Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
File: LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json)
Hash identifier: /mhRt10IpfxJrIuhryIkm+mgq74RnsA+0cFKH3jSyik=
Subject key identifier: 7C:AE:F2:B5:CA:41:19:DC:44:A3:2D:CE:58:99:21:60:73:28:AE:31
Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
Certificate issuer: /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Certificate serial: 019680904CCC2ABA7413A3C7D60AF5078C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
Manifest number: 1512
Signing time: Tue 29 Apr 2025 08:01:02 +0000
Manifest this update: Tue 29 Apr 2025 08:01:02 +0000
Manifest next update: Wed 30 Apr 2025 08:01:02 +0000
Files and hashes: 1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: JfFJcvWhNM/J7kGcQMy8MB+kD0s4wp7xiO6GoynBGTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:90:4c:cc:2a:ba:74:13:a3:c7:d6:0a:f5:07:8c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Validity
Not Before: Apr 29 08:01:02 2025 GMT
Not After : Apr 30 08:01:02 2025 GMT
Subject: CN=7caef2b5ca4119dc44a32dce589921607328ae31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:bb:93:a3:7b:a3:6c:d7:cb:6a:ab:25:4e:
da:44:88:e9:82:ef:de:f4:6c:b6:12:06:d8:66:05:
bc:5d:dd:8a:51:bf:b1:2b:ef:76:ae:73:69:91:bd:
5c:9d:63:21:23:f7:67:d9:fc:fb:9d:ff:3a:0c:0c:
d1:ca:28:b7:73:36:29:8f:8c:3e:fa:56:45:ed:83:
8d:5d:68:97:65:61:b4:20:29:9d:6d:67:21:a1:6b:
22:e5:42:eb:20:ac:1a:c9:e7:cf:77:80:84:17:8a:
0c:20:26:f2:b2:e3:45:00:d1:c7:ad:b8:c7:e7:bd:
35:58:e2:05:84:69:a0:e6:6b:b1:7b:28:10:65:65:
15:83:bc:cc:cd:32:ea:f5:81:9a:66:dd:c5:74:12:
23:f5:bf:4a:22:81:17:f9:bd:5f:57:14:d3:5e:55:
14:95:6f:96:8f:32:4b:60:52:26:af:7a:43:a6:d8:
29:b7:e2:60:ce:1f:1d:7c:dd:00:b8:b8:1c:e3:9c:
e5:84:ad:2c:39:53:f5:de:17:70:02:b2:41:1c:58:
0c:dd:6e:9e:9b:9d:75:d8:85:72:6d:3b:0e:ad:ac:
04:3d:b0:c6:1c:8d:8f:30:db:61:33:00:83:96:10:
60:09:c6:78:fb:3b:06:73:4a:d2:7f:38:7e:bd:97:
d2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AE:F2:B5:CA:41:19:DC:44:A3:2D:CE:58:99:21:60:73:28:AE:31
X509v3 Authority Key Identifier:
keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b1:bb:c5:f4:11:30:f9:33:93:b5:c2:04:a1:64:3d:03:0b:
3f:27:28:4f:60:3a:8b:ea:86:28:ac:18:3f:dc:0c:4c:f3:37:
0f:ec:33:fb:a5:0d:90:d1:3e:db:52:a3:5e:e9:dc:1a:9d:be:
d2:fc:13:2d:11:2b:ef:3f:69:81:ce:c2:4c:2e:25:c3:ed:eb:
78:9f:a7:3f:d6:d6:13:3c:6d:8c:36:6a:38:83:05:37:08:10:
d5:a4:7b:1e:cb:b1:a6:64:cd:25:63:a6:61:94:58:9d:94:cd:
4a:1e:a4:0d:d1:29:c5:27:5f:5f:09:f2:b5:43:3c:a5:18:fe:
a6:f6:02:e0:e0:1a:08:93:10:cb:68:72:3e:c2:ca:d9:06:ce:
fc:53:60:ca:5a:92:f9:53:33:e4:a6:d3:ae:47:4f:e2:cb:3e:
56:f8:2b:15:6c:07:d2:1c:bc:62:36:a7:62:2d:e0:f6:0c:6e:
22:f2:ea:26:0b:4d:97:d0:29:b0:2e:2b:37:74:10:ec:33:4c:
0a:9d:08:fb:f2:21:a8:3b:20:88:54:e9:5a:78:77:83:0d:bb:
25:18:1d:9b:bd:ab:f6:0d:5e:5f:95:1c:65:8a:c3:b2:e3:bb:
ef:8a:9b:fd:70:76:eb:c5:f3:fc:0e:82:c3:1c:05:9d:f7:ae:
2e:68:91:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:02:14 2025 by rpki-client