Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
File: LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json)
Hash identifier: 1wzuvyB5epAuMDJ0+UzJwyvMpkuDKjOsFjq+PGnmdFY=
Subject key identifier: 13:7F:DA:77:C8:F1:46:49:56:1D:27:A0:D0:FF:FC:18:6B:08:D3:62
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial: 01964F6D85D109E5C5564ECD7CAD55B39F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
Manifest number: 0B00
Signing time: Sat 19 Apr 2025 19:01:39 +0000
Manifest this update: Sat 19 Apr 2025 19:01:39 +0000
Manifest next update: Sun 20 Apr 2025 19:01:39 +0000
Files and hashes: 1: 1M3AfoR3SjK7DM2DxOYGfWEdfR0.roa (hash: c30cU3XYlBMk54Snq026J8BAqHs32RLWA65xX74RwkQ=)
2: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: GLN26ze43wotSqieBwYACm/Gh9v9LWU7nP7iuAtKzRE=)
3: LkZhQmX_urnaV3IsKglfn8ZcN3Q.roa (hash: v8mOmwcN05BKABZj3FxE0md/hgvb7wAQAm8sJBSEt0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:85:d1:09:e5:c5:56:4e:cd:7c:ad:55:b3:9f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Validity
Not Before: Apr 19 19:01:39 2025 GMT
Not After : Apr 20 19:01:39 2025 GMT
Subject: CN=137fda77c8f14649561d27a0d0fffc186b08d362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:54:2f:24:12:6b:d6:8d:4b:09:60:df:e0:
04:32:77:52:88:96:88:2a:84:6e:b4:b6:f5:c1:8d:
50:4a:de:78:f0:81:48:e8:1b:de:bf:9a:e1:bc:f8:
f1:06:4a:7c:4b:78:ad:59:cf:25:a5:49:6e:1e:aa:
0c:46:33:16:7b:ab:64:ba:2b:95:2f:68:ce:7a:8a:
a1:f0:8d:9e:e3:0d:08:2a:83:56:a9:ff:a9:3d:74:
ba:83:a7:55:7b:14:b4:6d:53:d8:3c:50:8f:01:4e:
3f:ca:96:c7:be:c2:64:df:0d:cd:24:d0:2e:7f:7e:
f8:d6:09:2e:0c:90:c7:9f:d3:6b:e9:4b:e2:38:b4:
1e:63:2e:fa:f1:8b:2a:4d:a4:87:88:55:71:62:e9:
3c:fb:75:7d:9d:0c:b6:7b:83:6e:9a:a4:d3:5f:d2:
9b:9b:c8:63:af:85:6d:e4:61:88:53:b6:b9:fa:b5:
b9:d3:39:11:3b:ba:97:ee:50:ff:64:c9:0b:be:b6:
4d:26:0f:63:a5:a5:37:42:0a:56:da:38:ee:f7:2a:
ec:06:9d:34:5a:e6:f2:54:83:95:cb:e3:f5:55:1b:
3e:84:14:0c:2b:fe:fa:61:3a:8b:f7:2b:a9:39:dd:
e6:5d:c2:db:a2:8b:37:f6:90:af:c3:da:01:8e:ea:
c8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7F:DA:77:C8:F1:46:49:56:1D:27:A0:D0:FF:FC:18:6B:08:D3:62
X509v3 Authority Key Identifier:
keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:4c:fe:dd:7b:49:6b:2c:2b:96:dc:8d:ad:63:a5:9b:a1:a9:
78:59:65:a4:c0:2c:04:8a:8f:bc:22:e1:f5:18:31:6f:cf:f8:
02:1d:50:ea:2f:07:32:91:30:06:2c:07:fe:3a:4c:7f:d7:5b:
c7:fb:38:4c:92:4e:bd:c6:ae:6e:1b:01:7c:fd:b7:77:a1:b0:
d0:29:68:f6:7e:fc:a3:4f:c4:1f:55:fd:3c:5c:7a:1f:a2:53:
48:c4:43:e5:c1:db:ec:9b:6d:87:f1:4d:23:6d:f0:a4:32:c3:
d1:d8:f9:42:46:7c:1f:db:a9:64:68:d8:6a:3e:6c:67:b3:94:
84:d1:e4:a6:19:43:fc:05:12:d7:d0:ff:d8:ed:8d:1c:12:dc:
14:78:39:10:79:25:46:7f:6d:27:26:1a:28:ce:bb:dc:49:22:
af:9f:03:4e:d7:35:4e:ae:22:a0:fe:7c:65:5c:d3:be:99:f9:
58:ec:79:a9:5f:e3:a3:7d:c0:98:30:d9:06:bf:34:0d:0b:36:
37:a6:c1:28:41:a2:ac:5b:a2:ca:59:c3:23:a2:5f:37:18:45:
c0:ff:16:df:3b:ed:49:4d:fa:31:85:fa:d1:38:0c:8f:c1:bd:
61:f4:5b:22:8e:a6:d3:23:1b:01:11:ce:8c:9a:fa:93:6f:af:
32:f6:63:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:16:24 2025 by rpki-client