Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
File: lKTi_J7qzc9bD1CrkyhM07CUIXE.mft (raw, json)
Hash identifier: Ku1zArrf0ocNZrt75zLKPDWjucE6qiAuCcZhWm9eLO8=
Subject key identifier: 25:47:36:C4:89:29:30:0D:8E:82:27:AD:18:CB:0E:A7:05:4A:E2:B2
Authority key identifier: 94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71
Certificate issuer: /CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
Certificate serial: 01967F7D73834C75AF974238FD456B9E9860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
Manifest number: 0CD3
Signing time: Tue 29 Apr 2025 03:00:50 +0000
Manifest this update: Tue 29 Apr 2025 03:00:50 +0000
Manifest next update: Wed 30 Apr 2025 03:00:50 +0000
Files and hashes: 1: lKTi_J7qzc9bD1CrkyhM07CUIXE.crl (hash: Od5XcVPR8XOfCZrajMa/FjlADn/23nHeqHHF/I9FEjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:73:83:4c:75:af:97:42:38:fd:45:6b:9e:98:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
Validity
Not Before: Apr 29 03:00:50 2025 GMT
Not After : Apr 30 03:00:50 2025 GMT
Subject: CN=254736c48929300d8e8227ad18cb0ea7054ae2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:8d:27:0b:eb:79:07:3f:54:a8:48:a7:3e:
84:1b:97:4a:be:eb:a7:e4:79:c2:7c:f2:16:2b:99:
7a:d7:87:eb:9f:ca:41:8f:af:71:bf:8d:e0:4a:91:
e3:a2:dc:47:63:e8:d3:3f:f6:22:e0:c5:2d:fa:9e:
1d:63:20:10:85:18:72:ba:9e:d9:b4:f1:51:62:bd:
a1:08:0d:a5:cf:03:2e:98:e2:1a:29:a4:82:ab:fb:
fb:53:cc:d2:ad:f0:3c:39:14:a3:4e:ff:6c:f7:92:
0e:b9:6f:92:c2:ab:c5:a5:1e:b2:d9:e1:73:03:f1:
42:28:f4:e5:38:e8:62:2f:9e:20:ac:f1:a1:eb:10:
8c:02:65:11:54:79:1a:86:20:0c:82:4e:e6:f6:4d:
a7:20:f6:66:19:13:b8:f9:34:e2:56:68:e9:bd:1b:
8b:fe:25:ea:db:9b:26:20:c1:97:99:16:53:1c:85:
a8:04:49:de:9d:d0:b5:87:1e:36:5f:c2:2f:28:9d:
45:1b:7e:15:68:62:a8:43:f8:73:7b:bf:ab:f9:f6:
a2:fe:11:8c:74:2b:72:53:32:77:62:f5:bf:04:3d:
31:5d:d3:16:01:11:cc:e8:4a:a8:3f:e2:34:33:60:
4c:a9:3a:2a:7f:ad:a2:d5:54:9a:dc:3a:1e:09:ae:
65:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:47:36:C4:89:29:30:0D:8E:82:27:AD:18:CB:0E:A7:05:4A:E2:B2
X509v3 Authority Key Identifier:
keyid:94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:16:eb:2c:4f:98:14:3e:8b:09:26:8a:9a:54:9c:96:0e:53:
06:70:1a:ec:36:cc:3d:d7:eb:0a:0f:f5:73:f8:a9:ec:6c:99:
52:51:af:5f:46:73:5d:80:d0:1f:fd:4a:73:8d:0a:7e:06:00:
db:46:43:66:b4:ce:d5:c3:a0:18:2d:40:04:45:58:97:71:a2:
07:27:3a:5b:7e:14:dc:6f:98:04:63:0c:7a:25:ba:a1:f9:87:
93:57:93:21:7c:08:7d:41:7c:88:e9:b0:3e:9d:9d:a6:44:6f:
fb:54:9d:39:af:c3:36:fc:e9:f4:46:e2:c9:06:a7:6f:12:68:
94:50:3a:47:f2:bb:8e:e5:46:20:98:f3:7a:49:55:ca:a8:9f:
a4:09:d1:57:5b:47:bf:f8:41:d4:00:b4:2b:58:94:a0:fb:0d:
36:d4:e3:4d:5b:e5:c6:e6:f4:56:1a:0e:e8:33:31:05:a4:bf:
87:36:82:95:39:3c:6c:2e:88:7e:4f:46:55:8d:fe:e5:26:2a:
55:14:66:9d:6f:14:50:e0:d8:9d:62:51:02:27:c3:bd:6f:50:
ff:b5:f3:5f:68:37:50:bb:59:49:ba:bd:2b:84:76:ab:64:58:
83:8b:2c:0d:3f:be:05:44:91:bf:f0:15:0b:59:50:24:bc:a9:
59:1c:43:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:29:37 2025 by rpki-client