
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
File: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft (raw, json)
Hash identifier: +a/eL3bgCc73qFMYLqDhjprPlVxdR2dD/yMiBz+3URw=
Subject key identifier: 3C:37:B5:48:4F:FD:CB:F1:BA:66:B0:D2:A4:7A:CC:41:D2:79:67:CA
Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Certificate serial: 019686FFC338A8A0C08B0ADE1927F1374D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
Manifest number: 0DD3
Signing time: Wed 30 Apr 2025 14:00:30 +0000
Manifest this update: Wed 30 Apr 2025 14:00:30 +0000
Manifest next update: Thu 01 May 2025 14:00:30 +0000
Files and hashes: 1: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl (hash: IvEEDj1T/3YJOPdAcaNRAhoWNIVLiOtV+z62w+Al9g0=)
2: _6CqBvaGO8l98qKQS4UQ5uuqsF8.roa (hash: FoGvspw+M2CgRLwzfJ/bGgi4xROU+ZoOm3ySFK+vQAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:c3:38:a8:a0:c0:8b:0a:de:19:27:f1:37:4d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4
Validity
Not Before: Apr 30 14:00:30 2025 GMT
Not After : May 1 14:00:30 2025 GMT
Subject: CN=3c37b5484ffdcbf1ba66b0d2a47acc41d27967ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ed:85:c3:d1:47:37:93:2c:63:2f:e1:28:d0:
58:a4:e0:4b:ee:fb:8b:54:52:b2:74:f3:47:a6:73:
ec:af:9a:e1:da:6e:5e:3e:1b:60:26:f2:2d:6f:83:
4a:f0:59:61:0c:2f:1a:fd:df:ef:c5:f8:2f:f7:aa:
5c:96:08:a1:90:f3:4f:e7:a1:7a:1a:69:b4:5b:c2:
f1:5a:d7:2d:ad:77:c7:90:ec:20:6d:c3:04:35:18:
29:fe:ae:cd:f0:71:cf:b7:4a:88:c2:9b:8d:48:a6:
5b:bb:2a:fa:fa:ed:f5:0b:2f:c5:a8:49:15:a8:ae:
11:de:0a:b9:6a:3f:8e:86:af:5b:e7:7f:a8:fc:77:
ca:af:26:f9:19:45:f3:16:6f:62:8e:67:cc:bf:39:
f3:87:a5:11:f1:fd:e2:5a:d8:f0:55:38:e5:ce:1e:
e8:b6:70:d1:8f:3f:7a:a2:ed:e8:a2:90:02:18:6b:
d6:53:fc:51:c2:0f:a6:00:e9:67:10:eb:46:43:9c:
b3:b4:7e:c3:c1:ab:22:9d:c4:74:80:f8:3c:41:7a:
fa:4f:a7:62:ff:fa:c0:75:18:a9:47:87:7b:76:d7:
d2:fe:09:2f:1d:4c:1f:09:9d:98:09:32:f3:36:c7:
42:5b:bb:76:3d:a9:3b:58:f5:53:18:38:ee:be:6a:
00:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:37:B5:48:4F:FD:CB:F1:BA:66:B0:D2:A4:7A:CC:41:D2:79:67:CA
X509v3 Authority Key Identifier:
keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f6:82:ad:ed:f6:d2:09:58:29:cd:33:19:7d:46:75:20:f4:
87:37:66:5a:99:57:91:1a:67:5b:7b:60:bf:06:ca:ff:f8:c4:
3f:13:2d:89:ad:4a:bc:8d:a8:67:0e:12:61:7b:e6:35:ba:d2:
7e:24:ef:3d:a1:67:aa:de:51:cd:56:d9:0c:d2:35:a9:7c:07:
ed:b0:b1:55:89:9d:13:1c:4e:58:02:92:c6:c1:05:15:4c:d4:
c9:da:fb:21:56:36:32:fc:36:fb:70:88:9f:71:73:aa:7c:eb:
e7:5a:60:4f:27:ee:61:3b:70:fb:ad:c7:66:23:05:b3:83:61:
6d:92:f6:3d:a1:a8:75:0b:0a:42:3c:ec:db:29:0a:d5:f3:fb:
5f:4d:ed:d6:a2:24:5f:67:e2:0e:77:69:e3:c9:fb:64:26:81:
1a:7c:b9:7d:43:77:e2:a1:8a:b3:19:5b:5c:3d:6f:64:74:cd:
f2:a5:b6:c1:cc:14:b5:34:99:c3:c0:bf:86:2a:43:d2:81:2a:
75:4e:18:db:1d:92:7b:05:33:90:1a:04:c5:38:7a:7c:fa:76:
ae:73:68:c1:01:08:9e:fd:c0:93:fe:86:e4:bb:68:c5:db:1c:
ab:cf:d7:12:41:75:a5:a3:36:e8:79:3c:c4:81:88:ca:94:97:
ea:a2:11:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:55:40 2025 by rpki-client