Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
File: LqdibWANr3WTdqZQfh1oQ4aZLTE.mft (raw, json)
Hash identifier: 7n/EUlZtZLzMVJ7NeTWAwn+TqWcOaXWeupnNWPSINh0=
Subject key identifier: C1:48:F5:30:BF:53:3F:D4:77:CD:B0:C0:45:31:E8:3B:19:17:DF:32
Authority key identifier: 2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31
Certificate issuer: /CN=2ea7626d600daf759376a6507e1d684386992d31
Certificate serial: 01967868CDB0CFB93904A4449B5A52BC6BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
Manifest number: 0B2C
Signing time: Sun 27 Apr 2025 18:00:56 +0000
Manifest this update: Sun 27 Apr 2025 18:00:56 +0000
Manifest next update: Mon 28 Apr 2025 18:00:56 +0000
Files and hashes: 1: LqdibWANr3WTdqZQfh1oQ4aZLTE.crl (hash: FTbb3EHL1v+PZQRjCLcoJ1hytkFl+ZL2EDZHKZ9vyVg=)
2: RnQqeSwt7hN3ORL3uVQS5JgLuZs.roa (hash: PSsACPr2ZZlu/VcCkGWefI0lMsTEK4kuZI31GIxteCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:cd:b0:cf:b9:39:04:a4:44:9b:5a:52:bc:6b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ea7626d600daf759376a6507e1d684386992d31
Validity
Not Before: Apr 27 18:00:56 2025 GMT
Not After : Apr 28 18:00:56 2025 GMT
Subject: CN=c148f530bf533fd477cdb0c04531e83b1917df32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:29:a6:a3:e9:c2:0d:82:b2:d2:e4:7d:0e:
34:be:ca:c5:b2:f6:3a:a5:fb:bd:4b:4d:7f:a9:74:
50:46:bb:89:ff:7f:90:74:c4:28:43:39:ba:1c:38:
13:23:bb:ff:fd:2e:7a:51:c3:d3:1f:aa:73:86:4e:
de:05:8a:4b:14:40:a4:50:97:45:ad:89:8f:ff:97:
08:a0:65:ba:5d:f2:5b:48:10:53:f8:a4:45:2f:44:
2d:0c:2c:1a:a4:c2:43:9f:aa:8a:e7:03:37:a4:1a:
13:a7:ff:83:18:64:d9:0a:40:0e:79:03:63:9c:70:
45:93:1d:ed:10:5f:66:db:af:6d:b9:a9:aa:fd:18:
4b:f0:db:cb:23:90:fd:40:67:6e:bd:1d:79:bb:0c:
3b:c6:8e:b9:b2:af:ec:05:a7:33:f9:ba:62:4d:38:
4e:70:a9:81:9a:b1:be:88:d6:0f:de:87:d3:17:af:
46:b1:47:7d:68:fe:76:e8:08:d4:42:62:33:4a:de:
83:83:c2:30:42:d3:01:9a:de:b1:75:39:0c:46:2b:
a1:a5:a2:96:cb:2d:aa:cb:2e:68:1a:ff:bc:83:0b:
70:e3:fb:79:58:7d:0a:e5:3c:5a:aa:57:89:1a:76:
c0:06:78:63:94:04:77:61:99:82:e3:35:b1:cc:e2:
f3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:48:F5:30:BF:53:3F:D4:77:CD:B0:C0:45:31:E8:3B:19:17:DF:32
X509v3 Authority Key Identifier:
keyid:2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:67:fd:21:5e:78:12:3a:68:71:1a:98:96:72:91:d6:70:15:
c3:92:56:eb:fb:af:7f:27:ba:d8:a9:9b:c9:3b:3b:07:6f:d8:
6e:55:97:36:d0:ee:73:55:a9:fb:39:8f:82:3e:d9:e7:58:c0:
d5:22:ce:2e:49:c7:53:03:70:2a:48:9a:0c:e8:70:3e:84:d0:
e7:e4:59:65:43:00:a0:a3:1d:ad:81:d4:58:11:a0:ed:d0:0b:
52:20:4b:41:ed:52:b6:e5:c1:c6:78:2a:cd:57:48:0a:54:31:
d1:5e:d9:7a:71:b6:f8:5e:77:45:23:bd:4d:04:f7:72:ec:d3:
c3:0b:bf:3b:e3:17:cf:29:ef:34:f4:ea:30:00:89:ec:88:09:
b6:bf:7c:09:43:8d:4a:c5:68:e1:81:71:db:e9:60:50:64:6b:
1a:23:05:91:84:a9:16:6e:f9:45:a0:46:4d:5b:67:fe:ab:0f:
1a:b7:6c:43:be:81:4b:f2:9f:dc:80:1c:96:a5:08:a2:21:4a:
28:4b:93:a6:cb:0b:05:1e:89:21:f0:14:15:d2:df:ba:3b:cc:
e7:bf:94:a6:be:9f:5b:b4:8d:84:22:54:d1:3e:91:e0:f9:56:
24:72:10:fd:c0:83:ed:7b:a6:08:9a:4e:0f:56:34:49:2a:7b:
e4:ee:ca:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:23:25 2025 by rpki-client