Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
File: LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json)
Hash identifier: 4kFVZWejaGG2HXF3cjc4R1a50vwKzuoK2JO2w8UKgno=
Subject key identifier: CB:57:94:C5:FC:CD:32:64:DB:BB:B6:6E:17:AF:AD:4F:06:45:F8:63
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 01964F6CEC0B6F11E4ADE71D65F38EC4B49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 19:01:00 +0000
Manifest this update: Sat 19 Apr 2025 19:01:00 +0000
Manifest next update: Sun 20 Apr 2025 19:01:00 +0000
Files and hashes: 1: Bw0NNJ5G9QC3JaBlS90HbDrOyMk.roa (hash: B3vTdiTwQdK9HN3t4vz56wcZIYmvYpMISVeMsspgV1M=)
2: KyYkDGAKcLxBeobymFr8WHFkbsg.roa (hash: i5cDRgXd7YM0AehUFUHTls95bgAtPwPBdENU69SXQBA=)
3: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: WeE/+zAyVYUJ8Ylee4vgwQVtf94ESKtMqvM+9/TJhc4=)
4: bIU1r6-kNYCwjKpYb1XeOOaMSrk.roa (hash: 6q2rVSVFi3ovtZSljouoEUOq4a8bSKXzuMgOvNyKriw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:ec:0b:6f:11:e4:ad:e7:1d:65:f3:8e:c4:b4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Apr 19 19:01:00 2025 GMT
Not After : Apr 20 19:01:00 2025 GMT
Subject: CN=cb5794c5fccd3264dbbbb66e17afad4f0645f863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:49:a1:d7:88:8a:0c:53:d1:18:44:44:e1:
5a:a0:c5:ef:9e:09:83:8f:46:20:e5:d7:06:12:6f:
bb:0d:7f:1e:95:61:f8:61:94:34:0a:95:6f:f2:7f:
d7:be:7a:38:18:e9:a7:64:a5:52:31:24:58:8c:fd:
f1:92:d5:37:de:55:39:f6:40:69:c3:6c:28:ba:0e:
69:09:d2:5f:5b:ce:e7:3b:18:fa:24:7f:ae:be:93:
15:2b:94:e6:e2:40:9b:59:3b:7d:ff:b9:a2:2d:11:
12:7b:ea:a6:5d:d5:ae:3e:70:fc:7a:b8:79:8e:60:
ba:e9:a6:d5:d8:5e:e0:96:93:50:27:a4:a5:66:4c:
bd:97:b1:88:88:dc:af:b3:47:63:cf:9c:aa:a4:9c:
18:36:5f:b3:f8:05:3f:4b:64:7f:c2:50:ec:73:ba:
8e:e3:47:86:0a:28:99:33:72:81:a6:55:0e:ca:40:
8f:7a:1d:8b:d9:3c:f6:14:03:31:ee:b5:a5:d7:e8:
1b:15:80:ab:b2:75:d9:a9:13:1c:58:d2:45:3c:55:
91:71:5e:8a:d6:d1:e7:ba:de:8c:fe:80:c5:d7:5e:
ea:46:88:dc:ec:c7:21:f2:59:eb:72:96:c6:ae:cc:
a2:64:8f:23:4a:34:3e:2b:80:2b:5d:43:bb:29:57:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:57:94:C5:FC:CD:32:64:DB:BB:B6:6E:17:AF:AD:4F:06:45:F8:63
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:18:7e:97:13:95:f5:f7:25:44:84:52:4a:c0:7b:19:b3:10:
dc:ff:4c:6c:42:36:3a:4e:b2:e1:2e:f1:69:0f:aa:76:58:f5:
6c:6a:8c:25:03:91:8c:6e:7c:2a:d0:47:6c:55:63:f8:39:21:
f6:7d:6a:81:19:5c:ba:15:dc:0b:14:f9:26:b3:7f:e1:de:5b:
71:b9:8b:65:b5:f9:9e:3a:27:08:35:9d:b0:a3:d1:d4:b7:08:
aa:7b:14:11:f0:4e:ec:42:08:10:5e:a9:63:97:36:d4:96:3d:
ec:39:74:1d:24:0b:b3:a3:ca:85:a8:2b:af:3a:9a:a3:56:52:
86:44:be:b6:da:a7:92:d0:30:e2:10:a1:ca:71:71:a8:37:af:
78:0c:ff:24:ba:27:fa:d4:2e:be:76:e7:46:17:7d:40:cd:08:
cf:c8:8d:e1:93:c4:7a:37:d5:96:d7:8c:7b:0e:9b:4f:9f:e9:
49:8d:9f:ad:6d:d5:ee:7b:f8:66:a2:8f:5b:de:e8:63:ad:63:
4b:dd:d4:90:21:a8:32:79:1f:0b:7a:95:77:bf:18:c4:32:0e:
8f:7e:ce:50:34:f1:e8:a6:0a:eb:e1:96:4a:d2:5c:5e:1a:b5:
51:a3:11:2e:5d:81:b6:50:14:82:e3:7d:14:b1:19:b6:6b:6d:
ad:89:05:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:26 2025 by rpki-client