Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
File: lvLaL6G8jtLyvGtwOovxU0D5fPo.mft (raw, json)
Hash identifier: FymmCMSdkrmT7acD2wJYpZ3kOQY7rN/bws8ituDeaaA=
Subject key identifier: 53:0F:DA:36:C6:A5:3B:3D:37:76:5A:1B:4A:3D:CA:53:4E:A9:11:BB
Authority key identifier: 96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
Certificate issuer: /CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Certificate serial: 0195127E7398342BD07434CDAD0FDE8EF057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
Manifest number: 0834
Signing time: Mon 17 Feb 2025 06:00:31 +0000
Manifest this update: Mon 17 Feb 2025 06:00:31 +0000
Manifest next update: Tue 18 Feb 2025 06:00:31 +0000
Files and hashes: 1: HfieAyyFiGHzuxK88Qqlcm0jHjE.roa (hash: 9hArFOOTkWsSdh7y1qMFDzyLMrMdzpKqI+tBBv6IzqM=)
2: lvLaL6G8jtLyvGtwOovxU0D5fPo.crl (hash: /EJf5mrZDWUWNVpDTIQgdAjlabh8RWT1gIXH2tXiEBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:73:98:34:2b:d0:74:34:cd:ad:0f:de:8e:f0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f2da2fa1bc8ed2f2bc6b703a8bf15340f97cfa
Validity
Not Before: Feb 17 06:00:31 2025 GMT
Not After : Feb 18 06:00:31 2025 GMT
Subject: CN=530fda36c6a53b3d37765a1b4a3dca534ea911bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6d:1f:82:6d:7b:16:e9:91:41:4b:cd:97:9e:
6a:16:50:44:0c:a1:c0:99:bd:7c:8e:2d:fe:56:43:
8a:64:14:50:a3:87:a5:6a:bb:88:b8:81:44:ea:6f:
58:4d:8f:cc:49:f9:96:d6:78:c9:a8:9a:1b:52:3a:
45:c5:29:2e:41:15:6b:07:2c:2e:9e:b4:04:64:d8:
8d:79:f3:ca:dd:4e:22:db:02:89:fb:3b:84:2a:2a:
90:95:43:a7:c8:3a:6e:0a:2d:68:72:07:d0:7b:2f:
61:b9:36:15:bc:c7:4d:ef:a5:2b:49:75:65:87:e6:
f9:f6:02:44:d3:53:a4:24:ce:78:30:56:db:db:29:
36:ea:bc:01:7b:c6:65:6c:cf:8c:4b:7f:6a:09:57:
50:66:86:1d:78:f3:28:09:50:f8:34:ea:f5:3f:ba:
06:a4:cb:09:19:ce:02:f3:fc:73:67:9a:a8:3c:d7:
e9:77:a6:15:14:30:34:ef:78:f8:c9:ee:27:47:53:
27:4f:33:aa:8c:a9:e6:0e:31:e3:79:6d:03:d9:76:
13:73:d7:b7:ba:41:f0:c5:37:27:4f:79:e6:67:69:
65:9e:c8:1c:a9:5a:20:b5:fe:72:d4:73:f6:bb:05:
74:fc:e7:11:95:69:55:c2:db:00:3d:f6:78:e1:16:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0F:DA:36:C6:A5:3B:3D:37:76:5A:1B:4A:3D:CA:53:4E:A9:11:BB
X509v3 Authority Key Identifier:
keyid:96:F2:DA:2F:A1:BC:8E:D2:F2:BC:6B:70:3A:8B:F1:53:40:F9:7C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvLaL6G8jtLyvGtwOovxU0D5fPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fc4690-080f-4018-89a1-93b4fe5157ec/1/lvLaL6G8jtLyvGtwOovxU0D5fPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:25:90:e5:ff:3a:68:d5:a9:f8:ae:19:5e:86:56:d8:24:e2:
8a:07:95:f3:cc:bc:cd:c5:05:55:9e:f7:4e:77:02:85:51:9d:
a6:3c:c5:25:c9:1a:f5:11:b5:4e:eb:91:a4:7e:fa:c2:e5:5a:
d9:7c:70:75:8b:af:c8:c2:e9:8c:e9:b2:f8:d8:7d:11:89:d7:
25:eb:89:27:db:d5:15:ad:1a:b9:e1:c3:4b:11:b3:df:85:ce:
99:1d:e0:16:07:27:07:9b:ca:bf:0d:1a:99:a0:dd:d7:63:3c:
a2:27:9d:f6:e5:8f:89:23:66:f9:b4:5f:42:25:e9:3c:5d:e4:
59:50:b8:e3:66:1c:0a:4b:1d:c4:85:32:4d:ff:6c:1c:cf:96:
54:9a:63:32:6f:58:ea:1c:ee:4e:6f:2c:ca:2b:14:65:36:76:
02:fa:af:65:4c:3c:21:86:d4:69:a3:a4:dc:8b:0b:6a:ca:1b:
2a:b5:22:c0:22:cf:c6:1e:d6:f6:aa:44:89:21:37:42:26:74:
06:02:10:e8:bb:96:13:ac:d9:0b:6e:76:75:e8:69:b6:5a:9b:
b6:dc:80:bc:8b:8a:05:5c:85:c5:b9:ae:13:89:01:d4:08:54:
33:a1:3b:a4:d3:b9:d7:41:bc:2b:b9:66:dc:54:14:d8:05:38:
9c:25:1e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:08 2025 by rpki-client