Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
File: LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft (raw, json)
Hash identifier: YfKmpomRqmIUdiz6HaGAwnwjv4xkQQMC+on2Kl+91C0=
Subject key identifier: 18:05:AD:29:9C:01:B3:B8:93:DE:2C:75:8D:2C:B6:79:9F:0E:28:03
Authority key identifier: 2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
Certificate issuer: /CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Certificate serial: 019671F83AD69D0C1BB6FC36EE3DD28B8B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
Manifest number: AB
Signing time: Sat 26 Apr 2025 12:00:15 +0000
Manifest this update: Sat 26 Apr 2025 12:00:15 +0000
Manifest next update: Sun 27 Apr 2025 12:00:15 +0000
Files and hashes: 1: LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl (hash: CSxGQ/mdLsz5Kx5pceypvweLvncpUDNU4sF6EMpK6J0=)
2: gH-hksMyjADdSnLZQyC57cd6lrA.roa (hash: hDYDdACy3gd+GmXhVoi6Clu3jpw70AyqVE9omGwk5CE=)
3: w9h083wG9ItaPjH-_63uYE6KznA.roa (hash: V3Tb51WvY6giQH0ElaZuODezIpP/3ZCphM9ap9vb4L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:f8:3a:d6:9d:0c:1b:b6:fc:36:ee:3d:d2:8b:8b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e210bd2c7cbef20f224a47b32a157318888ec85
Validity
Not Before: Apr 26 12:00:15 2025 GMT
Not After : Apr 27 12:00:15 2025 GMT
Subject: CN=1805ad299c01b3b893de2c758d2cb6799f0e2803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:98:19:a9:39:8d:b1:c0:a8:ed:18:6e:78:25:
6c:b6:14:29:b7:b1:10:0f:94:c8:6d:67:8a:f8:e9:
98:7a:e6:2c:3f:fb:d3:7a:2a:37:06:db:bd:f1:ed:
2e:a5:a5:40:b0:0a:98:18:bd:b0:2b:b1:cc:27:e8:
26:9d:22:3d:fe:29:9c:0e:d6:8d:cd:40:cf:91:c2:
e3:18:5c:90:ea:73:a5:70:a1:b5:f9:43:3c:c1:49:
be:6d:34:97:c9:24:88:c5:cd:25:ef:b4:2d:69:a0:
c0:c5:37:fe:06:79:67:a6:63:85:2c:3f:70:05:5f:
97:da:d9:45:35:37:10:02:2f:7f:9e:20:f5:20:df:
63:95:23:23:54:43:f9:2c:ca:55:7a:e9:d8:6c:1e:
68:ff:cd:e2:15:b7:9c:78:b1:7b:c2:13:65:eb:46:
a8:30:14:72:55:b5:04:ed:d0:be:3a:18:72:8a:3b:
cf:68:b7:d6:5e:15:63:63:86:76:89:7e:bd:49:c3:
80:3f:8e:52:39:e9:35:c7:22:f2:38:4b:21:f4:31:
d4:be:78:29:55:0d:c3:40:e6:c6:f7:02:cb:1d:0c:
89:bf:73:a0:bf:65:4c:b2:4a:40:8b:ec:fe:59:3c:
6b:c9:2d:31:1d:dc:23:50:d8:e3:0e:d4:c6:83:27:
5d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:05:AD:29:9C:01:B3:B8:93:DE:2C:75:8D:2C:B6:79:9F:0E:28:03
X509v3 Authority Key Identifier:
keyid:2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a2:31:32:00:52:57:89:83:43:24:01:e2:8f:5a:50:83:4b:
a0:ec:75:4a:02:1e:c0:a7:8b:e9:2c:db:cf:1b:3d:64:99:db:
00:7f:17:8a:60:52:3d:e1:e0:4d:ef:0f:9b:4f:86:89:f0:78:
83:f2:f4:e2:99:0a:8e:70:2d:7b:24:91:4f:13:5c:e1:78:bc:
5c:82:df:4a:52:47:50:80:ff:1a:dd:49:3b:76:8d:f1:24:7b:
e8:dc:92:de:9d:5f:1d:38:3e:f8:2a:ca:bf:ab:e9:5e:34:08:
2b:69:6f:f9:c9:55:63:5e:43:bb:97:d1:f9:61:aa:98:e1:3a:
6f:41:85:4a:72:0e:3c:f9:d5:52:38:7c:af:8f:bb:6c:24:f0:
0c:3e:2b:99:19:00:13:ef:57:f8:bb:75:d9:64:89:db:0c:02:
df:5a:5b:5a:c6:54:15:cb:bd:f3:4d:86:56:e1:06:80:67:8c:
6f:33:9b:87:74:d1:b9:d7:5f:d4:0b:8b:f1:fd:d8:98:40:3d:
46:8f:a3:8f:7a:6a:11:16:8a:36:5b:32:4f:21:82:6c:e7:96:
fb:41:8b:1e:f1:30:24:f1:b2:06:f4:5a:d9:21:28:62:21:cf:
45:7e:37:a4:51:c4:4a:3c:e3:37:88:9a:d9:29:25:a0:39:78:
7f:50:80:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:59:31 2025 by rpki-client