Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
File: LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft (raw, json)
Hash identifier: dXEgSWIsWSiycqpzH2N/6eNaTkXhGsfZGEt2pZtZ2L0=
Subject key identifier: 27:2E:10:57:D1:33:17:35:54:F9:4A:AD:F4:6E:50:31:95:DA:45:57
Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
Certificate issuer: /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Certificate serial: 019684DA5251623667A5F5471AA66D6A4F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
Manifest number: 0EBF
Signing time: Wed 30 Apr 2025 04:00:22 +0000
Manifest this update: Wed 30 Apr 2025 04:00:22 +0000
Manifest next update: Thu 01 May 2025 04:00:22 +0000
Files and hashes: 1: 7QVUt99h4511Posn9SqYvc2xLnE.roa (hash: KZzP7wYv+qefiRKZJehC5hXDNsrAKMVyaBPRSBqjrBQ=)
2: A2pZ4GSYS3kMwEo0-T0NRpkCuHk.roa (hash: tY5Ee/lDMytpmHRZG6292ahYyC+mhzE73yr+WRYQTjo=)
3: LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl (hash: Wx7evMYUBivPFlbVCEeSa8qH+tlKl5CfT/PZX577dNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:52:51:62:36:67:a5:f5:47:1a:a6:6d:6a:4f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Validity
Not Before: Apr 30 04:00:22 2025 GMT
Not After : May 1 04:00:22 2025 GMT
Subject: CN=272e1057d133173554f94aadf46e503195da4557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:bd:21:f4:5f:ca:c3:f7:f2:ee:6d:58:af:
f4:b9:0f:66:ab:dd:1c:7c:1e:8d:2d:0d:7d:81:e2:
fb:ca:5b:a6:6c:45:92:ee:36:9e:3b:94:77:4a:cc:
95:76:3c:a3:1a:04:7f:74:1f:66:d9:a3:12:32:6d:
ba:56:f5:84:4c:c1:f2:61:23:cf:2b:a9:bb:67:8d:
99:72:d9:b0:9f:c7:21:58:c2:3b:de:b4:82:eb:56:
2d:07:83:0d:5c:fd:91:ca:2a:f0:13:02:79:06:0e:
17:b4:89:e2:62:78:65:8c:00:16:09:52:38:c5:20:
cd:c3:fe:72:71:e6:08:74:6c:a4:18:17:87:25:e8:
e8:41:52:d3:81:10:c4:94:aa:ac:bb:1f:82:94:99:
56:fe:00:26:d6:75:78:e1:54:6d:f4:bf:8b:f3:3f:
27:41:19:88:1e:de:39:f3:f9:70:ca:91:98:17:34:
bb:43:e7:d9:e6:8e:ea:1a:0f:ef:2b:94:b4:0c:15:
2e:d4:d9:8f:17:75:13:87:d0:5e:cf:ad:c2:a7:a7:
6a:b2:00:a2:2d:16:f7:f9:ab:38:45:ee:ae:75:5b:
3d:e1:51:04:59:b3:5b:88:89:f4:fe:5b:64:c8:89:
7d:5c:66:cd:3b:73:43:ec:aa:fc:56:67:f4:72:87:
98:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2E:10:57:D1:33:17:35:54:F9:4A:AD:F4:6E:50:31:95:DA:45:57
X509v3 Authority Key Identifier:
keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ca:86:02:cc:e8:25:4c:f2:38:d0:7f:c0:7a:3e:25:fb:8a:
7b:a9:0b:10:a3:36:c5:9c:c9:cb:10:0c:26:3f:df:7e:32:dd:
57:c2:c4:24:4b:65:db:2c:5f:c8:e6:79:36:90:82:89:84:09:
25:e9:84:4d:4e:41:87:9a:7d:f2:ea:30:e9:8a:f8:20:44:58:
ee:5a:08:e0:91:67:23:fa:da:de:5e:26:c2:39:b3:a6:3e:56:
dd:8d:7b:82:58:6a:60:48:3d:af:dc:33:60:84:bb:91:2b:f3:
69:b2:af:0f:e0:a2:51:bf:d1:94:f6:8e:7f:fd:56:ef:0b:c4:
39:63:4b:49:f8:bb:c4:57:bb:18:b3:05:61:56:36:4f:36:1e:
b2:15:fb:7b:7d:4f:89:8b:f5:6f:51:6d:b5:e5:91:c9:9b:e1:
2d:7a:0a:a1:fc:d0:10:d7:51:c6:01:d8:96:f9:d7:e0:b7:82:
3d:89:85:6a:74:a8:ec:83:6c:97:63:ec:35:40:94:60:84:36:
05:e6:d3:0f:b3:f4:03:41:b3:50:5a:31:18:89:89:6f:4d:87:
38:c4:73:ed:cf:43:96:e4:72:2f:d9:bb:c4:d3:ad:0f:61:c7:
76:37:62:ad:0e:03:71:84:ca:78:88:88:58:4c:b9:29:fe:32:
b4:cf:6e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:53:53 2025 by rpki-client