Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.mft
File: Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.mft (raw, json)
Hash identifier: hrsk3Jc137NsNin2Gm0PPgNG8tpOrWxUA523Ft32AJQ=
Subject key identifier: 32:B2:C7:F5:71:E1:45:0B:76:95:63:64:C0:15:BC:E8:FA:5A:C6:4F
Authority key identifier: 2E:EB:F8:A5:B0:20:16:E4:39:43:92:81:97:38:64:4D:6C:A2:56:42
Certificate issuer: /CN=2eebf8a5b02016e4394392819738644d6ca25642
Certificate serial: 0196789F58B57A16D6E3D1642A6DAB7E83FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.mft
Manifest number: 0C22
Signing time: Sun 27 Apr 2025 19:00:30 +0000
Manifest this update: Sun 27 Apr 2025 19:00:30 +0000
Manifest next update: Mon 28 Apr 2025 19:00:30 +0000
Files and hashes: 1: Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.crl (hash: KT3+nIqDEt/ZKcWdg15RFJwgBTlDWbrLDFj2HJL+4tM=)
2: VW4qDKZrndV7Z-51YQQt1hWe-7I.roa (hash: e6Hx4gZ7Dz7JbD/M0yY7GRmntMNu0QhLfKCnMedrpm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:58:b5:7a:16:d6:e3:d1:64:2a:6d:ab:7e:83:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eebf8a5b02016e4394392819738644d6ca25642
Validity
Not Before: Apr 27 19:00:30 2025 GMT
Not After : Apr 28 19:00:30 2025 GMT
Subject: CN=32b2c7f571e1450b76956364c015bce8fa5ac64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:25:a5:6d:0c:75:61:a2:ab:f4:4e:fd:e6:
ee:d2:c0:21:76:55:1a:e0:34:78:cb:e3:76:ff:63:
c5:60:3e:d3:9e:8a:56:ea:cc:93:f7:a0:0c:0f:be:
01:45:ba:2a:e1:1c:5e:6c:35:8d:60:0c:75:5a:c3:
4c:7c:42:7a:3f:3d:20:a2:ac:6f:58:97:57:04:9d:
a3:c4:35:65:a9:15:9b:70:a7:78:4b:86:1e:76:14:
e5:b3:77:36:3e:19:ab:bd:4e:35:be:10:a3:8b:bf:
d1:3e:ae:0c:f2:84:33:cb:ef:5a:82:0e:05:79:9d:
b9:2c:68:cb:e6:82:85:a2:3b:6c:3c:36:60:99:f8:
d4:21:a7:d0:46:c2:dc:aa:46:25:08:e2:8d:d7:5a:
9d:dd:d6:68:ca:72:0a:75:cc:ca:2a:6f:6b:fd:b5:
00:77:40:28:1a:f8:56:86:2f:9f:db:b9:25:fb:8a:
e0:fa:3e:a6:de:4b:d6:1e:d1:c1:96:b9:da:e9:c2:
72:88:2b:aa:9f:fa:07:72:68:73:91:30:20:6d:5e:
a7:de:ca:6b:27:2c:f7:34:81:96:c2:8f:64:24:a7:
c5:14:ea:8e:72:bc:86:c8:e5:ca:de:7b:2d:49:56:
47:2a:31:b2:a9:db:46:a9:0a:fa:72:d5:0b:4e:6a:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B2:C7:F5:71:E1:45:0B:76:95:63:64:C0:15:BC:E8:FA:5A:C6:4F
X509v3 Authority Key Identifier:
keyid:2E:EB:F8:A5:B0:20:16:E4:39:43:92:81:97:38:64:4D:6C:A2:56:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/75044b-7a06-4150-a9ef-5d985369cce8/1/Luv4pbAgFuQ5Q5KBlzhkTWyiVkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e1:f3:59:60:35:28:ae:4c:73:45:06:99:3c:9a:64:82:2d:
ee:f4:10:bc:03:14:fb:a4:da:be:b7:41:ba:2b:27:10:df:79:
a9:9a:8d:7c:5b:c1:ec:e8:d3:8e:55:01:84:e6:05:49:54:96:
90:0a:b1:2e:eb:41:b8:4a:7e:43:a0:a6:5e:47:55:52:53:6a:
ff:4c:ba:e8:a1:cf:19:ba:48:e6:23:6a:bb:24:58:89:e8:16:
7a:37:00:3e:d2:12:93:ed:6f:f0:85:17:1f:0d:55:2e:8d:13:
f9:08:3f:a3:17:dc:35:b9:51:61:e6:8e:d2:9e:70:9d:fe:c8:
8e:ca:e8:00:75:72:24:3e:21:d3:51:5b:7b:b3:ad:a6:ae:09:
44:9f:5f:8d:57:01:22:78:7a:f7:da:79:db:d9:6f:8a:54:01:
59:3a:d8:85:84:ac:10:53:2a:e9:c3:9a:33:3c:f4:e0:23:76:
6f:69:2e:34:a9:7e:cd:27:8c:57:db:b9:52:56:74:82:49:bd:
91:ba:0a:66:76:7e:1e:53:fa:15:d2:01:fd:93:4a:15:62:70:
c3:14:c5:24:f7:b8:c4:de:8f:3d:67:bd:f6:a7:73:8f:18:fe:
14:a1:83:5c:f5:8a:68:df:97:8c:ed:a3:69:7d:81:59:15:d3:
8a:39:ce:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:03:41 2025 by rpki-client