Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
File: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft (raw, json)
Hash identifier: xfzh1VHvTqP+KuBVcRe5cz3VR/7VMvBskVeyRHhUVtE=
Subject key identifier: 1E:0D:3F:6D:6B:7B:72:A2:61:A8:38:09:49:DE:67:63:FF:FC:CC:2C
Authority key identifier: 2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
Certificate issuer: /CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Certificate serial: 0196846CD48F57F49CF0C84313462DF8A70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
Manifest number: 0C50
Signing time: Wed 30 Apr 2025 02:00:46 +0000
Manifest this update: Wed 30 Apr 2025 02:00:46 +0000
Manifest next update: Thu 01 May 2025 02:00:46 +0000
Files and hashes: 1: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl (hash: lCgmay4xFlOiZXmxzsqL9pNkmeoWRwrx8z/l3UY0AEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:d4:8f:57:f4:9c:f0:c8:43:13:46:2d:f8:a7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Validity
Not Before: Apr 30 02:00:46 2025 GMT
Not After : May 1 02:00:46 2025 GMT
Subject: CN=1e0d3f6d6b7b72a261a8380949de6763fffccc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a0:72:52:71:38:fc:68:11:d5:d7:e7:d2:50:
07:a9:64:0f:2e:65:23:0f:83:9e:18:9a:df:c3:b9:
85:56:ca:5f:17:e5:f9:56:7f:f0:38:ce:e2:19:4b:
56:ad:32:a2:f6:6a:b6:fc:56:ec:5d:e9:a9:ad:93:
45:2f:03:1b:34:fd:11:11:45:71:58:c6:a7:8f:f4:
2c:d9:21:cf:4e:4e:3d:6a:7c:64:41:6f:71:07:2b:
ef:b6:18:6d:af:1e:de:64:95:63:26:78:bb:5b:20:
ea:a6:df:49:7d:d4:74:a2:93:c4:46:71:94:6a:bd:
8f:f3:a0:6e:6a:c4:71:45:43:a7:42:98:c0:62:54:
22:1e:ee:ad:f0:c2:07:af:3d:ed:06:8e:e4:84:df:
df:12:92:d5:25:41:c9:b7:3e:82:ec:bd:25:02:0a:
c7:a7:f3:48:68:be:d0:6d:3d:50:28:f8:11:40:38:
a1:6a:02:8f:3b:75:aa:a7:81:71:e3:7e:d5:a3:5e:
b5:ef:a4:ba:ee:79:66:dc:58:8f:7e:d9:7b:42:5b:
5a:9c:f9:0f:04:ee:5b:9b:18:59:a0:bb:7f:d1:87:
41:45:a0:5e:4c:0f:f4:c5:7f:23:10:37:d9:a9:c8:
cc:20:32:ed:e4:a6:43:6b:d2:f4:13:27:a5:db:6b:
3a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0D:3F:6D:6B:7B:72:A2:61:A8:38:09:49:DE:67:63:FF:FC:CC:2C
X509v3 Authority Key Identifier:
keyid:2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e5:76:2a:a6:63:b1:5a:ad:7c:64:b7:30:e3:23:a0:5b:5d:
c0:d5:60:92:12:16:2b:5f:98:df:ab:60:a8:64:70:2f:6e:aa:
3a:39:ab:48:ea:7e:3c:6f:f6:70:20:aa:af:d7:78:2d:b4:32:
a1:41:19:64:cf:a6:aa:08:9b:f5:e6:fd:b8:2d:46:cc:98:e0:
09:cc:82:7b:bf:56:c1:e4:27:5c:1e:9c:60:d0:77:99:0b:8c:
cd:de:5a:35:4b:b6:c8:c8:5b:f6:e2:ff:5e:50:5f:ce:7e:e9:
22:7e:f9:b0:c6:3d:9a:c5:8f:0d:b0:66:ee:4e:a7:86:0f:36:
e2:ba:de:a9:2a:50:a9:b0:38:bd:d8:a0:e2:92:89:d1:75:8b:
61:60:4d:31:92:48:09:f5:09:db:3d:e1:4c:51:0e:f2:cb:60:
c9:ce:1f:98:a8:95:4b:a4:cd:d7:93:37:cc:cf:e8:dd:7f:12:
d1:cf:56:82:4c:36:bd:cb:c6:97:8c:fb:c6:e5:ff:dd:c4:3a:
76:8d:d3:4d:60:c5:3d:b0:b7:72:76:69:e0:ad:d2:7a:c3:ea:
4a:52:8a:65:71:17:8e:01:bd:01:bb:85:0c:91:9b:5d:d4:45:
82:8d:39:7e:78:03:2b:30:64:ab:80:e8:f7:2e:bc:be:a5:37:
37:16:91:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:57:17 2025 by rpki-client