Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: c/St/K40JAub+FYJXPZpWNMUNmnbktriACQstU0zJHo=
Subject key identifier: 7C:B3:57:91:82:90:7E:76:9D:56:51:7D:BC:CE:D2:20:93:37:A4:ED
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 01964D7E109588966851AA73B866440DCD25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 0A71
Signing time: Sat 19 Apr 2025 10:00:29 +0000
Manifest this update: Sat 19 Apr 2025 10:00:29 +0000
Manifest next update: Sun 20 Apr 2025 10:00:29 +0000
Files and hashes: 1: EYwLNQ0R_Ied-v-mXvUH_vf6GVA.roa (hash: TajJUilMmDGZNmoTd4v8tDuWl6eHYmByCynqf999DBU=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: ZDw3cP1jdkmJTu3IFaIqleNklTY3xLYZIhwvi/0L9nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:10:95:88:96:68:51:aa:73:b8:66:44:0d:cd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Apr 19 10:00:29 2025 GMT
Not After : Apr 20 10:00:29 2025 GMT
Subject: CN=7cb3579182907e769d56517dbcced2209337a4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a7:fc:6e:5c:23:77:59:62:ee:1b:59:c9:25:
ed:bf:2f:1a:b1:e8:91:69:f3:68:90:3d:af:2c:5a:
34:f0:ab:59:c1:08:9d:f8:5b:da:6c:33:17:fa:28:
60:97:bf:10:88:79:a9:2c:96:cc:51:ac:a4:93:69:
a3:87:54:26:74:3c:9e:61:da:8b:01:75:ac:09:74:
51:21:c0:a9:4c:7e:22:a8:db:18:69:de:f8:1b:b0:
23:25:5d:be:76:32:4c:7f:a0:91:a3:5c:15:20:56:
90:56:02:ff:bf:0a:2c:65:59:3b:2b:cc:3e:67:8b:
ca:40:a0:29:d8:4d:15:25:d5:59:c1:cf:e1:46:5b:
04:06:ea:37:71:32:dd:ae:24:56:da:36:94:01:82:
1c:39:eb:70:da:71:90:ee:68:08:d4:f4:7d:b8:ff:
f8:f7:92:3d:38:34:fd:64:56:c0:19:2d:b5:46:b4:
06:b9:e6:d7:dc:df:6b:0c:ec:e0:c4:2c:94:77:97:
22:33:e5:22:2e:43:a5:ef:ad:7d:5a:5c:75:57:83:
54:f0:51:76:33:4f:04:b8:14:1d:5e:8a:4c:e6:3f:
6d:e7:f7:ca:39:7c:dc:f6:6f:81:57:f7:ce:13:2c:
db:01:ab:de:37:b0:c7:55:59:c0:b9:25:b5:b3:2a:
54:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B3:57:91:82:90:7E:76:9D:56:51:7D:BC:CE:D2:20:93:37:A4:ED
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:bc:f1:38:1a:ef:f0:ed:74:72:62:fb:f9:5a:d8:ed:a1:60:
18:00:55:6e:9f:b4:86:de:d7:87:c4:be:d4:cc:99:cb:99:75:
5a:93:9a:5d:e6:0d:eb:6b:93:78:6a:57:c7:c9:d6:d6:4a:8f:
e3:dd:7a:81:a5:ec:e8:27:cf:2c:8f:0e:15:4e:11:e0:ba:c3:
43:69:e3:d6:a5:c4:35:e1:47:16:98:06:89:f5:c9:47:a0:2c:
85:4a:30:d9:4a:b4:0d:4f:35:f4:b8:5e:e0:3e:dc:03:ad:31:
91:1e:75:e2:ff:9c:1c:cf:e9:4a:0d:bc:90:f8:73:67:0a:da:
11:0e:84:8b:7b:70:07:ca:cb:6d:98:44:e1:8a:d5:7d:83:ac:
ac:90:7f:91:ee:89:c8:f6:07:fb:e2:fd:43:25:61:dc:b5:53:
4b:8f:88:62:8d:1a:6c:a3:16:94:58:10:bd:dc:e6:8e:4c:5c:
92:65:e9:40:bf:9e:6c:19:a7:9f:9c:bc:29:9b:36:a0:fd:8f:
c5:a4:3b:d9:dd:b8:6e:09:ac:e2:0a:13:cf:b7:0d:55:a8:ff:
9d:a8:83:8d:ea:14:65:46:64:4d:1b:c3:bd:38:53:ab:83:5f:
72:9c:dc:7b:0b:47:a5:5e:75:93:e1:99:e6:67:c0:e1:27:3a:
b7:9f:dc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:24:26 2025 by rpki-client