Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
File: LRGXVPwU_-eWimUWvUm9slYzuIc.mft (raw, json)
Hash identifier: dCLWw0m2iuzX+p/SyYEJIHqD0B8kgEY/MaIp2F7l2Lw=
Subject key identifier: EB:30:7B:0C:38:F7:B1:AD:1A:C7:6C:CA:C8:81:F1:13:AF:AC:C7:2A
Authority key identifier: 2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87
Certificate issuer: /CN=2d119754fc14ffe7968a6516bd49bdb25633b887
Certificate serial: 019679E9A0FCCFF3D165B41800CDB7E30E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
Manifest number: 0ECC
Signing time: Mon 28 Apr 2025 01:01:16 +0000
Manifest this update: Mon 28 Apr 2025 01:01:16 +0000
Manifest next update: Tue 29 Apr 2025 01:01:16 +0000
Files and hashes: 1: LRGXVPwU_-eWimUWvUm9slYzuIc.crl (hash: 5FCTLLTEewqnOuVvw77ZyEgJkyqazuR6jK2L3g9dGc8=)
2: Yq8p-Zl2UZI4Tb-nuCgzMSOT2M4.roa (hash: nZW2inX60+r3Vn2H9HqAa0liDQDWLVr6X/Z09+vg9g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:a0:fc:cf:f3:d1:65:b4:18:00:cd:b7:e3:0e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d119754fc14ffe7968a6516bd49bdb25633b887
Validity
Not Before: Apr 28 01:01:16 2025 GMT
Not After : Apr 29 01:01:16 2025 GMT
Subject: CN=eb307b0c38f7b1ad1ac76ccac881f113afacc72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:cb:45:81:e0:fe:9e:f0:88:20:06:3c:9e:
12:c0:a8:0c:33:78:93:25:94:88:7f:db:33:fa:14:
c1:0c:81:f5:6b:3b:8f:29:8b:59:c9:7d:ab:09:78:
7f:cf:f0:19:c7:5d:4d:66:98:c4:05:3c:27:f3:f6:
18:3e:01:d8:2d:48:03:97:e2:69:c5:01:af:de:d3:
27:a7:13:d5:5a:4e:3e:85:0c:3c:68:e3:14:5e:93:
36:91:f2:89:c2:5d:6e:b0:22:d7:3f:4e:4e:51:a9:
0b:24:9b:67:3b:63:2d:f8:3b:4b:e9:42:59:81:0e:
29:82:6b:fa:ef:bc:55:95:13:2f:ed:d4:1f:6e:04:
fc:a9:bd:b4:d4:15:b1:f0:8c:02:8d:1f:d8:7a:86:
d7:18:f3:e3:28:29:f7:64:c5:2d:45:40:17:3e:39:
a1:8a:61:2a:17:b0:64:c7:fe:e4:80:d4:ad:1f:a9:
c7:b7:ef:54:5e:84:f7:ef:46:8e:a6:5b:12:5c:c5:
2c:58:be:9d:5a:d2:aa:6f:41:e2:bd:1e:ac:1f:ab:
41:e1:91:c9:0c:ae:f2:76:a7:d1:73:58:e9:18:c3:
d4:bb:2d:a5:a2:fe:40:cf:1c:dc:90:4d:2e:cb:bb:
dd:69:4d:9b:83:9d:d8:3d:73:a8:2c:98:6c:10:a3:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:30:7B:0C:38:F7:B1:AD:1A:C7:6C:CA:C8:81:F1:13:AF:AC:C7:2A
X509v3 Authority Key Identifier:
keyid:2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a1:e3:69:ce:38:c0:78:dc:57:f3:33:66:2d:7d:1d:d7:6e:
ff:ac:86:16:18:d0:1f:8d:05:30:f6:e1:56:17:24:d5:be:7d:
5e:43:18:0b:65:7e:ae:74:cf:c7:2a:af:44:54:27:9c:17:3b:
01:d2:b9:e4:61:0f:ca:5c:57:ce:af:1b:2b:88:b4:6d:65:c1:
08:80:40:43:30:37:09:aa:0e:8e:48:09:e6:07:88:1c:fb:c1:
a1:3c:c1:fe:9e:db:23:3b:a0:52:32:7c:56:89:49:f4:40:4c:
93:0d:1b:32:08:e6:7a:dc:08:91:6c:5f:3a:aa:cb:9e:51:5e:
0f:07:d8:a7:f9:7e:8b:4c:aa:00:19:68:17:82:64:bd:88:65:
e5:f7:89:ec:6e:53:23:d4:bb:f4:85:96:9d:17:fc:1c:c5:25:
58:92:6c:2a:2a:55:37:d0:5a:62:22:52:92:2f:a4:f2:c3:75:
45:d3:92:04:e8:d7:99:59:c9:52:24:2f:c7:ff:11:0a:e3:d6:
ff:30:67:5e:fe:73:3c:a8:18:3c:a8:df:a6:d8:10:91:45:63:
8d:13:ff:84:02:f7:57:58:90:d3:06:8e:ea:9b:99:dd:36:23:
01:b1:2c:5e:9b:84:0a:b3:4f:e3:52:8d:2a:cc:fb:c5:5b:2c:
28:09:c0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:43:51 2025 by rpki-client