Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
File: LO4pmOhvp0iOa2T47bwDLOFdG8w.mft (raw, json)
Hash identifier: RxCsCPyd92JaN7vYALV3aK7UiVfAiI7ca66wMk9w5VI=
Subject key identifier: E6:30:FD:02:F2:F5:5C:96:14:D1:17:2B:21:1A:61:62:91:C9:2F:C4
Authority key identifier: 2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
Certificate issuer: /CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Certificate serial: 019682EC498FF223614077B53BE33F30428D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
Manifest number: 0C99
Signing time: Tue 29 Apr 2025 19:00:45 +0000
Manifest this update: Tue 29 Apr 2025 19:00:45 +0000
Manifest next update: Wed 30 Apr 2025 19:00:45 +0000
Files and hashes: 1: LO4pmOhvp0iOa2T47bwDLOFdG8w.crl (hash: eWyffNzfy1LBvhbkY7PVBih0noKn/pawwAaUl0W1qr0=)
2: YXxh1XSQz2hJg4wU0JwpLVfgRPc.roa (hash: fKQqPt+1938ZgXlhZdhE3xLSu/gu+cSj1bUfoNu6uac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:ec:49:8f:f2:23:61:40:77:b5:3b:e3:3f:30:42:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Validity
Not Before: Apr 29 19:00:45 2025 GMT
Not After : Apr 30 19:00:45 2025 GMT
Subject: CN=e630fd02f2f55c9614d1172b211a616291c92fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9e:b2:a8:6e:5f:76:38:a3:ee:c4:99:7f:1a:
3c:6b:08:be:5a:74:88:fc:75:d3:7c:ca:d6:43:01:
18:73:7b:25:a1:2b:05:7f:56:0e:22:ea:fc:0e:17:
bc:9d:85:3c:4e:5c:37:15:13:aa:30:f2:14:aa:5c:
75:79:b0:b6:08:19:8d:1f:8d:d9:77:42:42:0e:95:
0f:39:c9:66:c7:fa:ec:76:15:ff:20:ee:46:8d:dd:
b3:64:94:43:d2:51:6c:21:3f:34:68:11:95:a8:e3:
7a:ed:bf:97:5c:5c:c0:2b:e4:c3:68:1e:ae:58:93:
7d:cd:66:a6:92:0b:bf:7a:f1:ab:4f:b1:14:9d:64:
c0:16:a7:23:f5:62:8e:12:78:11:03:05:5b:57:58:
89:dd:6d:b1:67:af:59:e0:d7:ba:68:a4:aa:cf:94:
d7:a4:0d:a5:01:8c:4e:43:70:e8:f6:eb:e6:52:15:
ea:e3:b0:c7:56:c8:c4:c5:ba:2c:80:27:7d:8a:d2:
2f:29:cb:45:c1:eb:bb:23:ed:81:53:b6:ac:bf:7b:
a6:f7:c0:63:08:5c:5b:99:76:ba:6f:6f:fa:e2:aa:
93:55:29:1e:67:76:11:d3:5e:21:ef:46:89:7b:16:
8a:a4:d7:e9:74:54:24:74:19:9a:e1:ab:20:21:98:
67:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:30:FD:02:F2:F5:5C:96:14:D1:17:2B:21:1A:61:62:91:C9:2F:C4
X509v3 Authority Key Identifier:
keyid:2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:95:50:0a:2e:61:82:88:c0:6f:eb:34:b4:e0:ae:1f:69:5d:
fc:0e:3b:fd:ce:99:ef:b7:29:70:ac:4d:a0:1e:38:9d:b8:54:
01:b9:c7:e8:dc:cb:ac:05:5a:55:54:3c:fb:4c:8f:65:f5:70:
8d:9c:18:de:de:cc:f8:db:9f:ea:1c:13:cc:18:ef:54:a8:ee:
76:72:a5:42:70:07:74:04:cd:9e:fc:52:37:ff:10:fd:f8:66:
8b:74:d2:01:93:99:4a:39:de:ab:e0:5b:be:57:f6:ad:ab:03:
67:da:c9:37:77:c5:6e:de:ff:45:fc:13:f7:c8:1e:63:fa:d6:
92:16:31:80:b7:6f:90:fa:9c:d2:b9:c8:b9:93:cc:d0:a0:79:
af:4c:cb:14:fe:b1:a8:2d:13:f0:7a:87:bc:a2:ee:92:35:fb:
66:83:29:3f:7a:ce:7b:fa:6c:98:76:8b:59:0e:b9:db:a0:45:
d4:7e:da:bc:11:91:5f:8e:82:19:27:52:c2:e6:a8:e0:5b:11:
e2:fd:f1:cd:87:df:c9:b0:5b:77:16:80:a6:05:40:c8:5c:0f:
2a:a1:aa:97:d5:18:e5:7e:04:43:8d:dd:33:71:37:b0:f1:f6:
a2:87:29:40:44:b3:35:fd:c8:34:4a:c2:f4:a2:95:28:01:4b:
8c:ff:5b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:15:37 2025 by rpki-client