Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
File: LgojFvTptYqlLe7lx9H0uER27IY.mft (raw, json)
Hash identifier: CRrVdSedPSFYl02vpTI7vCFM9sA0vxC27CtCGBEjuDA=
Subject key identifier: 53:97:E2:EB:F3:57:78:B2:22:F5:DA:EF:59:CF:86:7C:B7:85:D9:19
Authority key identifier: 2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
Certificate issuer: /CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Certificate serial: 01965726CCBD252D3FC658C1A1B39BD36297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
Manifest number: 03E0
Signing time: Mon 21 Apr 2025 07:01:22 +0000
Manifest this update: Mon 21 Apr 2025 07:01:22 +0000
Manifest next update: Tue 22 Apr 2025 07:01:22 +0000
Files and hashes: 1: LgojFvTptYqlLe7lx9H0uER27IY.crl (hash: GdaPTdMeWpRp+MAPd0NGzhQwtfsuckY+wh8sgYtawXE=)
2: vD_wlkgUOjWQBEijGo7zeI_oZVI.roa (hash: IGyJ6LlIsYwYqLNNokHWFdPflPgBGjUNsyBItLlUI9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:cc:bd:25:2d:3f:c6:58:c1:a1:b3:9b:d3:62:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a2316f4e9b58aa52deee5c7d1f4b84476ec86
Validity
Not Before: Apr 21 07:01:22 2025 GMT
Not After : Apr 22 07:01:22 2025 GMT
Subject: CN=5397e2ebf35778b222f5daef59cf867cb785d919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:0f:89:59:a9:fa:af:49:7c:87:8a:1f:02:
9a:b8:2d:9a:93:28:d7:1c:79:7c:c3:71:3c:9d:04:
03:be:60:da:8c:bb:34:5a:cc:02:41:90:6e:77:7c:
c3:08:64:39:4e:31:89:f2:b7:35:d1:f8:a8:9b:02:
05:6c:8c:5a:34:bf:68:ef:7f:54:69:68:f4:8c:f5:
d1:d1:2d:04:ab:04:7d:bd:bd:bb:89:b7:09:5c:9d:
f1:dc:c1:90:5b:2c:5b:d2:e4:d1:8a:54:e8:ab:0b:
b9:e3:2f:9e:69:a7:3c:14:f9:27:d2:d2:6f:42:4d:
d9:4c:a6:37:0d:a2:e7:31:57:e5:0d:85:8b:f7:0d:
3a:bb:8a:b9:96:14:21:f8:1b:27:46:9d:a9:7f:e2:
95:9f:48:37:76:e5:5e:d5:09:80:7d:61:4c:7f:4a:
86:65:17:05:18:ab:31:7e:64:07:dd:bf:8b:60:bb:
bb:37:fa:d5:18:8e:bf:b3:64:91:91:be:9d:b0:b1:
92:88:99:bd:c3:a4:3c:ec:01:82:88:18:51:2f:ca:
ab:18:dd:be:e2:de:df:53:76:2a:7f:d2:2c:65:eb:
76:b3:51:d2:a6:62:79:b8:df:61:a7:56:55:d7:65:
12:24:71:71:99:fe:64:92:be:ff:f0:f9:ee:dd:87:
84:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:97:E2:EB:F3:57:78:B2:22:F5:DA:EF:59:CF:86:7C:B7:85:D9:19
X509v3 Authority Key Identifier:
keyid:2E:0A:23:16:F4:E9:B5:8A:A5:2D:EE:E5:C7:D1:F4:B8:44:76:EC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgojFvTptYqlLe7lx9H0uER27IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c45811-75ba-4dd7-a421-f36d9ee346d4/1/LgojFvTptYqlLe7lx9H0uER27IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:01:e2:95:92:ae:f1:89:ad:e7:d7:96:5b:a4:c6:50:e3:12:
66:a0:8a:78:3f:4c:b5:11:46:b9:a2:0f:4f:00:b9:18:8b:ab:
69:b5:4d:85:40:60:09:36:c5:16:89:e7:69:bc:a4:36:35:06:
c3:7c:23:3a:2b:97:1d:9e:7d:fd:bb:bb:05:34:64:9b:d3:b9:
25:1c:44:3b:bd:e4:82:0c:1d:70:43:99:83:b7:ad:4f:b0:ad:
cd:5a:ce:90:65:4e:92:33:61:30:d6:7d:90:71:b9:55:e2:db:
57:7c:cb:5f:79:b0:74:b5:bb:77:f9:25:89:f9:ae:18:a9:b2:
ab:d7:a2:84:8c:cf:96:23:e2:65:b6:23:cb:09:a3:ea:02:83:
10:59:2e:42:7a:21:f6:b3:69:38:18:f3:37:84:9a:10:12:ee:
f7:f1:13:97:0c:02:fd:96:af:85:dc:3a:b9:5c:13:f2:9c:7a:
87:6f:d8:3b:40:d6:73:b5:1f:ba:26:b2:d8:a8:15:d6:f7:17:
19:da:ba:13:fe:03:33:e6:12:6c:4f:f9:34:7d:0b:20:9a:2d:
3d:d3:2c:39:7b:68:3a:b1:3a:87:8c:f0:35:7c:0c:1e:1e:36:
ee:6e:55:f7:dc:0a:4d:e4:77:7c:e6:95:a7:b5:d2:78:9a:a9:
57:f6:e7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:35 2025 by rpki-client