Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft
File: LuNT81A_m_8zgUUANWKOgaltkI8.mft (raw, json)
Hash identifier: DbrZyNk8omkDfwd6dkcqxERY57P5HmtfIvy9D5fEevo=
Subject key identifier: 4C:58:2D:1B:5A:A2:2F:12:40:EA:4A:B5:67:9E:70:0B:63:91:57:23
Authority key identifier: 2E:E3:53:F3:50:3F:9B:FF:33:81:45:00:35:62:8E:81:A9:6D:90:8F
Certificate issuer: /CN=2ee353f3503f9bff3381450035628e81a96d908f
Certificate serial: 01963B7830C27AB22DB4D2A1191494CCBBFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft
Manifest number: 14F1
Signing time: Tue 15 Apr 2025 22:00:54 +0000
Manifest this update: Tue 15 Apr 2025 22:00:54 +0000
Manifest next update: Wed 16 Apr 2025 22:00:54 +0000
Files and hashes: 1: LuNT81A_m_8zgUUANWKOgaltkI8.crl (hash: i2vTbLexbmfqLbxuRE+ms+eE9TGme3VzED/FQr6dkXc=)
2: i4ji4FESABQCgK0_EzuuOFD8dtc.roa (hash: 3BAjWIU8+VYQZdWD5OjHsa/ea0VN5UUvfwPcGQwXG/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:78:30:c2:7a:b2:2d:b4:d2:a1:19:14:94:cc:bb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee353f3503f9bff3381450035628e81a96d908f
Validity
Not Before: Apr 15 22:00:54 2025 GMT
Not After : Apr 16 22:00:54 2025 GMT
Subject: CN=4c582d1b5aa22f1240ea4ab5679e700b63915723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:02:41:ce:54:20:3a:f8:02:dc:00:4f:9c:4b:
65:0a:99:b9:cc:78:eb:c9:1b:5f:3f:9c:0b:b4:34:
85:ff:d1:d1:35:1f:a7:b6:89:89:3a:59:c1:a2:a5:
8f:c9:63:a3:9a:60:47:63:6f:a0:63:c9:2b:50:94:
10:5f:ea:29:90:b3:db:c5:3b:d2:90:d6:2f:ed:c3:
e1:fc:3d:32:85:cf:81:8a:cd:f9:75:d1:53:96:3b:
2c:6a:4a:66:11:a3:a8:72:f5:b5:f9:a8:ea:e4:a6:
db:6d:df:9d:7b:6e:0f:18:49:30:98:23:13:45:1f:
13:54:85:61:69:35:e8:1d:98:44:c9:4b:88:1e:91:
9c:38:9c:99:dc:5c:7a:54:83:96:c3:38:05:97:3a:
ae:db:8e:52:e3:b1:17:f4:5a:28:74:b3:5d:99:30:
3c:c0:49:f8:24:e8:4c:99:7c:41:11:cb:4c:d4:8e:
3f:0d:c3:bf:de:52:03:d9:c3:45:b4:a7:6d:32:9b:
11:83:9d:40:fe:02:b7:a2:39:f7:3d:7d:b3:cd:f4:
62:55:cf:de:50:92:83:0c:ec:1f:01:86:89:c4:79:
64:06:40:b7:1b:d3:a3:74:79:d1:ba:0e:db:cd:be:
85:2e:6d:2a:87:4c:cd:60:67:40:dc:5b:ca:0b:4a:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:58:2D:1B:5A:A2:2F:12:40:EA:4A:B5:67:9E:70:0B:63:91:57:23
X509v3 Authority Key Identifier:
keyid:2E:E3:53:F3:50:3F:9B:FF:33:81:45:00:35:62:8E:81:A9:6D:90:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e5:d8:66:49:46:5b:5e:d4:a4:43:4a:9b:b7:0a:a1:9f:b6:
f9:87:eb:d5:c2:ff:83:ff:fc:b9:da:ed:ba:0c:d0:06:c2:02:
e3:4d:0c:4d:b8:1c:52:11:a7:14:f5:d5:02:7a:c7:b2:82:18:
74:f2:8a:15:08:67:b9:ba:eb:d5:2b:52:54:05:f1:f7:4d:51:
49:e8:8f:eb:57:9e:ee:cd:06:0a:61:0c:4b:49:f3:dc:62:9c:
38:30:4a:d6:69:01:6a:22:d0:41:3c:59:c9:c3:3b:4b:09:cd:
58:97:a0:36:0a:84:6d:b4:47:0e:9f:2a:1e:52:d6:4b:56:24:
8d:95:45:5a:4d:1f:b6:fa:1b:20:ec:80:71:96:04:89:51:d8:
71:03:28:0f:f6:db:8b:2c:b3:85:73:76:f7:63:3f:f3:59:77:
46:62:ad:0e:7b:f0:29:63:21:e2:11:cb:e0:72:13:71:35:61:
c4:88:26:93:3e:98:ad:45:16:30:83:36:82:b4:5f:a3:be:83:
98:87:13:20:05:1c:6e:ba:24:55:51:44:fd:b7:9d:c0:10:8e:
cd:35:e4:94:ba:ab:1f:f0:6e:ea:09:b0:5e:52:41:aa:8d:93:
f0:c9:43:08:a1:78:f0:50:e9:95:c6:84:74:0a:ec:96:93:93:
cf:80:10:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:01:57 2025 by rpki-client