Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
File: LcKRuNts_d9t0qHVWyJtSUkqJwU.mft (raw, json)
Hash identifier: LkxfCbXL04HqY0K5FlfJuA9ah2UnV6WH4EBFJkR2rOc=
Subject key identifier: EB:74:E6:F6:3E:39:7F:40:83:26:F6:2D:C6:D3:D2:BC:D1:80:EC:9E
Authority key identifier: 2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
Certificate issuer: /CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Certificate serial: 019659F01F33F94DF077914AA144759B21AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
Manifest number: 0FF0
Signing time: Mon 21 Apr 2025 20:00:30 +0000
Manifest this update: Mon 21 Apr 2025 20:00:30 +0000
Manifest next update: Tue 22 Apr 2025 20:00:30 +0000
Files and hashes: 1: LcKRuNts_d9t0qHVWyJtSUkqJwU.crl (hash: fKKjgDCh7XlLX+uUvUlI/DWXKMBM/Apg/YarA9L+O8w=)
2: ZLmfDyi4aWqpFE0PZT7YouoFqII.roa (hash: nbnap/bdTVrLKLJNTBuHrEznwfwZ3oyER6dX2ESBqQ4=)
3: oLrn4a9qOdl-vVdDDDEfOdcaw0M.roa (hash: C5BMAgY6fq8D0n/15WajsEVkkZ7GAkrzRmDZ7QTRZfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:1f:33:f9:4d:f0:77:91:4a:a1:44:75:9b:21:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Validity
Not Before: Apr 21 20:00:30 2025 GMT
Not After : Apr 22 20:00:30 2025 GMT
Subject: CN=eb74e6f63e397f408326f62dc6d3d2bcd180ec9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:09:d6:c2:c0:30:61:20:ea:b1:a1:f8:67:
5b:68:cc:88:99:e9:cf:d5:bf:1f:31:7b:d3:bd:7b:
02:06:23:6f:15:77:d2:04:ae:66:e6:31:78:f7:49:
8d:e5:c5:01:a7:5c:e3:ee:75:3b:82:86:58:80:78:
5f:ed:42:d8:d6:3e:d4:5e:86:de:ac:06:df:46:ff:
00:58:f3:03:0b:a6:06:04:69:b8:ea:19:65:0c:0c:
e4:2d:83:db:e5:80:06:61:97:8c:41:e9:e8:ca:16:
7b:1e:7c:5c:f6:f3:60:2c:43:ca:cc:3d:64:57:20:
c7:ae:0e:17:b4:d3:d1:fe:29:10:71:5c:b9:75:b4:
f5:e8:0f:34:34:6a:81:5b:4d:32:06:c3:91:84:45:
d2:77:4f:c4:ee:b3:b6:1b:dd:91:8f:30:41:6b:c5:
1b:9d:4a:55:30:79:81:d9:16:b9:66:e5:d2:5c:b4:
1a:1c:b2:39:05:1f:61:ae:59:5e:93:13:54:6e:40:
b4:06:cc:d5:59:f2:66:2a:68:f8:94:bf:82:19:d4:
b3:24:69:30:40:3e:b2:59:96:c6:c2:17:da:f3:f9:
f7:36:92:23:b2:75:3e:b8:8d:6d:cb:34:11:6f:37:
db:a4:57:b7:de:c9:00:dc:de:54:45:e1:9d:3c:f1:
66:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:74:E6:F6:3E:39:7F:40:83:26:F6:2D:C6:D3:D2:BC:D1:80:EC:9E
X509v3 Authority Key Identifier:
keyid:2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:34:02:8d:5a:23:67:69:06:26:94:da:05:be:2c:51:db:3a:
cd:c2:21:0c:47:67:c2:71:24:35:d6:a4:c5:46:a6:e3:62:5e:
29:f2:26:79:9c:10:cb:d8:d0:24:d1:2a:af:82:36:89:e8:ba:
62:33:40:e0:c1:dc:a9:f5:39:20:99:a1:e7:df:04:7b:d1:8a:
2f:fb:a5:e1:b9:16:cd:f3:ba:ee:0b:e9:68:d3:d8:d0:ea:82:
ec:a5:73:41:c4:3f:34:9e:ac:7e:4b:21:da:e6:57:86:1f:57:
bf:e0:f8:db:ee:8e:42:e7:80:9c:37:aa:ec:e6:06:51:89:1c:
5f:da:09:93:96:c8:37:d6:1d:c3:8b:a7:96:4e:10:6c:c7:27:
2f:86:93:ea:6d:34:83:68:88:55:cf:a9:a7:f9:f8:69:16:61:
1e:2c:fb:d3:6e:2b:81:34:26:58:08:56:26:e3:02:9e:fd:eb:
42:60:5e:3b:1e:5c:32:87:4b:14:f9:8e:2c:85:2e:74:c3:db:
8a:bd:c0:e0:75:c4:91:40:80:e3:95:43:1c:e5:d2:8a:b0:a1:
cf:d6:e0:2c:ca:ae:0f:87:d4:6c:de:ea:c6:5f:18:2f:8b:5d:
bd:84:2b:12:04:aa:60:d9:31:bb:63:dc:54:3b:b4:61:c8:75:
2e:89:52:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:27:41 2025 by rpki-client