:21:1f:71:3d:
1b:21:6e:7b:12:38:d1:79:bd:b0:fc:a2:3b:61:af:
72:f1:0b:a9:46:5b:f3:de:69:24:1b:13:58:58:49:
88:d8:0e:4f:80:9e:ca:90:ae:52:72:db:94:eb:45:
96:6d:f8:ee:f1:79:6a:97:b9:e4:24:85:ad:a5:6d:
50:b9:80:56:a2:f7:8b:ad:49:67:f7:9c:3e:50:7c:
85:87:3c:37:8c:2d:ca:a1:86:08:39:08:53:ac:27:
ee:4a:46:2a:cf:53:36:1f:c9:07:23:26:ee:01:a4:
74:db:78:b4:5f:28:c7:1a:34:9a:55:99:30:b1:c0:
54:6b:28:ff:4b:c2:50:0e:73:5c:45:cd:5d:13:ca:
07:38:2b:58:b5:df:61:b4:5d:82:71:17:d2:7c:39:
37:d5:59:b3:15:79:f7:3a:b7:1e:24:64:c3:f9:9b:
8a:a0:69:d1:7f:25:aa:cf:23:78:8f:9b:46:a8:52:
5a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:75:9D:8E:7E:4F:3C:34:A1:93:C9:E9:62:DC:F8:61:58:48:F0:24
X509v3 Authority Key Identifier:
keyid:95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3f:9d:63:4f:89:1a:af:bd:26:67:6e:c8:5a:d7:01:40:a9:
d3:b2:59:0c:f3:9c:33:ca:4f:30:cc:7c:b8:cf:53:79:a7:3a:
47:f5:c7:6f:22:a2:7b:8a:35:88:3c:a3:07:95:f5:6c:1f:13:
be:6e:f2:25:c0:e8:86:42:2f:ce:4d:af:1b:e6:9d:6f:66:ca:
c6:05:30:ac:42:be:55:20:64:cc:f2:e2:a1:f7:5f:a6:56:00:
89:f2:c0:b1:5d:39:b7:89:cb:7a:9a:fe:f8:f7:95:51:90:41:
81:4f:46:86:ed:1e:8d:cd:8c:8d:5b:0a:ae:e7:c2:d3:4f:11:
f9:94:cc:74:c0:cf:df:9f:e7:81:b7:7b:4d:0b:49:46:57:3f:
54:e3:0a:56:7c:f5:11:06:4e:bf:fc:2d:15:56:61:e0:8d:a0:
85:b1:6c:80:f9:b5:ac:84:95:8f:ba:07:d1:29:8a:a7:93:e9:
09:c9:f8:8f:cb:23:fa:87:64:44:b4:e9:02:05:cf:cf:ea:0e:
8a:ba:84:d2:5c:3f:0b:c4:d4:58:cb:31:76:e6:fe:78:1a:c0:
d9:6f:50:58:03:30:2f:ad:e3:4d:54:c5:c3:2c:ee:0a:9f:68:
d1:c0:c7:1d:c7:a4:19:1e:42:a3:85:81:23:d0:e6:3a:08:64:
f1:bb:61:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:34:06 2025 by rpki-client