Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
File: _-LSEcNBNyjvBNJUQlgoqLQYHuA.mft (raw, json)
Hash identifier: AfP7fqZFuAYcb3QW2TEdDNfji9mKnZChu5eT1rkng1g=
Subject key identifier: FA:AC:72:FE:4B:A7:8F:29:23:E8:09:D5:3A:7A:62:B4:1D:D5:FC:F2
Authority key identifier: FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
Certificate issuer: /CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Certificate serial: 0196753084414731FFD3BEFB68037B9FF552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
Manifest number: 0458
Signing time: Sun 27 Apr 2025 03:00:35 +0000
Manifest this update: Sun 27 Apr 2025 03:00:35 +0000
Manifest next update: Mon 28 Apr 2025 03:00:35 +0000
Files and hashes: 1: _-LSEcNBNyjvBNJUQlgoqLQYHuA.crl (hash: BYGSnmMsj3jS2raFZkQKH63NdjskGMVS9dAuvfdFeqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:84:41:47:31:ff:d3:be:fb:68:03:7b:9f:f5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Validity
Not Before: Apr 27 03:00:35 2025 GMT
Not After : Apr 28 03:00:35 2025 GMT
Subject: CN=faac72fe4ba78f2923e809d53a7a62b41dd5fcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:85:dc:fa:db:b4:bc:e2:66:94:71:fb:da:5c:
74:95:20:ba:6a:59:f1:d0:39:80:a2:79:2b:a1:7b:
93:e2:5f:ab:3d:c5:22:0c:38:73:21:fa:a2:d8:86:
91:41:24:23:88:69:0b:22:83:fd:3a:b3:44:9c:8a:
cb:4d:ff:7b:3d:86:07:24:9d:c6:4b:13:31:a6:b6:
a6:a5:93:3e:e5:63:4d:46:18:f4:c7:d6:ac:e0:f7:
73:8b:6d:2b:41:a4:a0:cf:e5:41:d5:75:4e:c1:bb:
f2:49:8e:47:69:2e:bd:92:c9:83:7b:79:71:1e:79:
13:1d:a8:ab:fe:3a:c4:0e:cc:5d:dd:55:17:0e:e1:
be:bc:c8:9b:44:1f:8e:68:3a:42:f6:e7:5c:f7:37:
10:05:e3:09:7d:68:cb:3e:7d:d0:5e:92:5a:49:d5:
4f:66:7d:35:08:2a:87:9e:21:94:ff:bd:40:57:6e:
d0:4f:73:c7:47:5a:f7:7c:5d:07:b2:fc:89:53:24:
1d:21:87:ad:35:e0:0f:cf:7e:51:df:e3:86:28:bb:
27:24:42:6e:5d:0f:8a:74:2b:b6:8b:d2:c1:41:80:
c6:fe:41:83:35:74:f5:12:7a:ba:2b:44:ae:64:50:
a0:75:8e:be:79:b3:d3:56:45:df:77:a0:8b:9f:d9:
67:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AC:72:FE:4B:A7:8F:29:23:E8:09:D5:3A:7A:62:B4:1D:D5:FC:F2
X509v3 Authority Key Identifier:
keyid:FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:41:6a:d9:04:a1:87:1b:bd:f2:96:b7:2f:81:96:20:3c:ab:
b8:af:01:97:85:12:61:4e:e1:6b:c9:13:43:45:83:a0:33:3d:
6c:4f:e0:b3:a3:30:26:74:4f:20:1f:6e:d9:c4:d2:e5:d3:6f:
0f:65:5d:1a:4f:7b:73:14:16:97:2e:65:59:c7:f1:af:c0:9f:
a9:35:d0:1f:84:31:45:63:69:12:f8:76:c2:5a:f0:db:15:fc:
32:b3:4b:87:b3:05:8f:bd:c8:4a:a8:cc:a8:55:ac:6f:cf:cd:
88:50:b6:11:0d:dd:d3:d7:20:fa:bb:4a:6e:e9:7f:2e:bf:bd:
35:1d:08:5c:08:e0:09:16:ed:94:74:9b:ce:49:67:c1:40:92:
c5:65:e5:23:d2:93:18:ba:a6:b0:e1:74:3a:03:93:db:5d:27:
7c:18:a0:b9:4a:0c:1d:e5:e9:a4:d6:64:e0:33:d2:98:47:59:
c7:e4:40:b9:6d:cb:a9:c1:ab:9c:62:0b:6b:2b:01:30:00:96:
05:71:41:62:43:3b:66:9e:e1:44:53:58:91:7e:cc:26:83:3f:
5b:4c:48:f1:35:a6:50:ca:7e:ac:45:24:43:70:6d:fb:1c:e4:
6e:42:76:27:c8:a7:07:97:8f:5f:ac:b1:2e:06:9f:4c:33:15:
e6:17:10:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:56:33 2025 by rpki-client