Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
File: laaF1WN0LJza4cNZU2at7NCpO6U.mft (raw, json)
Hash identifier: VqwOCiIBejIyjFAO21oBt/8JGYU6fKDm45YmqCszcIs=
Subject key identifier: 7A:80:1A:AD:1F:1C:02:C7:5F:5D:F0:51:62:8A:10:49:90:84:AD:67
Authority key identifier: 95:A6:85:D5:63:74:2C:9C:DA:E1:C3:59:53:66:AD:EC:D0:A9:3B:A5
Certificate issuer: /CN=95a685d563742c9cdae1c3595366adecd0a93ba5
Certificate serial: 0196760CC0F19F22377D055DC9A626A143D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laaF1WN0LJza4cNZU2at7NCpO6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
Manifest number: 0CA8
Signing time: Sun 27 Apr 2025 07:01:09 +0000
Manifest this update: Sun 27 Apr 2025 07:01:09 +0000
Manifest next update: Mon 28 Apr 2025 07:01:09 +0000
Files and hashes: 1: laaF1WN0LJza4cNZU2at7NCpO6U.crl (hash: hgBBCQ+lLp0VldE1W8BhDDZp/mYEagz/bG+if1xMj/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/laaF1WN0LJza4cNZU2at7NCpO6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:c0:f1:9f:22:37:7d:05:5d:c9:a6:26:a1:43:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a685d563742c9cdae1c3595366adecd0a93ba5
Validity
Not Before: Apr 27 07:01:09 2025 GMT
Not After : Apr 28 07:01:09 2025 GMT
Subject: CN=7a801aad1f1c02c75f5df051628a10499084ad67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:cd:4b:a8:36:c3:19:75:2f:dd:d9:94:c5:
99:da:e8:2e:7b:9e:bf:d4:93:a3:32:73:37:93:04:
e0:4d:0d:5e:8a:54:22:55:13:e2:5f:7e:df:a4:76:
1e:6e:e4:77:48:8c:07:e7:11:03:72:96:83:19:ed:
5b:99:f2:3d:59:4f:4c:b4:c9:c5:d4:90:91:a1:83:
94:0c:b3:ed:8b:03:e1:60:bb:9e:c5:bb:c2:1a:e1:
2c:e5:5c:7e:d2:68:f9:1d:4c:e8:ea:01:67:2a:5e:
b4:de:9e:67:ab:78:15:7d:9d:0f:2b:27:6a:f6:bc:
7f:b5:81:e3:fa:38:09:eb:27:63:a8:b6:70:57:66:
cc:3c:5e:3e:42:c9:d7:d0:38:c5:1e:cd:07:75:e0:
21:39:59:94:19:d8:a9:d4:a5:48:af:0b:e9:f9:9b:
3c:54:8a:34:ad:5f:73:d6:96:dc:13:15:6f:2c:04:
3b:e4:9a:80:ff:41:f3:9f:74:99:cd:92:22:f1:15:
f3:40:25:1c:0a:9b:79:7f:16:50:93:5e:1e:d5:b5:
dd:3b:bc:d1:73:7f:07:0b:dd:d6:5c:82:63:ef:d2:
d8:2b:9b:c8:07:f7:b6:d2:5e:44:69:b2:09:fc:a0:
27:84:03:67:c2:c8:dd:33:b2:93:1e:18:d7:1a:d0:
91:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:80:1A:AD:1F:1C:02:C7:5F:5D:F0:51:62:8A:10:49:90:84:AD:67
X509v3 Authority Key Identifier:
keyid:95:A6:85:D5:63:74:2C:9C:DA:E1:C3:59:53:66:AD:EC:D0:A9:3B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laaF1WN0LJza4cNZU2at7NCpO6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a98239-6179-4cdc-8b94-0a4424ff2a1f/1/laaF1WN0LJza4cNZU2at7NCpO6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8f:b1:34:ec:6b:7b:b7:ff:bc:07:f8:70:44:ec:8d:a1:10:
52:1e:24:6c:2d:71:3d:98:61:e5:04:bf:d9:68:38:7b:dc:56:
78:82:9d:9c:85:ce:22:3f:62:fd:2f:23:16:1a:1e:cb:e9:bb:
34:32:94:3f:a0:07:0c:ea:37:a6:31:f3:0e:d2:c0:a8:0f:ea:
48:ef:fb:24:c1:91:98:c2:22:93:91:5c:33:cd:49:bc:c1:99:
93:85:17:90:b8:bc:df:db:0e:64:85:68:17:78:f0:b3:c4:57:
e3:d4:46:09:fe:18:5a:ab:00:c1:c6:cf:ee:6c:39:79:f3:70:
ff:1f:39:ef:ba:7a:9c:8e:6d:96:7e:a6:0a:3e:41:68:3e:01:
2f:e6:9f:21:b7:02:8a:bf:4d:23:ff:a6:e4:f4:76:3e:d8:45:
e7:d4:09:08:d8:ac:02:f2:c4:15:f0:ee:aa:20:1e:78:cc:29:
3e:bd:70:56:3c:da:04:3b:d9:4e:11:80:00:cb:32:ae:9b:91:
5c:58:0c:c3:e1:f5:4b:cc:d4:12:3c:be:e0:74:79:20:50:69:
55:04:01:c4:78:ca:e4:da:bc:35:13:4c:9b:8d:58:07:e8:3b:
c9:f3:60:62:94:02:db:c1:cd:d2:c4:3d:17:7e:5c:ff:21:ab:
35:7c:5e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:29:56 2025 by rpki-client