Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
File: lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json)
Hash identifier: fHkIVx9oFyCpOpt0FeZgljSeBmjAxrAy658RXoIZet8=
Subject key identifier: 85:BC:65:44:CE:01:EB:FB:2C:35:B2:97:18:19:64:01:EB:4B:12:5B
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 01965BA79CCCC633BF08A3523737E17820F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
Manifest number: 11D3
Signing time: Tue 22 Apr 2025 04:00:33 +0000
Manifest this update: Tue 22 Apr 2025 04:00:33 +0000
Manifest next update: Wed 23 Apr 2025 04:00:33 +0000
Files and hashes: 1: 1jamJZhJQCxnBF2gQL6E1EEMOTA.roa (hash: kBKBG2m2NE0a6jTDEjeZmk4l4aHSEPbRY7SVjCst1XE=)
2: 6uBRMAdPwa-lKO2ylO9DlsGgsHY.roa (hash: +m2JD+JFXF9SBNg+lpjDT6mDr6YnDMqmBejWjKgStAQ=)
3: VRYfwJddtKzQsHE8MbAEFYO6ZHo.roa (hash: EYXXmNlMh3UrU0hKdU6hQ+CFn2MC63mGZvBuDrRNCLw=)
4: aQ92mv4OX0TrGXRhoE4qVRj9Lwg.roa (hash: Sn7Iy1mnHMRUkHR2YiOO0Z7B9rvVJ+lItzyRTfMio1A=)
5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: JXz2v0YhEEFZSpZoD+Ifst3TMZwl3PcvoTXB1imzFBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:9c:cc:c6:33:bf:08:a3:52:37:37:e1:78:20:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: Apr 22 04:00:33 2025 GMT
Not After : Apr 23 04:00:33 2025 GMT
Subject: CN=85bc6544ce01ebfb2c35b29718196401eb4b125b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:17:44:5c:cb:22:82:c8:cf:82:47:a5:b8:
21:66:d6:4e:41:ab:27:b1:31:93:7a:51:81:e2:4b:
f7:f0:77:1f:dd:2f:4f:b5:91:be:7d:78:e7:2d:e1:
ee:08:98:6b:80:41:ae:03:ba:79:ae:9b:07:40:fa:
18:5e:1c:cc:61:0b:15:70:c9:b7:48:ea:89:55:f1:
09:96:88:a1:9f:4e:43:b8:a8:0c:78:40:8d:8a:e1:
c1:0c:b9:5f:43:7e:ba:cc:2b:ba:46:50:76:e9:8f:
2e:09:d7:5a:ed:28:29:12:47:2b:73:9b:44:6f:eb:
54:9a:ec:93:10:be:7c:53:69:da:09:ab:6c:23:43:
e3:19:e2:ae:51:45:d5:40:2b:c6:fb:68:38:e3:cc:
b1:e7:db:47:32:25:c0:ab:a6:cb:77:08:e1:23:25:
03:ab:3a:06:0d:b8:c9:cf:f0:2e:fb:60:7f:eb:10:
2f:9f:e1:f1:44:a5:53:9d:21:c7:12:e6:89:4d:18:
1a:3d:5a:ca:20:39:a0:bd:db:62:1b:c0:fe:e2:b0:
85:81:51:57:f3:0f:3f:8a:49:4b:ce:49:a5:75:2b:
e9:31:49:06:48:63:ee:d1:ec:07:dc:03:5c:0e:d2:
83:2c:07:5c:3f:20:6a:b4:c3:e0:49:50:5c:f2:a1:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BC:65:44:CE:01:EB:FB:2C:35:B2:97:18:19:64:01:EB:4B:12:5B
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e2:b9:15:e8:50:77:93:8f:a4:e8:4a:33:1d:89:63:30:1b:
48:71:69:e1:22:93:b0:52:31:9d:0c:32:88:83:95:65:7c:b9:
68:97:c3:b9:b5:80:88:52:3a:5f:7f:9f:61:62:42:4c:2e:47:
a5:31:fa:b3:82:c7:2a:a4:c7:cf:c3:9f:41:07:77:a6:5f:0b:
8f:f3:1a:70:f7:6f:69:38:5b:84:a4:08:ef:67:ba:be:da:4a:
59:2e:c7:05:d5:6f:5d:7f:a7:09:17:37:18:5b:7c:a6:f6:29:
0f:5a:f3:e9:3b:b1:c6:b2:be:2b:d9:c1:9f:83:19:bd:2f:ab:
19:12:f7:fa:d1:ad:bd:c6:9d:0c:b8:d9:f2:2a:6d:93:ec:59:
9e:7b:86:fa:2c:3c:9b:35:b3:8d:5f:50:31:e6:c1:88:c5:11:
7d:d3:2b:97:59:63:dd:f6:e1:d4:db:64:db:a4:e5:9b:b8:a6:
0b:cb:78:58:6c:e1:5a:14:bc:0e:b9:58:6d:bf:49:6b:8e:5d:
9c:32:e0:43:0f:24:28:2e:59:9a:0b:b0:81:0d:e9:4a:18:83:
8f:0e:47:e3:6e:e6:9f:78:41:1d:b5:9b:a9:cc:ae:9b:db:b4:
db:14:2a:8f:e1:ef:32:c1:4b:88:6e:b2:f9:ee:1b:00:63:ec:
0c:a8:f5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:34:56 2025 by rpki-client