Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.mft
File: LDfpq5czmfAvAyfJgRoYdQDEtsk.mft (raw, json)
Hash identifier: p9zeME+aXrDFDRBnFFlquPcl/ecrW+n3LcC8ikYFUhg=
Subject key identifier: 9B:95:65:6A:FD:21:DE:B9:56:23:9E:A5:0E:2F:EA:23:7A:D1:44:82
Authority key identifier: 2C:37:E9:AB:97:33:99:F0:2F:03:27:C9:81:1A:18:75:00:C4:B6:C9
Certificate issuer: /CN=2c37e9ab973399f02f0327c9811a187500c4b6c9
Certificate serial: 019693E01FCDB57364705F46BE5B530BACB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDfpq5czmfAvAyfJgRoYdQDEtsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.mft
Manifest number: 0356
Signing time: Sat 03 May 2025 02:01:00 +0000
Manifest this update: Sat 03 May 2025 02:01:00 +0000
Manifest next update: Sun 04 May 2025 02:01:00 +0000
Files and hashes: 1: LDfpq5czmfAvAyfJgRoYdQDEtsk.crl (hash: p2CHUhFyn5C9BTjn9VCk7pub7HkhXkMFy9WQELTZZtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDfpq5czmfAvAyfJgRoYdQDEtsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:e0:1f:cd:b5:73:64:70:5f:46:be:5b:53:0b:ac:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c37e9ab973399f02f0327c9811a187500c4b6c9
Validity
Not Before: May 3 02:01:00 2025 GMT
Not After : May 4 02:01:00 2025 GMT
Subject: CN=9b95656afd21deb956239ea50e2fea237ad14482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:25:cb:f6:b1:70:25:4f:80:61:04:ae:14:
12:2b:28:11:3c:f2:f4:a4:44:e2:e9:01:50:0f:07:
09:95:1e:7f:d7:fe:ff:a3:03:af:00:24:60:21:67:
cf:fb:0c:90:62:7b:3a:c8:70:f1:f6:74:9f:83:d3:
7a:05:6d:50:98:70:79:56:a5:4e:d5:53:b6:82:67:
cb:d0:ff:04:03:5d:81:79:a5:5d:3a:24:b1:ef:49:
28:f8:3a:11:30:41:6f:83:e4:2a:e6:90:a9:6a:19:
80:31:64:6c:db:ff:47:19:80:65:62:90:fc:8e:58:
1a:62:3f:e3:fa:b4:c9:9d:59:6e:13:b6:14:d9:4e:
42:d1:3f:26:40:3c:e3:6d:ad:7e:fc:2b:6a:6e:f9:
ad:26:88:e8:8a:59:69:17:56:fd:43:3f:63:85:d8:
e6:a8:41:7b:30:85:15:17:3f:ed:ac:1d:01:93:fc:
82:6f:d5:00:59:e1:81:07:dd:98:c1:96:51:2d:9a:
44:11:4f:1d:86:40:6d:19:4a:3b:a0:41:e8:15:fa:
b4:5a:1d:0b:e5:b0:5d:f0:b8:89:10:76:b1:7d:c1:
52:14:95:a1:3a:d1:22:9d:8b:e4:97:96:5a:12:84:
59:a5:fe:7a:2c:d6:75:d9:ee:5c:43:77:4f:b3:9b:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:95:65:6A:FD:21:DE:B9:56:23:9E:A5:0E:2F:EA:23:7A:D1:44:82
X509v3 Authority Key Identifier:
keyid:2C:37:E9:AB:97:33:99:F0:2F:03:27:C9:81:1A:18:75:00:C4:B6:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDfpq5czmfAvAyfJgRoYdQDEtsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:87:59:3e:f6:c9:e0:89:77:6d:6c:3b:53:17:1e:46:ab:7b:
2c:ec:47:56:dc:6a:23:1c:26:1b:b6:6a:b5:79:71:89:2c:9b:
cb:6a:2f:7e:89:80:b2:d0:b8:4b:02:9d:5c:df:6a:c1:d5:27:
b1:fb:81:d4:72:0d:ae:1c:4e:68:8e:39:51:a1:8f:34:89:d4:
66:02:dd:b6:2f:8b:24:d0:6e:53:d7:72:2a:c6:bf:d9:2f:6c:
ac:95:62:d6:97:79:a3:a8:27:ba:90:2b:6d:5f:62:09:9d:8c:
77:83:66:16:e5:c3:0b:65:37:2f:6b:47:01:78:a2:80:02:3a:
8f:da:63:49:17:92:8b:d4:c9:25:87:be:9e:7c:3e:d6:e9:e2:
27:fb:a5:5c:bd:2a:b5:dc:73:d5:0b:de:f3:87:a5:e3:8f:5a:
99:58:82:4e:11:10:00:d9:93:2b:bd:35:3b:5f:e7:30:0c:05:
de:52:7d:f3:a2:a1:e3:e1:4d:20:62:1e:01:30:f4:38:c0:bb:
00:26:e8:c0:9c:29:6b:92:1d:34:fe:a3:13:90:ab:b5:1e:1c:
08:74:28:ec:1f:c6:ae:73:c9:db:2b:8d:5d:3f:a6:c8:70:2f:
18:d0:be:04:23:68:8e:66:89:31:fd:e8:7e:f2:c8:7a:c9:d8:
92:ad:ee:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:28:36 2025 by rpki-client