Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
File: LgO_8-c1I3MjiWRkff2JOyajs0k.mft (raw, json)
Hash identifier: EuHYCHTuZpkckN1OpR6pj4fC/fslF3KEGbhV74VdltE=
Subject key identifier: 27:20:BA:1F:59:14:5A:63:73:CE:83:5E:C3:E8:34:D2:D9:41:7E:DA
Authority key identifier: 2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
Certificate issuer: /CN=2e03bff3e7352373238964647dfd893b26a3b349
Certificate serial: 01963B09C5BE8277E0DBE38EC8D56B972C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
Manifest number: 14EF
Signing time: Tue 15 Apr 2025 20:00:18 +0000
Manifest this update: Tue 15 Apr 2025 20:00:18 +0000
Manifest next update: Wed 16 Apr 2025 20:00:18 +0000
Files and hashes: 1: 4Ks29m0KEvqQ2u_x82i2_AGUJYc.roa (hash: LAlVvGEw43G7VBWh8V8Fzw/Vs6vev/GRjzgqnNcn5CU=)
2: LgO_8-c1I3MjiWRkff2JOyajs0k.crl (hash: IsvZAKgBy1CjXh3E3SLziY46dUfC/9Kb81hd9FmS69s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:09:c5:be:82:77:e0:db:e3:8e:c8:d5:6b:97:2c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e03bff3e7352373238964647dfd893b26a3b349
Validity
Not Before: Apr 15 20:00:18 2025 GMT
Not After : Apr 16 20:00:18 2025 GMT
Subject: CN=2720ba1f59145a6373ce835ec3e834d2d9417eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:54:45:cd:a8:91:61:8c:ad:a9:08:92:d8:
ce:a9:60:1c:a3:c5:95:87:9d:80:38:46:3a:7b:e8:
72:d9:30:a2:65:8a:f9:ff:ee:35:3f:65:00:e8:77:
c3:f8:88:7d:56:19:56:24:13:9d:37:43:cd:da:8e:
b7:63:54:14:da:f6:26:2b:52:82:7f:77:de:9c:32:
0f:7d:30:5b:08:6e:5b:fc:fb:82:2b:2b:5d:22:95:
b4:6b:2d:46:84:93:3f:8c:78:0d:d1:e4:3d:83:ac:
7e:bf:23:b4:20:0b:06:bb:43:d5:4e:e5:34:da:20:
76:ae:ac:33:fe:1a:1f:c4:28:ba:70:c3:d1:a5:51:
92:39:d9:47:40:6b:ab:75:3d:89:e9:9e:d4:06:68:
7a:71:f6:5e:fd:56:0b:ac:9e:99:69:77:a4:c0:76:
7f:5f:f1:f7:55:ec:f8:86:74:cb:28:fb:40:58:d8:
db:f4:cb:d7:b0:53:95:86:48:96:a1:88:06:33:b9:
01:33:d6:bb:50:6e:ca:9b:c6:b1:ad:88:2a:41:1b:
f1:86:63:fe:3d:ec:1d:27:6d:f4:3a:9f:cf:76:de:
a7:2f:69:94:70:47:0e:85:04:9f:03:4e:b4:45:ee:
4d:f9:78:4c:2c:a9:05:bf:a8:cd:66:32:ad:33:32:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:20:BA:1F:59:14:5A:63:73:CE:83:5E:C3:E8:34:D2:D9:41:7E:DA
X509v3 Authority Key Identifier:
keyid:2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:65:22:9c:7c:06:01:0d:a8:28:40:08:b7:1b:12:34:d5:c9:
f8:52:fa:39:2a:49:e5:b7:c3:3e:e7:3d:07:9e:eb:ad:cc:48:
01:00:19:22:f4:a9:65:b5:9e:6f:69:82:8c:d8:dc:3c:cb:93:
17:d6:24:38:58:1c:e2:48:56:63:f4:94:29:07:e2:59:d1:78:
6e:32:ef:57:7d:9c:d2:f8:a0:83:29:a5:dc:88:51:84:23:16:
c0:62:80:33:d2:8b:ac:e7:09:bf:32:f3:dd:bd:f1:f9:99:c3:
a5:8a:65:bb:5e:85:fd:91:8f:a8:e9:1c:33:e0:ee:b0:85:a3:
ce:7c:94:67:e9:e5:ec:d0:d8:8c:24:08:0d:36:c7:73:dc:b2:
21:6c:71:16:c3:d3:a2:34:ca:ff:1b:d3:07:b6:f6:8b:6e:fa:
dc:e2:88:be:6e:8e:f2:a9:72:1f:de:9c:cf:0c:61:0f:0e:dc:
5c:a0:ca:a8:1a:32:2e:34:44:2e:6a:ba:89:da:2f:52:5e:61:
51:db:70:0f:f7:b9:a8:80:cc:6b:39:b2:e9:b7:04:3f:d0:a2:
e9:c9:e1:2c:37:a9:c8:e8:6d:1f:36:83:85:2d:c9:ba:89:55:
55:6f:1b:f2:0f:ce:7c:8b:47:11:1f:21:37:61:94:29:0e:29:
ff:4d:ef:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:47:24 2025 by rpki-client