Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
File: lwaqkFRlWGQk84f9vYNki3LZRt4.mft (raw, json)
Hash identifier: CX53/VRJsYG7IQ1Mcq26ItoBuqCuZHScO1NP+NuPs7M=
Subject key identifier: 51:22:E9:0D:63:EB:FA:B8:67:6B:9F:52:7D:BD:DE:C4:81:E7:01:E5
Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de
Certificate serial: 01962D8648DF40C11A7209F6746D1ACAB710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
Manifest number: 14E9
Signing time: Sun 13 Apr 2025 05:01:37 +0000
Manifest this update: Sun 13 Apr 2025 05:01:37 +0000
Manifest next update: Mon 14 Apr 2025 05:01:37 +0000
Files and hashes: 1: c2mbKi5UZ3GiOkTKMMsYLmmHWNU.roa (hash: UtxHj7i+M428S4MKPB9E9Q2PRXSjTUZ5FcXtjJA5bUs=)
2: lwaqkFRlWGQk84f9vYNki3LZRt4.crl (hash: pevuZGMJf3M49WROIHxpAT8pBOFLuTyu05/uP+aeeKk=)
3: oRfW2FP4FbeYSI3kehqgncp9gcc.roa (hash: XwGX8naDPDNcbpgigNakMaNKC6NSSrDBYhs82eP32R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:86:48:df:40:c1:1a:72:09:f6:74:6d:1a:ca:b7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9706aa905465586424f387fdbd83648b72d946de
Validity
Not Before: Apr 13 05:01:37 2025 GMT
Not After : Apr 14 05:01:37 2025 GMT
Subject: CN=5122e90d63ebfab8676b9f527dbddec481e701e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:78:67:0c:bd:67:92:62:57:18:d1:ae:3e:
9e:bb:c1:a7:6b:7c:cf:65:6d:c0:40:36:b0:25:d1:
cf:3b:2c:64:0e:11:96:61:ac:88:8f:34:bd:69:1b:
58:53:39:a6:f9:ae:29:e6:74:7f:1a:87:1f:72:18:
ee:9e:32:2c:d7:9b:1d:4c:e9:21:6a:fa:c8:21:2e:
8c:d9:e9:6d:d1:de:5d:64:ef:80:f7:70:42:dc:30:
f2:04:53:75:07:c5:44:77:4f:ae:15:2d:c3:07:ec:
aa:7f:7d:6d:47:c0:06:1c:c7:39:8e:b6:c4:fb:fd:
05:58:10:cf:22:2b:1f:c3:4a:c1:5f:e8:2a:05:d9:
7d:5e:91:0b:1d:d1:f3:d1:37:8d:e1:0c:ec:5f:ed:
1b:21:ad:69:5f:ef:b7:76:08:97:13:50:2d:98:20:
0e:41:90:5f:4a:cd:80:cf:8b:38:31:3d:bf:f7:09:
03:c4:16:20:0d:3e:b9:81:5c:41:55:75:9e:4b:ba:
0a:4a:28:38:9a:a1:a6:14:f1:de:ec:f4:54:63:88:
e6:c6:2e:5b:32:52:bc:06:65:9f:a8:45:5c:90:d8:
8a:79:56:70:d9:88:c7:21:4a:d0:50:20:43:75:ab:
95:e0:b2:ae:c1:78:86:89:84:0f:13:5a:a7:72:b2:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:22:E9:0D:63:EB:FA:B8:67:6B:9F:52:7D:BD:DE:C4:81:E7:01:E5
X509v3 Authority Key Identifier:
keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:59:fa:7f:15:c6:36:0b:11:62:41:ee:d1:b8:20:1d:88:df:
bf:80:53:2e:bf:56:d9:d6:db:2c:24:3b:5f:0a:48:c4:26:f6:
79:e6:5a:bf:b6:67:00:e4:78:76:91:77:ff:c8:56:86:c2:b7:
03:f5:8a:17:d3:f5:49:59:4c:d0:62:8b:71:a5:28:27:20:8b:
50:93:50:6e:5e:d6:b2:75:ad:67:0b:a5:17:de:93:6d:23:02:
f2:e9:98:32:6e:a9:96:a5:5c:5f:6b:b4:7b:b0:3a:2f:ba:9a:
4d:55:b4:7a:4f:87:c9:b5:25:3b:cb:c0:36:ba:13:50:3d:6d:
3a:b1:59:63:3f:2c:df:74:eb:9f:bd:4f:66:d4:80:31:d8:a5:
f1:d4:46:5f:7f:2c:40:55:01:9c:3b:45:09:b4:b7:e7:54:af:
a4:25:03:77:30:ff:d1:64:5b:c5:67:95:f3:13:2e:1f:a4:2f:
76:18:4a:c2:c6:d6:a5:63:b0:d7:66:c8:9d:9f:54:03:e6:c1:
13:06:44:20:8a:88:37:1d:71:c4:8a:69:bc:ae:e0:24:4a:de:
30:9d:aa:46:ad:78:69:b3:42:bc:f6:e1:5c:bd:34:1f:22:f2:
19:7d:4f:fd:47:e9:78:72:de:00:d9:ae:f3:72:9c:1b:6c:05:
d9:38:46:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:35:39 2025 by rpki-client