Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
File: lp8NNAHQCKqdqoKKQjWalR-UvQg.mft (raw, json)
Hash identifier: dWBO2AMoEh0c4FeRiskb5V1YXGjmcspnaiH4jhmR/CY=
Subject key identifier: 3B:59:4F:B2:B4:CA:B5:A3:7C:C0:25:B6:95:12:B0:06:29:4F:3F:6B
Authority key identifier: 96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
Certificate issuer: /CN=969f0d3401d008aa9daa828a42359a951f94bd08
Certificate serial: 01968992A908DDE3073749F20F472FB96D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
Manifest number: 0346
Signing time: Thu 01 May 2025 02:00:12 +0000
Manifest this update: Thu 01 May 2025 02:00:12 +0000
Manifest next update: Fri 02 May 2025 02:00:12 +0000
Files and hashes: 1: lp8NNAHQCKqdqoKKQjWalR-UvQg.crl (hash: YFQR/Jto+KWzhYQR1LMDVyhO/quhsqIQ6jSg5pwQG7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:92:a9:08:dd:e3:07:37:49:f2:0f:47:2f:b9:6d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969f0d3401d008aa9daa828a42359a951f94bd08
Validity
Not Before: May 1 02:00:12 2025 GMT
Not After : May 2 02:00:12 2025 GMT
Subject: CN=3b594fb2b4cab5a37cc025b69512b006294f3f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:82:f3:50:06:a6:aa:f1:d9:19:15:7d:77:
c9:9d:0d:40:f4:8d:c7:d0:9d:6a:6e:6e:a9:6a:5f:
b7:e1:70:f2:9d:3f:92:7d:30:bf:3e:7b:39:8f:85:
6d:45:5b:d8:a0:43:a2:1f:8c:00:9d:cd:83:94:54:
3c:e5:03:42:03:c2:ec:c2:b9:2d:1a:79:84:ba:4c:
d8:15:e6:ae:32:bd:5e:f3:d7:47:2a:bf:a2:26:0a:
50:38:ba:d3:b4:da:f1:cf:20:36:43:d4:19:71:6c:
8b:1d:31:1b:55:56:d6:ae:01:b3:e1:f6:8e:82:41:
ac:50:e2:d5:2b:17:ff:f6:b2:60:ef:56:93:a6:b7:
cd:f2:cc:2d:00:94:fa:f9:94:ba:61:86:57:e4:92:
34:fe:97:40:13:87:25:c4:9b:ac:42:f2:d9:c0:12:
2a:92:0a:7b:cb:e1:59:80:34:16:cd:90:59:3d:69:
7d:9f:1b:e0:7c:6b:84:b2:3c:e9:3f:07:7b:fb:58:
fa:11:2a:8d:f6:4c:df:55:da:05:96:6c:7a:0f:23:
6b:fd:50:bc:c4:f1:63:91:a6:e1:6d:4e:cc:37:5c:
f6:a8:bd:d5:a1:ed:a7:d6:c8:7e:77:b9:a5:b0:35:
af:c1:69:dc:ce:33:91:1e:19:d1:e8:24:94:3e:9b:
e8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:59:4F:B2:B4:CA:B5:A3:7C:C0:25:B6:95:12:B0:06:29:4F:3F:6B
X509v3 Authority Key Identifier:
keyid:96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:57:68:71:db:1d:1b:f1:91:cc:a0:9c:3b:2a:05:44:31:40:
34:85:13:8b:71:7a:b7:ee:fb:3a:d2:2f:00:27:27:49:a0:c8:
16:67:ed:df:cf:44:a1:bc:55:44:27:5f:13:e3:80:e0:c6:a2:
4d:0e:17:81:9c:9f:e4:22:71:b5:23:3e:a7:c3:0a:7c:91:ab:
7a:77:2b:0f:49:2b:40:44:15:ca:2c:47:75:2a:04:a2:6d:99:
f8:5e:a4:5b:82:24:2f:64:c9:a2:82:c1:f2:56:8d:1a:f1:f9:
34:ad:2b:ad:77:b8:41:18:59:7c:9d:e3:59:19:1b:25:4e:bd:
6a:f5:d9:33:a3:b0:e3:df:a6:9c:14:7f:90:10:d9:c2:02:09:
45:83:e7:85:77:b2:91:4e:b2:a8:f3:c7:55:ec:86:1a:16:a5:
f2:99:a2:aa:e1:a4:7a:51:19:72:f2:e3:fe:5e:dc:83:c6:33:
43:b2:6c:b0:8f:7c:df:a3:fc:71:60:45:8e:17:a3:58:55:db:
20:0b:ec:2a:e5:68:78:27:81:66:e1:7a:3c:ad:4c:37:96:b3:
ff:96:8d:36:f8:8c:29:53:9d:ab:1f:d5:30:b8:fc:9e:8a:2a:
f7:ba:14:4f:22:fa:43:08:6e:a8:34:d0:2a:7e:ce:9e:5d:95:
ce:c6:8d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:29:42 2025 by rpki-client