Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
File: lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft (raw, json)
Hash identifier: Lx97Q5se+KdB5/3ptKgJUzADV4VLME5Xm/WD3IISYFg=
Subject key identifier: 15:D0:A0:4D:E6:9B:23:F0:74:6A:92:50:D3:67:3B:ED:AF:A2:D5:72
Authority key identifier: 96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
Certificate issuer: /CN=96edc682a944005117b8febed6dc8bac060f329a
Certificate serial: 01950F7D549C8C081118914C3072A0287668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
Manifest number: 034A
Signing time: Sun 16 Feb 2025 16:00:26 +0000
Manifest this update: Sun 16 Feb 2025 16:00:26 +0000
Manifest next update: Mon 17 Feb 2025 16:00:26 +0000
Files and hashes: 1: GuRsW05KP8iWPMSp7vb_kToeinc.roa (hash: xtfuu25jYNsHOYwVnrJ3v+/nadbPfCZESTGZfRgdXIM=)
2: lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl (hash: gyfu8LdLpEsayqi9dP5qqg3hp3WKDqDj2rJ8xdlJLGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:7d:54:9c:8c:08:11:18:91:4c:30:72:a0:28:76:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96edc682a944005117b8febed6dc8bac060f329a
Validity
Not Before: Feb 16 16:00:26 2025 GMT
Not After : Feb 17 16:00:26 2025 GMT
Subject: CN=15d0a04de69b23f0746a9250d3673bedafa2d572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:e1:1c:37:dc:14:fd:72:00:60:12:0a:db:
a6:15:4e:d4:70:f0:00:9e:33:e8:14:11:c4:97:f8:
00:ae:e4:b7:20:bb:a3:c0:23:72:32:59:66:01:1a:
bd:8d:2a:b4:c6:e8:c3:5c:19:fe:50:81:ab:e4:ac:
da:80:3a:ee:a1:d4:e1:b2:1d:86:13:b4:2b:da:87:
71:8d:88:8f:b7:64:d5:83:10:58:92:7c:92:96:70:
89:aa:d9:cc:9d:59:50:39:9d:0a:37:c0:bd:83:bb:
25:ac:18:55:e5:b2:a6:fd:c8:9e:52:cd:7c:f2:bb:
54:8c:95:7f:b3:30:f0:6a:f4:6b:3b:2a:24:f4:12:
09:e2:b6:8a:5c:48:be:c2:6a:86:84:b7:a7:b9:5f:
0d:4b:f6:8b:2b:33:75:50:30:4b:c2:12:9b:e6:df:
a0:8a:22:eb:ce:13:12:e1:45:33:b7:5c:48:ae:eb:
2d:cf:61:66:74:d0:3d:ab:50:d8:26:52:a0:0e:06:
ce:27:2c:95:76:48:a7:1f:19:b7:d3:76:38:c5:0a:
76:45:41:af:94:47:23:c4:e2:6a:15:4f:5c:88:3f:
34:cf:57:04:56:9c:8f:69:2f:a3:21:b9:e1:15:40:
67:bc:3f:ed:db:a8:1a:7b:02:9c:80:45:94:94:bf:
81:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D0:A0:4D:E6:9B:23:F0:74:6A:92:50:D3:67:3B:ED:AF:A2:D5:72
X509v3 Authority Key Identifier:
keyid:96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:41:a5:c1:b0:5f:9c:ef:68:ab:d5:d4:fd:10:c6:f1:00:bc:
01:bd:44:14:b2:e6:32:15:f3:99:f2:36:25:e2:74:77:1a:c8:
36:e3:3b:eb:7e:eb:3d:7b:4e:4f:02:16:fc:08:40:36:46:63:
fb:41:b3:3b:43:9f:b8:2d:72:f2:83:33:b0:57:e1:22:92:86:
5e:36:19:41:5a:5c:99:dd:f8:cf:42:45:75:49:19:d1:ba:c4:
8b:48:cf:ce:86:4d:2a:4d:da:b8:3b:76:7a:5c:ba:09:00:7b:
82:15:2a:de:05:72:cf:0a:9a:47:06:f8:1e:20:8e:67:42:f5:
d2:e3:0d:e6:ef:a1:f9:ad:b4:c2:f6:24:63:a8:3f:d4:3d:24:
80:d6:57:c6:8a:29:d3:71:fc:9c:6b:9b:9f:72:ea:60:b4:c9:
70:15:94:45:e2:b3:45:d2:f5:bf:1a:b6:17:0f:39:ea:3e:75:
bb:d2:42:9a:85:1a:ab:b0:c3:18:06:d2:44:d6:76:fe:43:3c:
35:95:c4:87:54:88:b6:ec:54:09:c7:b1:cd:75:4a:fc:fe:64:
e1:52:c2:5f:3b:95:28:cd:68:f7:f0:40:d6:9c:3e:a9:cd:18:
ff:eb:64:1d:89:a0:00:3b:ab:a9:29:03:9d:34:1e:9f:db:11:
d1:f6:13:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:52 2025 by rpki-client