Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
File: LAX_pc0oy9ANAmhELHiI-yqjpfg.mft (raw, json)
Hash identifier: jrdG4DkeX0gBkna9ArN0Oy7Teqoo1kS+Xao6jc/uqDA=
Subject key identifier: 71:D3:A7:D3:2D:7F:0D:E5:CA:F9:89:74:6C:75:5A:B9:8A:45:1D:51
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 019653EE3EEA9BBDFA48189C059EBB5E90C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
Manifest number: 0AC5
Signing time: Sun 20 Apr 2025 16:00:44 +0000
Manifest this update: Sun 20 Apr 2025 16:00:44 +0000
Manifest next update: Mon 21 Apr 2025 16:00:44 +0000
Files and hashes: 1: LAX_pc0oy9ANAmhELHiI-yqjpfg.crl (hash: IzG7d1asX8sw6Op+pu8uu8LoEB9FCsCe/amNZVFqzm8=)
2: Uev3ms-PRGrivyRSUw9HwGncKw0.roa (hash: IzYHkFLw712ufmc2//GI0v4Y5gTYHcbd5XwyKaiB5sw=)
3: o_E0IJVdKhbQRmHC6Pylr1ZYJik.roa (hash: QOVqaW1uvzMy3GoiJe9ujvNbGlD/IhJkIYNAUlIWSVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:3e:ea:9b:bd:fa:48:18:9c:05:9e:bb:5e:90:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Apr 20 16:00:44 2025 GMT
Not After : Apr 21 16:00:44 2025 GMT
Subject: CN=71d3a7d32d7f0de5caf989746c755ab98a451d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:ff:60:ee:07:c7:d6:a4:b8:e7:1b:b1:56:
b0:c5:3b:f7:9a:83:29:bc:ac:50:6c:8b:69:92:62:
c1:4b:5a:77:00:fa:09:f4:53:94:da:52:b9:5d:0c:
b4:1a:d4:6a:d4:d7:d9:2b:f2:91:03:fa:77:c0:6e:
71:0e:2a:f8:11:e1:71:18:60:1d:ce:2d:80:a9:54:
93:81:3e:14:3c:4e:b8:fc:40:b8:c4:24:a5:b4:e4:
23:b1:c6:a1:5a:00:21:27:0a:cb:74:86:10:7b:08:
5c:6a:0c:17:67:de:6f:50:ab:49:dc:50:d7:85:6c:
7b:c7:3c:30:75:8d:87:c5:fb:43:f9:4e:25:f0:e0:
b0:ae:2c:9a:c4:65:13:41:bc:9e:74:9f:8a:16:be:
46:9f:4d:cb:59:c6:2c:9e:c2:07:49:cf:76:69:91:
fc:2f:d1:81:a7:27:d6:f2:4a:a6:17:ce:71:2e:63:
16:65:9b:b1:59:3e:4f:b9:c9:8e:4e:e5:88:9f:d0:
45:c2:cf:73:34:e8:41:1e:2d:2c:8a:02:b2:24:78:
05:18:90:e3:f8:da:76:6e:b4:c6:51:5a:ec:27:d3:
62:3b:67:2b:cf:67:36:d3:fe:72:13:02:dc:db:75:
c3:e6:1f:bb:45:48:ee:af:f5:3f:d3:78:23:77:f0:
f4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D3:A7:D3:2D:7F:0D:E5:CA:F9:89:74:6C:75:5A:B9:8A:45:1D:51
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:02:4c:f9:41:eb:11:a8:98:70:6f:91:fa:0e:82:19:70:a1:
f9:a8:d0:79:72:4d:fe:43:3d:1d:8f:bf:52:f2:fe:af:33:74:
a6:61:d7:2e:41:bb:ca:b4:13:a1:fb:99:94:9c:64:47:89:44:
23:1e:40:14:e0:36:ba:04:33:40:c8:06:64:d5:c7:83:95:22:
47:43:fe:b9:17:fd:59:07:78:d3:73:16:31:71:1b:42:98:28:
bf:69:2d:3c:3f:85:ca:fb:7c:8d:1f:d0:44:b8:01:c0:e4:51:
26:7a:39:f4:5f:f6:5b:b4:22:48:99:56:45:2e:8b:90:43:08:
1b:82:53:ad:fa:f8:67:24:9d:28:df:ce:07:53:34:b9:0c:51:
56:f4:c6:48:62:60:0d:07:01:92:9b:1a:98:d1:66:a4:37:31:
58:b8:6f:e6:69:f4:87:35:03:04:82:5b:36:95:ab:fa:52:b8:
94:ee:a5:2a:dd:a3:86:c6:b5:f2:d4:e9:0f:50:32:a6:41:71:
d8:5e:aa:57:66:28:23:00:70:26:15:76:78:6e:4f:e5:19:d5:
2e:e3:5e:00:04:b6:79:17:22:d5:8e:60:d8:53:8b:c2:96:cc:
2f:b3:25:52:cc:e8:2e:42:1e:37:d2:f5:a7:a9:94:c1:6d:d9:
fb:3c:6b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:46:51 2025 by rpki-client