Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
File: LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft (raw, json)
Hash identifier: 9jXCigTWxhg5O1/B/F94JTGEqT3x9fojjeGblQ7y4Xo=
Subject key identifier: E5:19:6F:5B:DF:A9:9E:D9:41:AD:52:B7:DB:B9:5D:A1:92:61:F7:70
Authority key identifier: 2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
Certificate issuer: /CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Certificate serial: 01964067AE2907A88D21333024F51C9CC1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
Manifest number: 14F3
Signing time: Wed 16 Apr 2025 21:00:58 +0000
Manifest this update: Wed 16 Apr 2025 21:00:58 +0000
Manifest next update: Thu 17 Apr 2025 21:00:58 +0000
Files and hashes: 1: J1sR_X7OX5sAAqL6nR2mRajFZCc.roa (hash: JEROqpt8+G0T5t0g0HCpE0svxugQA9UuID00O94SMT0=)
2: LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl (hash: MDY71xtbOX2TGZW13+YZGudG4viWtRUWhiF3wgewPqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:ae:29:07:a8:8d:21:33:30:24:f5:1c:9c:c1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Validity
Not Before: Apr 16 21:00:58 2025 GMT
Not After : Apr 17 21:00:58 2025 GMT
Subject: CN=e5196f5bdfa99ed941ad52b7dbb95da19261f770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a0:7c:92:24:ec:e4:a2:43:ae:d7:3d:8e:f3:
7d:00:57:1c:36:5d:29:5a:c0:ec:41:db:ca:fd:09:
a7:a7:a9:94:1f:58:ec:d4:f9:de:f1:72:80:06:6d:
ea:3a:21:38:c5:d5:2b:39:38:1c:af:4b:c7:04:7d:
3b:88:93:e0:23:cd:da:d3:42:d5:3e:cb:79:4d:c5:
9c:45:dc:4c:b0:04:ad:ff:2f:28:bf:10:3a:81:b4:
39:da:28:40:a3:96:79:8d:98:dd:f6:c4:2c:53:44:
62:f1:a9:07:5f:5a:b9:64:04:95:eb:5c:0f:27:69:
d2:a8:51:5e:ef:92:c8:0a:4c:ba:04:8e:ab:53:61:
8d:16:5f:fe:f4:5e:18:44:b0:9b:3c:b1:e1:b9:9a:
b6:6d:99:4f:ce:76:6e:f4:f6:44:aa:35:d3:62:36:
f4:dc:b1:a7:cd:b9:ac:80:18:b9:0d:d2:a6:77:50:
63:b8:72:24:89:23:03:10:28:dc:0d:94:1c:ae:3d:
15:50:fa:78:ce:46:1b:27:e0:fc:03:5a:00:fd:8a:
66:6c:e5:f0:37:a0:1d:d4:bb:a2:78:ee:53:f3:65:
a0:40:b4:b5:6c:f4:af:54:c3:22:80:c9:20:bf:2e:
fd:8f:81:6f:57:51:df:1d:1e:4c:39:70:80:46:17:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:19:6F:5B:DF:A9:9E:D9:41:AD:52:B7:DB:B9:5D:A1:92:61:F7:70
X509v3 Authority Key Identifier:
keyid:2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8f:7c:10:61:a1:e8:45:69:1a:8b:82:98:ce:f9:5f:1c:23:
8d:a9:f8:4a:61:49:12:4b:f7:2b:52:ad:1b:69:98:3a:a5:03:
8e:82:20:f7:c1:ce:0b:ca:c7:26:2e:0c:4c:6a:99:61:43:3e:
c6:e9:04:f5:b8:26:90:a8:c8:76:aa:2a:44:62:02:ba:12:38:
1e:94:6f:89:8d:1e:d5:af:5c:cd:70:70:9c:6b:01:f7:30:a6:
2e:17:21:69:92:f5:dc:ca:7a:6f:81:55:0a:07:5b:0e:5e:1b:
a2:da:ea:97:9d:88:2d:b1:18:db:99:d8:8e:53:4d:9a:41:87:
0a:04:6e:6f:d9:2d:ca:c0:40:e1:3c:b2:fe:c4:bc:29:39:0c:
a4:ae:eb:72:2e:18:66:a8:dd:94:ad:dd:18:37:a5:4d:0e:40:
00:cb:66:97:47:8e:05:d3:3e:69:90:a5:58:f8:e3:6b:c6:72:
e6:2b:91:3f:36:76:8a:7c:1f:3a:c6:1e:b2:4d:a2:c8:2d:6c:
14:8e:f0:0b:4c:6b:76:61:ca:ee:cc:9d:78:47:2f:fc:4e:25:
81:0f:00:a5:50:c6:cb:f6:81:30:e8:13:16:29:33:02:41:ee:
05:64:9c:a3:8f:38:0c:4c:11:7d:e9:d6:ea:44:1a:ee:2e:e8:
b3:4f:c1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:01:54 2025 by rpki-client