Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
File: llxaucCRqzxFBQaKkv_LAZhJqng.mft (raw, json)
Hash identifier: csn92riwrR136hiA/cjDlJFSnx14DUOh95/NlA/9fkU=
Subject key identifier: A8:9D:09:B9:BD:D4:45:F4:B0:FA:D1:B3:2E:9B:B5:D2:DA:3A:0B:F9
Authority key identifier: 96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
Certificate issuer: /CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Certificate serial: 01969115D2E9282F9E86B9EC1CBD7D72CB1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
Manifest number: 1482
Signing time: Fri 02 May 2025 13:00:48 +0000
Manifest this update: Fri 02 May 2025 13:00:48 +0000
Manifest next update: Sat 03 May 2025 13:00:48 +0000
Files and hashes: 1: llxaucCRqzxFBQaKkv_LAZhJqng.crl (hash: XBNEJCKrjiK0IMIRh0ulnlpL+tKCC7aV67kllmjyLiQ=)
2: rHF1daiHavMGYa0v18HeRyOPIy4.roa (hash: 2UkzQwhMHZ2kO8ZqSfqH6Gvo+L0wbAUFPUcHU8Sig88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:15:d2:e9:28:2f:9e:86:b9:ec:1c:bd:7d:72:cb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Validity
Not Before: May 2 13:00:48 2025 GMT
Not After : May 3 13:00:48 2025 GMT
Subject: CN=a89d09b9bdd445f4b0fad1b32e9bb5d2da3a0bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e2:4e:6c:40:d1:cc:4e:b1:7a:70:5a:ab:a5:
ae:44:34:60:98:2f:dc:da:fa:d0:98:29:81:07:fe:
99:d7:b2:1e:bb:cf:06:50:2f:93:7d:fa:a2:8a:6a:
18:21:19:b3:5c:6d:c1:6c:91:c6:bf:d4:91:71:cd:
9a:04:e4:d2:56:76:b5:7b:c4:50:7d:59:73:cd:92:
d5:f6:6b:8e:64:bc:f9:7c:99:d8:6c:fb:44:b0:09:
5b:9d:09:e4:58:19:7a:69:9c:95:b4:e4:c7:f4:87:
b5:ce:48:0b:9a:ef:2c:50:ba:bc:02:60:25:de:16:
21:bb:74:d7:25:1d:f3:a9:6d:63:fb:ed:f8:d8:44:
8d:fe:a0:b3:45:1b:cb:fb:4a:c1:83:78:93:b1:e0:
cc:df:a6:c8:b6:7c:06:8d:f6:28:1e:8f:14:68:be:
05:83:e8:16:59:c1:0d:1e:47:58:b7:cf:e2:ca:d4:
17:24:13:94:11:ac:fe:5e:8d:13:90:ff:b0:35:51:
41:ea:3a:ab:bd:a5:b6:5a:dc:a9:30:9d:f0:9b:78:
79:6b:53:2f:66:02:57:17:a8:cd:f9:8f:8a:e7:38:
29:57:c8:53:93:9c:40:88:b1:dd:7b:2e:ab:f1:49:
a9:44:83:4a:ea:f5:dd:fb:00:41:eb:b3:1e:0a:a0:
62:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9D:09:B9:BD:D4:45:F4:B0:FA:D1:B3:2E:9B:B5:D2:DA:3A:0B:F9
X509v3 Authority Key Identifier:
keyid:96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8d:4b:eb:c9:36:b2:37:6d:ac:35:e7:14:b8:46:93:99:b7:
d3:e1:33:d3:f8:1b:70:33:18:65:14:9f:2c:a2:4c:21:13:cb:
5a:7a:f1:69:f8:a4:88:7a:02:d1:2b:5f:f8:cc:90:a8:f2:79:
ea:be:b2:a4:dc:fe:54:ef:69:e7:4e:1c:74:37:58:b3:a8:6e:
09:d4:21:00:58:2d:b4:6a:6f:ea:ed:66:1b:4a:d7:59:e9:57:
63:97:72:d9:fd:5f:cc:c7:c6:c2:a2:d8:06:f4:34:1b:21:c7:
59:73:db:b3:a2:8f:da:b3:cf:55:ca:a2:d6:db:f5:3f:10:5c:
9c:d6:86:ff:f5:d7:42:c8:ba:da:85:f8:de:a5:19:f0:40:ee:
d5:ee:78:e0:5e:21:6d:cf:f6:e7:ca:ec:57:3b:60:40:f5:db:
cc:9f:fb:e7:2d:07:27:c5:3b:f8:62:2d:df:08:38:0f:ef:6a:
3c:6a:e6:9c:7a:94:04:b3:59:b4:c9:9d:fe:14:93:bd:30:17:
fc:77:ed:16:29:a5:53:80:d1:34:a4:d8:09:4b:70:7f:58:c9:
e5:35:3b:3c:b5:4c:b5:dd:2a:43:9f:4b:92:e5:c2:b1:b1:46:
84:ad:13:98:d6:66:da:ba:bb:b7:6b:31:15:a2:02:08:f7:d5:
52:75:4d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:58:07 2025 by rpki-client