Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
File: LubVYKCKAT8_4OZtra9v0Cvq9D8.mft (raw, json)
Hash identifier: 36ECI/M7+1Sdfr2E94NscCAorlRYA/2FVrKklpSFpK8=
Subject key identifier: D4:83:74:8C:39:96:BA:AD:F5:CE:10:A8:51:62:CD:15:C6:1A:50:15
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial: 01964FA3693F7005E2FE0365F0176A156DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
Manifest number: 1537
Signing time: Sat 19 Apr 2025 20:00:31 +0000
Manifest this update: Sat 19 Apr 2025 20:00:31 +0000
Manifest next update: Sun 20 Apr 2025 20:00:31 +0000
Files and hashes: 1: LubVYKCKAT8_4OZtra9v0Cvq9D8.crl (hash: 9/7yBuk+T71XZdCKro9YIIrbHC7ClTCQ/t+v2ES73bc=)
2: xfTt7QwtZDYwpOqt-xtQurA5I0c.roa (hash: ZlEBp7t71aNEAPDDQ8kVF7//cmlxkwRPGVq3nvU6tPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:69:3f:70:05:e2:fe:03:65:f0:17:6a:15:6d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Validity
Not Before: Apr 19 20:00:31 2025 GMT
Not After : Apr 20 20:00:31 2025 GMT
Subject: CN=d483748c3996baadf5ce10a85162cd15c61a5015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:29:91:15:24:91:a6:ab:27:a1:a9:ee:24:fb:
d5:c3:10:21:df:1e:14:92:65:c1:de:98:1f:0b:ae:
ce:54:5c:b8:9d:af:aa:a5:ee:3f:a8:87:71:69:9d:
90:91:9d:46:7c:30:09:f0:2e:1e:47:23:30:65:79:
85:fa:cc:c5:fc:9f:89:49:27:f4:9a:e9:d4:63:67:
ee:03:70:fc:c4:e8:7e:79:ed:18:ea:8d:fe:df:c1:
ea:0e:d9:b1:c4:94:c1:39:d1:9b:b3:ad:40:64:80:
21:af:2f:5b:eb:3a:49:17:0e:a2:14:12:50:49:70:
e8:e1:bd:c3:f5:e1:a9:00:a3:00:29:d4:c2:bf:9d:
ac:f6:a7:65:0a:4f:78:c9:ef:af:f2:54:6b:07:ee:
e9:32:92:d2:4f:7d:d9:d7:b1:16:1e:98:1b:d6:31:
00:d3:12:6a:78:30:03:d8:90:19:68:4e:52:25:7b:
90:8c:e2:25:14:06:a2:8a:50:0f:3f:16:54:d3:60:
46:da:27:07:22:82:f4:0c:57:04:e3:af:c4:96:fc:
f5:c1:6d:30:a8:13:4a:13:d6:77:af:d3:a9:4a:45:
c2:c4:6b:05:2b:b8:bb:dc:f6:90:3c:dc:25:e8:34:
13:01:64:70:d6:f5:76:12:c7:82:63:9d:7a:28:77:
ec:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:83:74:8C:39:96:BA:AD:F5:CE:10:A8:51:62:CD:15:C6:1A:50:15
X509v3 Authority Key Identifier:
keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:62:ed:be:bc:f6:db:96:1f:66:c2:57:40:1a:34:a4:fc:eb:
3a:0b:ec:f1:47:e0:e8:39:c4:82:ca:95:0a:fd:b1:8f:ba:aa:
7f:36:0c:d6:36:5a:b9:c6:4d:2b:35:a2:cc:b7:11:0c:05:e4:
7b:dd:3e:a6:e2:30:8d:1f:3f:3e:12:d7:99:25:fd:87:a2:82:
83:10:89:fb:50:da:5e:73:08:59:94:8d:81:bf:46:aa:48:14:
9f:90:df:48:87:c5:24:1c:f0:e0:76:be:39:36:f1:89:19:48:
42:cc:31:5c:00:0e:77:8d:31:02:d4:bd:e3:79:31:7c:30:83:
f9:9a:b5:04:be:63:e5:d2:d2:4b:97:48:ad:5f:e7:01:9d:a0:
f7:79:bd:90:68:d0:32:c7:ac:e9:26:a5:01:a5:2a:14:c8:a1:
74:50:ec:b7:f0:72:84:3e:ed:16:a7:3c:db:26:78:e9:0c:31:
5a:35:72:c3:1d:13:ea:73:9b:b0:c2:59:98:3e:ab:41:b4:ec:
cc:13:b2:67:1d:46:24:59:ab:dd:1b:f8:b2:4b:f1:4f:80:0b:
be:a6:ce:44:c5:d3:24:bf:4a:33:ae:36:f5:76:f5:2b:a6:72:
2a:dd:e3:f2:66:69:c8:a7:3d:22:ff:1c:e1:2c:7b:fb:24:04:
e1:aa:10:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:35 2025 by rpki-client