Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: of/pCvVW0LtfsQ1yM1CTbdX0IL9VDf+F4D/IbYW31Z8=
Subject key identifier: 31:71:09:31:ED:B2:D8:30:70:5B:2F:71:08:13:CD:26:9F:5B:9C:DC
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 01965CBA7EDC2581F022196AF94CFB188532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 150A
Signing time: Tue 22 Apr 2025 09:00:48 +0000
Manifest this update: Tue 22 Apr 2025 09:00:48 +0000
Manifest next update: Wed 23 Apr 2025 09:00:48 +0000
Files and hashes: 1: 9cXZNBVPbFK7YgwhAS48hqVN3Q8.roa (hash: P8nablk4XjPWocUs0+w/NDTZnQaNhHciAel+enfRgUQ=)
2: GJ7X3NXNPspZEiv4IaMeRbRsKjQ.roa (hash: +RNCIDZL3jBzsc6WtooEau4eUrswSESksvuz73mPQ2Q=)
3: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: 78qznOouk2NmmH+CLubNzY/zFgSvy/5d7/x0HRygasM=)
4: g2LuFjEhsXOpJYmb2qeJVNKQyUw.roa (hash: gXxbZRZ22rqSRTpziJlqNBg77T4+7Pe2wPiUn7l87EQ=)
5: kEq9Sa-aYq3KR4A40M5VyPd54wg.roa (hash: UxvV1YF4/u8pr981HOY28yhkvm5jpeElKKL/ei/Iusw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:7e:dc:25:81:f0:22:19:6a:f9:4c:fb:18:85:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Apr 22 09:00:48 2025 GMT
Not After : Apr 23 09:00:48 2025 GMT
Subject: CN=31710931edb2d830705b2f710813cd269f5b9cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:94:9f:8a:db:1b:69:a2:ed:91:73:d9:c4:
37:e1:ad:4d:24:41:36:76:d9:6a:13:e5:c8:96:b9:
c9:39:8f:3c:38:60:d4:ec:5d:a3:66:55:e4:44:77:
ab:4a:09:54:4a:21:38:ce:4c:a6:f9:85:ee:e4:85:
97:b1:01:73:bc:bd:0e:01:d9:55:d5:1b:1f:28:a3:
ff:36:2a:60:ab:01:ea:7e:9e:74:b5:12:1f:55:23:
06:22:9a:48:df:b5:ca:42:ca:83:9c:bf:a2:79:61:
b2:13:9f:5f:d5:6b:66:0a:d8:59:1a:7d:45:52:ab:
1d:8d:f6:cc:31:b8:e3:a6:6c:5c:22:49:1c:93:9d:
83:53:3d:c6:92:47:eb:1f:c3:36:d2:a5:48:e0:ea:
ad:10:86:69:1c:b4:36:05:ae:d3:21:75:06:59:09:
52:5d:3a:43:07:af:de:8e:db:bf:77:72:51:35:af:
1e:61:17:5d:1a:ac:4b:22:d9:62:e2:67:ed:83:75:
54:44:3c:fd:26:6e:57:6d:a5:74:16:16:3c:72:e4:
45:36:b5:7c:d8:1d:d1:e2:a8:04:5e:c7:9d:40:5d:
02:b5:6f:d6:27:cf:9c:70:eb:f8:cb:8f:11:96:69:
2b:35:b5:11:8f:9f:61:f3:f1:d9:e4:30:c6:4c:98:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:71:09:31:ED:B2:D8:30:70:5B:2F:71:08:13:CD:26:9F:5B:9C:DC
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:39:a5:50:b8:7d:4b:54:e1:f4:0f:30:fb:68:35:2b:59:e9:
8b:e0:55:8a:a1:80:20:cc:5b:5a:a9:5a:07:37:08:8c:d1:4e:
92:b9:c6:cf:e7:f0:44:9a:43:92:ac:e4:ce:24:60:32:46:7f:
12:48:53:14:ca:18:b6:9d:2c:49:01:e5:e0:a7:ae:f0:f6:40:
e0:89:2d:96:2e:fa:7d:1e:3a:1f:b5:49:50:9d:ba:ee:6d:b6:
d3:e2:50:61:66:e0:da:69:e1:cd:53:11:21:d7:97:49:bd:a4:
7c:56:ea:a6:6f:4f:e8:ae:cd:fd:dd:39:07:69:1a:0a:e6:70:
b1:74:17:71:a5:28:4f:63:2c:67:f5:84:0e:ec:ff:f5:79:ab:
f0:ca:e5:d3:8e:26:31:10:e3:c0:6d:aa:de:de:fa:75:92:f5:
6e:79:ba:df:f3:17:0f:c5:78:92:32:34:3e:4f:b8:28:16:80:
db:2d:3c:74:69:f2:58:9c:2b:bb:a5:14:6a:50:d7:2f:b8:bb:
c6:71:e4:02:66:80:86:d5:8c:13:9d:c1:53:6c:c6:5f:90:e2:
67:71:59:82:c9:cd:61:71:9a:a0:9f:56:17:81:0c:31:f6:46:
3a:4b:a2:0a:1d:ff:33:56:bb:00:37:e3:22:a9:73:13:9e:07:
8c:be:a1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:06:12 2025 by rpki-client