Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
File: LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft (raw, json)
Hash identifier: zCWAgTOwEc4SIwu+D8idr2dwHh9Rw9S+lk1kDiktltA=
Subject key identifier: C1:A8:FF:58:38:49:92:75:3E:FC:48:63:9E:B7:EE:F6:EF:BE:55:AE
Authority key identifier: 2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5
Certificate issuer: /CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
Certificate serial: 01964C34F81E59D9CFF37B3F6CEA5050AB9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
Manifest number: 054A
Signing time: Sat 19 Apr 2025 04:01:01 +0000
Manifest this update: Sat 19 Apr 2025 04:01:01 +0000
Manifest next update: Sun 20 Apr 2025 04:01:01 +0000
Files and hashes: 1: HK2Vi8L-VSUrFJS43CFHzQJcbz8.roa (hash: E5YSpnMWbKYKY1PUN7i5gprBfIcHK0dY28fjbucPCYI=)
2: LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl (hash: YW8VNN+Cso/bl1Fq8TDn/LyH+1a0UXSR28Z2AMYDnBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:f8:1e:59:d9:cf:f3:7b:3f:6c:ea:50:50:ab:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
Validity
Not Before: Apr 19 04:01:01 2025 GMT
Not After : Apr 20 04:01:01 2025 GMT
Subject: CN=c1a8ff58384992753efc48639eb7eef6efbe55ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:80:b1:48:6b:62:73:d4:6d:7e:8a:d6:01:
f4:80:28:bc:5b:0c:86:e7:80:61:d5:b6:f7:04:4b:
a4:ce:0d:2f:16:31:23:44:0b:b6:a7:a5:0e:6e:10:
c3:94:4b:f1:1e:7d:7c:be:24:7d:12:c9:89:6d:0c:
cd:44:9b:37:1f:06:e6:50:ee:c9:2f:27:fd:1f:1d:
be:eb:ba:4a:fb:e7:d5:2f:09:0c:a0:f0:0b:71:c9:
d9:0e:d2:3f:70:25:93:ea:50:5d:51:7f:9e:17:22:
c9:e2:bf:ac:a5:e3:bc:4f:08:e6:f4:5c:f8:aa:ae:
3c:81:31:1e:cc:0a:1f:9b:25:0c:ba:63:7f:48:3c:
31:02:f6:50:f9:c5:19:da:3c:3d:ce:21:f0:8d:b2:
69:4c:ce:e8:2d:61:73:74:ab:18:35:1a:c4:e1:b4:
12:d0:0b:63:2a:8b:05:f5:99:83:66:e3:9e:60:05:
d8:ec:a9:7e:05:28:ee:63:49:5d:87:07:e7:14:08:
c9:0f:d8:23:1c:0c:f8:37:98:ae:00:9c:51:b0:08:
0e:80:ea:86:69:ac:9c:46:7a:49:07:ae:6d:35:4e:
cf:15:8e:da:c5:c2:d7:74:1f:f8:eb:ad:84:72:0e:
c8:1b:6a:98:f6:63:39:00:07:86:32:36:06:24:f3:
02:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A8:FF:58:38:49:92:75:3E:FC:48:63:9E:B7:EE:F6:EF:BE:55:AE
X509v3 Authority Key Identifier:
keyid:2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:79:2f:a6:10:b6:8b:37:92:63:e5:84:1a:f8:c4:6c:87:6e:
a7:82:5c:d5:4c:ad:26:15:7f:83:fe:3f:e2:fc:5a:4c:ad:bc:
2a:36:01:df:bf:42:8f:57:c3:78:f8:91:69:cf:8a:ee:a0:23:
90:21:ce:1b:4a:ab:49:57:d8:13:e7:46:9c:ae:e3:50:46:3f:
82:7b:16:21:53:5f:62:14:55:95:26:3f:b8:75:00:d0:96:af:
d4:25:3b:c5:38:05:11:1e:db:2c:37:b4:99:12:80:bb:38:cd:
3f:c7:56:14:8f:51:95:aa:15:a9:26:14:31:87:e5:bd:77:87:
dc:04:99:49:8f:2a:12:4c:47:1b:d8:ed:01:c3:d5:a8:08:19:
4a:3f:22:17:ee:02:02:c3:f4:5e:8f:02:35:4b:a7:c0:80:7a:
67:b6:bd:10:47:a4:3c:9d:49:1d:94:cf:96:73:e2:15:8c:6f:
61:fa:44:c3:5f:91:e3:db:24:09:e7:97:84:e7:3e:02:94:9e:
09:46:30:99:76:5a:a5:f1:50:ad:4b:bb:3e:8b:a2:72:7c:67:
ab:de:6e:43:07:37:76:08:5b:37:c4:8c:18:fe:f6:75:59:4f:
01:31:0c:26:fd:d1:30:d2:cb:ab:bc:b6:21:f1:5a:2e:55:b3:
cb:a8:1d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:27:58 2025 by rpki-client