Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
File: lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json)
Hash identifier: htUvOceS2VhBV/uq+9Y3riDpU6h12jm/plOt6D3/ieo=
Subject key identifier: 32:53:0B:7A:45:3D:3B:B5:2A:0A:E4:49:C7:33:54:BE:FA:42:FA:B6
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial: 01964DB52D1BB10A8BDBAFB5645CA66A5F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
Manifest number: 1093
Signing time: Sat 19 Apr 2025 11:00:41 +0000
Manifest this update: Sat 19 Apr 2025 11:00:41 +0000
Manifest next update: Sun 20 Apr 2025 11:00:41 +0000
Files and hashes: 1: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: 5Zze2hCLKKGQshaaHCQRZjjrSdRhuxDXDgiUUF5bKc8=)
2: pvaPM5j3-BPWJpSuaWFE01jgVBg.roa (hash: vcFvxHEzp1YnutqV+Bq+p/f/FPwpa1xjzTG6Rie7rFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:2d:1b:b1:0a:8b:db:af:b5:64:5c:a6:6a:5f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
Validity
Not Before: Apr 19 11:00:41 2025 GMT
Not After : Apr 20 11:00:41 2025 GMT
Subject: CN=32530b7a453d3bb52a0ae449c73354befa42fab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ab:48:51:dc:d0:0a:10:c1:80:d3:da:9b:86:
e9:01:40:bc:c8:b4:09:ea:64:26:64:d5:ed:08:93:
3e:a2:cb:36:ca:6a:98:12:be:e4:54:34:04:01:f2:
9d:12:6d:65:f9:9f:5a:89:f4:ad:37:21:a9:02:c6:
87:b3:0e:e1:15:12:18:3b:1a:1e:40:8c:da:a0:af:
6d:72:9a:d9:52:d8:ad:6c:7f:bc:ea:e4:fd:5d:fa:
4f:08:22:ea:a4:25:1a:ce:18:fc:78:73:d4:8f:60:
10:7d:0b:8f:83:ee:17:38:e7:31:ac:68:a4:5a:ca:
9b:03:f9:b6:c6:7c:ba:fa:a3:72:11:50:b2:4c:b0:
6f:1d:de:85:fc:82:1f:50:a9:e2:3c:93:8e:be:55:
c9:80:a2:de:2b:ae:e4:f1:bc:b8:e8:4b:a7:b9:07:
ac:be:86:e1:48:8c:77:68:f3:e3:e1:47:2a:b7:28:
30:12:a1:41:c1:45:b4:28:33:e3:70:2a:b9:5f:10:
ae:da:08:d4:a8:d5:85:ad:4f:e8:52:1d:64:10:6a:
d5:05:33:81:2f:9d:ac:1d:56:b0:38:ab:b2:d1:29:
d8:4d:86:28:5f:c1:3c:e3:97:67:17:07:bf:36:28:
26:b1:89:86:df:be:4f:c3:97:86:67:fd:f8:7c:44:
cd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:53:0B:7A:45:3D:3B:B5:2A:0A:E4:49:C7:33:54:BE:FA:42:FA:B6
X509v3 Authority Key Identifier:
keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d5:96:f3:14:f7:e9:25:f1:07:d5:1d:1b:2e:e4:cf:fc:a3:
76:0c:ff:61:d9:1f:8a:7b:9d:ef:2c:a0:20:45:48:67:95:a2:
36:05:61:4b:46:a7:6b:8a:67:b4:f6:95:8d:36:89:84:14:26:
b7:2a:18:66:9e:4a:4e:bd:19:93:95:a4:cf:9d:71:1c:d0:16:
25:ae:91:a7:0f:d5:75:45:de:51:a4:73:1e:f8:dd:27:34:de:
62:ec:5c:35:c8:19:fb:2e:0b:d1:5a:bf:42:aa:58:fc:a2:5d:
52:be:7f:a5:27:e8:55:7d:f7:72:08:f3:ec:a0:76:a7:66:2e:
c2:ed:50:a4:7d:53:b8:ab:a2:0e:25:ee:fd:68:20:e8:cb:3a:
08:db:32:75:ab:90:f6:d4:f1:d1:6e:e4:ba:e1:0e:47:00:17:
f1:dc:74:dc:c4:a2:97:64:b3:c5:97:9c:a2:58:8a:56:9f:75:
34:1a:51:f3:f4:7f:41:e0:e3:fa:bd:5e:3d:ac:1a:70:24:1c:
44:bb:0b:8f:bc:09:ed:d2:ff:0f:9a:d2:fe:ab:1c:96:40:ef:
c8:e7:b6:b1:8d:39:80:84:75:d6:e3:7c:66:1b:06:f2:7a:ac:
80:3a:12:69:a6:71:7a:0f:ed:7b:f7:3a:09:8c:ad:e7:e4:dd:
e3:00:ee:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:31:06 2025 by rpki-client