Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: D7XVaxq1jqrNa+NkHV8nq6aI6LxWsD2kbWoIQqkqj40=
Subject key identifier: 52:9E:1B:74:59:F6:6F:5E:15:C8:65:0F:41:D3:37:D7:65:08:F6:35
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 019659151ED9170926F1AE86AFA801D304AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 16:01:18 +0000
Manifest this update: Mon 21 Apr 2025 16:01:18 +0000
Manifest next update: Tue 22 Apr 2025 16:01:18 +0000
Files and hashes: 1: Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa (hash: 4wHVTXOU9z+SM/PpUwslG9Qh7bHf21AbIIUgGIPuA60=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: IcYGGC2RwqtAnbPO96F67dFoEtk7iMnVWTU1wwB7qf8=)
3: sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa (hash: UF7xshn/lezkLw7gZiOHSmc0ml+xgRop+HTs7XfValk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:1e:d9:17:09:26:f1:ae:86:af:a8:01:d3:04:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Apr 21 16:01:18 2025 GMT
Not After : Apr 22 16:01:18 2025 GMT
Subject: CN=529e1b7459f66f5e15c8650f41d337d76508f635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:46:36:bd:48:d6:9a:cb:7b:34:c0:0d:16:83:
9d:fc:7a:44:cb:3e:33:85:1e:c4:e0:c3:10:0a:27:
d7:88:f5:aa:9d:66:bb:04:b9:80:06:97:f7:56:17:
c6:04:8b:c1:dc:b5:02:b3:80:12:d0:1c:b8:08:de:
c5:77:6d:b8:a0:66:ae:7e:74:f0:b6:3a:b4:1b:87:
6c:b8:a4:54:22:a2:1f:76:a0:17:be:6d:4c:5b:1a:
dd:aa:98:61:8a:a7:ed:d6:6f:2f:29:3c:81:84:f2:
a6:4d:84:d0:c5:ec:9b:07:59:22:8d:2a:1c:c8:75:
ae:2d:07:50:9e:fb:f9:e4:48:b8:42:b3:bc:6b:1b:
5d:fd:c6:fa:f4:6d:49:d9:24:01:2e:15:31:dc:d4:
fc:ee:d6:34:b5:8b:fb:60:05:0f:e3:8f:a9:76:42:
f4:98:d0:97:8a:8a:2c:8d:22:66:f2:51:b8:1f:8c:
b7:cf:f7:31:65:fd:cb:2a:54:bc:71:53:31:e4:05:
d3:a0:f0:39:63:45:c5:65:70:66:a6:9a:f6:31:bf:
2d:75:40:3e:cb:67:94:a8:42:73:e1:a8:32:68:42:
2d:b1:79:bb:34:4d:51:ec:c9:89:b0:c6:08:24:b1:
63:bd:19:92:a2:0a:9f:8f:41:27:ba:cf:f3:88:41:
30:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9E:1B:74:59:F6:6F:5E:15:C8:65:0F:41:D3:37:D7:65:08:F6:35
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d7:5b:1a:28:9e:a9:78:dc:be:a2:e4:db:47:e0:d1:9c:b9:
94:e0:05:21:19:bb:35:d0:81:0b:28:b2:31:5c:b9:0b:80:a3:
3d:be:69:98:2f:c4:e6:c7:18:bb:94:a0:29:b5:74:c2:80:5c:
ae:55:a6:96:22:ab:03:2d:5e:6e:2b:e8:8f:65:e8:82:15:c7:
70:d5:4c:5e:eb:d9:08:58:c9:b5:e4:19:4f:37:52:cd:48:0b:
1f:a4:e2:74:a4:c3:f1:a6:d5:32:81:b2:b0:3b:1b:63:fa:e8:
a3:ca:28:8b:95:b8:01:65:5c:65:92:df:ef:a2:a5:56:b9:28:
91:bc:f5:f0:96:fe:66:6e:8f:b6:a1:08:f9:2f:bb:6b:7c:49:
5c:55:04:47:f2:78:20:e4:d7:12:5f:93:9a:78:36:9e:7d:a7:
23:60:76:f2:f0:02:8c:9a:2d:75:ed:65:d7:fc:a5:97:e0:a2:
72:d5:90:08:e3:2a:e4:34:9e:b8:71:db:0d:39:3e:1a:35:33:
62:8e:6c:d9:80:6a:b6:f7:fa:11:d0:75:3c:8c:d5:53:56:d2:
9e:31:af:4e:58:7c:d0:f4:b0:06:26:a9:90:77:a4:07:31:06:
58:78:a3:11:c7:d3:4a:4d:94:9d:c0:f0:24:0e:8e:91:60:07:
cb:41:85:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:32:08 2025 by rpki-client