Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
File: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft (raw, json)
Hash identifier: kX4fURo2iWIcuiNszyWzWepSC7VOdgq9gyb6PT2nn3Y=
Subject key identifier: C0:1E:C2:B5:90:6E:FC:B1:74:9F:98:B8:33:D3:6F:C2:F3:74:AE:AF
Authority key identifier: 2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19
Certificate issuer: /CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
Certificate serial: 01968E14472579B3CC3D8319E779C0E7F536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
Manifest number: 0429
Signing time: Thu 01 May 2025 23:00:15 +0000
Manifest this update: Thu 01 May 2025 23:00:15 +0000
Manifest next update: Fri 02 May 2025 23:00:15 +0000
Files and hashes: 1: LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl (hash: bDK3D9bBR9zP0khX/e0MCCmdk0Q5d0pDlEmg6ckrQEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 23:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:14:47:25:79:b3:cc:3d:83:19:e7:79:c0:e7:f5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9c08bf21c7f59885bb5a6d481ffc3067969a19
Validity
Not Before: May 1 23:00:15 2025 GMT
Not After : May 2 23:00:15 2025 GMT
Subject: CN=c01ec2b5906efcb1749f98b833d36fc2f374aeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:87:8a:31:40:28:63:8b:c2:66:cc:01:00:96:
72:18:4b:1a:78:ce:35:cd:c2:69:0a:03:6b:7f:ba:
fe:9c:e1:8f:75:e5:50:2e:91:75:64:0f:46:64:4d:
0f:fe:08:e0:ab:a1:1b:6d:09:3f:9d:dd:26:8a:61:
49:53:da:59:0b:3e:94:3f:c2:3b:13:d6:00:81:41:
44:47:0c:16:13:7a:5a:49:bb:fe:63:17:bd:87:fd:
1e:cb:5d:91:a2:96:6b:b1:00:a4:f5:d1:37:b7:36:
87:cb:bc:09:81:ee:b9:3e:78:e8:e0:2a:06:d2:69:
b2:74:4c:23:f7:ff:d4:b0:47:8a:0f:3a:62:9d:05:
7a:cf:4e:65:cb:02:bf:42:bc:e1:2b:2b:a8:5e:86:
5d:b3:32:43:01:30:b2:4d:e1:24:18:8b:59:bf:15:
e2:ed:1a:bb:88:71:75:3c:2d:ed:01:6a:ed:8f:7d:
f6:b0:54:25:f0:cb:d6:65:6e:3c:3e:4d:73:8f:95:
b7:d8:08:97:d7:a6:ca:50:67:a7:c6:e6:ed:b2:3d:
d5:cd:c5:e9:31:c7:9d:1f:73:99:3e:c2:29:32:1d:
61:75:34:75:fa:5a:cb:54:29:16:f3:f3:39:f4:ed:
35:83:dd:49:18:a5:3e:83:f7:92:34:10:5a:ff:c5:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1E:C2:B5:90:6E:FC:B1:74:9F:98:B8:33:D3:6F:C2:F3:74:AE:AF
X509v3 Authority Key Identifier:
keyid:2C:9C:08:BF:21:C7:F5:98:85:BB:5A:6D:48:1F:FC:30:67:96:9A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/109558-4319-46c0-9ab2-12ea10714a56/1/LJwIvyHH9ZiFu1ptSB_8MGeWmhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b5:a1:bc:ef:76:46:3e:dd:fb:24:e7:4c:09:cd:6d:3f:79:
73:c5:fd:15:74:c6:86:63:e1:d6:bb:37:de:76:f5:e7:f3:07:
11:e2:ef:9c:dd:bb:b9:8f:be:42:50:21:14:7f:c5:a8:ca:1b:
88:d0:0b:06:b2:c3:d4:33:67:ee:77:90:5d:99:21:ce:dd:93:
7b:cd:27:36:49:cd:20:7e:10:a6:90:5b:13:af:84:d6:40:ea:
4f:41:ca:ac:bc:9a:fe:3a:d2:19:3f:ad:fa:e4:b5:0c:39:c6:
39:88:5c:e2:2f:aa:06:10:f6:04:01:bd:2b:3d:25:30:37:54:
99:53:31:be:41:ba:41:75:40:6d:d5:d9:ca:81:fa:4d:fe:3d:
26:dc:19:8e:db:e9:31:50:ef:09:a9:6d:30:3c:f4:27:2a:aa:
8d:83:56:32:aa:e5:dc:bb:bc:ad:6d:20:84:6a:98:1e:22:45:
eb:fd:94:39:ac:79:3d:4d:9c:59:77:64:bc:13:56:f9:87:46:
38:7f:2b:f1:0b:4f:ac:ed:8f:37:77:f3:ba:cc:34:0f:e6:f8:
f0:3d:2e:0a:b4:fe:5c:5c:74:c6:c6:61:d6:a1:f5:36:a7:69:
2b:3f:1b:17:88:36:56:76:c9:15:f2:85:d3:70:d1:23:5c:23:
b5:db:02:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:57:36 2025 by rpki-client