Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
File: lpblIk_vUX9NzGbBQQNSzIq_si4.mft (raw, json)
Hash identifier: bzszaLE09I5PkfrLCe1EQDa61ArX8cLRfziYqT3xFYs=
Subject key identifier: 28:0B:F8:C0:05:41:02:6E:3F:6F:9D:31:19:40:84:54:66:B5:BB:AD
Authority key identifier: 96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
Certificate issuer: /CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Certificate serial: 019679E9CDA89242132347099CCA48F6D016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
Manifest number: 149D
Signing time: Mon 28 Apr 2025 01:01:27 +0000
Manifest this update: Mon 28 Apr 2025 01:01:27 +0000
Manifest next update: Tue 29 Apr 2025 01:01:27 +0000
Files and hashes: 1: lpblIk_vUX9NzGbBQQNSzIq_si4.crl (hash: HJdnnykRtJj38DyxuBL65k2HBHhspcqgxHuiHF80Qpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:cd:a8:92:42:13:23:47:09:9c:ca:48:f6:d0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Validity
Not Before: Apr 28 01:01:27 2025 GMT
Not After : Apr 29 01:01:27 2025 GMT
Subject: CN=280bf8c00541026e3f6f9d311940845466b5bbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fc:9c:d6:0a:ef:22:bb:63:62:fc:38:5e:85:
a6:56:35:50:a5:32:79:94:c7:c2:78:62:67:75:46:
28:d8:d0:86:a2:14:29:24:f8:2e:9c:82:0d:88:71:
7f:25:21:e5:f4:a9:13:02:2e:18:ee:ba:5b:b3:95:
3e:b2:ad:14:78:56:a3:6a:07:08:f9:fa:3f:2c:25:
16:2a:03:33:53:8f:81:e3:8f:90:e7:d8:70:5e:6d:
65:83:8c:22:26:ef:52:36:45:31:87:ee:a4:7b:6f:
06:e4:1e:47:7e:1f:68:17:6c:18:ad:06:2f:8f:4a:
0e:65:b5:fa:e1:f7:47:02:1c:7f:e3:cc:8d:07:9f:
b8:8d:78:cd:49:81:a9:06:70:69:a1:80:08:ee:9d:
94:de:b9:8d:21:00:60:ae:e5:7b:d7:38:6a:6f:9d:
f9:aa:19:ed:14:67:1e:2e:37:41:a2:c7:78:3a:1f:
6e:1f:35:f5:c4:65:a9:49:82:7e:19:c8:d1:47:8b:
3c:f9:42:6d:e6:1b:df:7a:3d:a6:7f:10:2d:0c:4a:
bb:08:88:18:a8:3b:f1:54:fc:11:79:33:6f:38:17:
6c:7c:35:46:50:18:b0:2c:3b:63:20:54:28:f8:d4:
8b:29:a3:d9:4f:68:69:bf:de:85:a3:bc:6a:95:28:
83:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0B:F8:C0:05:41:02:6E:3F:6F:9D:31:19:40:84:54:66:B5:BB:AD
X509v3 Authority Key Identifier:
keyid:96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5d:00:38:7b:96:4d:2b:31:ab:c3:0f:e5:4f:51:67:c3:24:
87:f5:5e:22:a1:dd:28:52:46:33:4e:0f:22:51:ea:d5:8f:78:
a4:e2:1f:34:6a:c3:d6:0c:01:ac:e3:10:c8:a5:5e:c7:6f:8f:
ea:07:5b:68:40:b1:f5:e5:48:fc:18:9e:a3:89:fd:0e:b7:22:
ff:82:29:31:4e:09:89:8a:65:51:bb:f5:b5:0d:0f:d5:7d:e8:
ce:17:45:01:91:f2:d6:0c:bf:e0:82:63:09:30:94:f1:9a:59:
86:db:6c:35:58:74:e2:d6:03:c7:42:93:25:f1:1f:a2:b1:ad:
20:f8:fc:f3:76:73:cb:de:b4:86:8d:1d:a5:3e:b4:7c:4c:c2:
5c:25:d9:ac:23:5b:23:93:ec:53:58:ff:4d:77:fa:73:23:c8:
12:fb:c7:89:2d:2e:a3:c2:ea:eb:54:81:6f:08:ba:e3:3d:1d:
41:80:87:ae:ea:8e:1c:c7:38:eb:5d:d6:22:4f:35:72:c7:a2:
bf:55:7f:7f:c4:8c:e4:62:09:4f:ac:6e:f9:47:d5:81:ac:e8:
62:84:31:94:76:26:bc:87:ca:be:d4:64:96:c7:be:e9:26:ef:
e6:87:f7:46:54:6d:53:7e:06:3d:8a:de:d4:81:5d:d0:85:4a:
32:94:88:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:10:56 2025 by rpki-client