Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
File: LvuebXVm3--dXLmNkpy3AyPTifI.mft (raw, json)
Hash identifier: DEPiXaqbFr0H98jdOXOctvXcECJu4uwDlBHWvO3K1+4=
Subject key identifier: 7D:9F:A4:E6:52:9D:9D:99:48:DE:8B:48:B5:00:08:0E:05:26:A0:48
Authority key identifier: 2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2
Certificate issuer: /CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2
Certificate serial: 019677C38DD0EFDCD99AFF9100404AFDEC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 15:00:26 +0000
Manifest this update: Sun 27 Apr 2025 15:00:26 +0000
Manifest next update: Mon 28 Apr 2025 15:00:26 +0000
Files and hashes: 1: LvuebXVm3--dXLmNkpy3AyPTifI.crl (hash: In9FH6w6joniYiKVOEz1PrxbAZz3AKEN56bihyEgDjQ=)
2: crLPMCLXufFmk5JWVKp5VcK8TgM.roa (hash: YNo5LlcmxdPpx/UYh+crxJHa+r1xiA2h5iT8bwm5x4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:8d:d0:ef:dc:d9:9a:ff:91:00:40:4a:fd:ec:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2
Validity
Not Before: Apr 27 15:00:26 2025 GMT
Not After : Apr 28 15:00:26 2025 GMT
Subject: CN=7d9fa4e6529d9d9948de8b48b500080e0526a048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:17:e9:d8:b4:08:82:5f:29:80:0a:83:fe:9a:
21:78:27:5a:8f:4a:c2:53:55:4a:7f:fd:c0:ad:97:
e6:61:92:fd:5e:00:d4:60:a3:b6:3a:75:32:27:fd:
7d:04:25:df:fc:4a:93:a0:28:25:ea:b6:aa:be:6e:
64:4b:dd:6a:b4:9f:21:02:d8:eb:fc:af:3b:a9:15:
97:87:a8:10:e4:92:39:bd:d8:da:ea:aa:15:1d:15:
3c:a5:32:0e:a2:5e:62:63:ba:2d:ae:fd:3d:59:64:
b1:9d:75:15:8d:35:bf:43:57:8b:13:53:04:eb:2a:
7e:94:fa:9a:87:7f:cb:85:86:62:71:54:5f:93:85:
f3:cf:17:1d:3a:ca:fb:bf:09:a9:20:ae:d1:0e:00:
70:f2:e0:9e:51:55:24:f2:04:2c:38:15:6f:b7:db:
70:0d:b4:7e:7d:22:54:ef:76:38:5a:e0:be:e7:b7:
6f:fa:88:d7:44:82:17:73:ec:df:85:77:cd:8c:b0:
a9:62:b5:40:33:b7:96:b6:b0:f7:5a:8c:ae:29:94:
02:b2:a4:3b:68:27:7c:34:65:fe:1e:ad:9d:b2:21:
42:66:84:b0:aa:3f:9f:6d:51:07:79:00:14:f9:da:
e6:a2:82:94:77:dd:04:48:c9:ff:70:1c:ca:1a:65:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9F:A4:E6:52:9D:9D:99:48:DE:8B:48:B5:00:08:0E:05:26:A0:48
X509v3 Authority Key Identifier:
keyid:2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0e:e2:85:1e:2d:d5:e9:9c:a7:87:fe:43:b0:fd:34:f0:b1:
d8:9f:fc:24:3b:ae:40:4e:97:b8:3b:f8:c0:fe:d4:c4:73:e7:
77:87:7f:52:9c:a9:85:b8:08:b2:9b:49:7c:af:ce:af:a1:16:
93:f2:a1:e8:4f:6f:dc:4d:75:8a:c7:f1:ca:3d:cc:a1:b0:64:
df:25:b3:8d:46:d5:f4:d5:d5:bc:53:12:7c:7a:ba:3f:04:aa:
f3:a2:f2:a5:5b:69:ea:aa:89:55:5d:f2:86:e6:ee:31:91:0c:
87:63:d0:57:07:41:81:bb:56:56:85:51:bc:3b:0f:cb:ba:13:
99:51:6b:b3:6b:6f:a4:c5:fc:16:ab:57:91:67:92:09:54:13:
43:de:25:43:9f:be:b1:d6:e1:b9:6b:ee:25:95:1e:28:92:cb:
eb:7a:a7:f5:77:59:19:02:b0:58:b9:0d:d3:77:58:d9:b4:66:
f7:eb:84:18:12:e0:07:ad:1a:9c:ab:4a:c6:cd:de:0a:e4:06:
df:ac:91:cb:e1:91:fe:7a:06:d3:f3:4d:1b:31:4f:6c:f2:c9:
ec:d9:0d:02:29:ac:3c:be:e8:65:dd:25:4a:84:31:e9:81:13:
a2:ef:c4:70:d7:d2:0c:92:fc:2e:59:14:3f:22:59:25:28:cf:
16:99:a1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:11:35 2025 by rpki-client