Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
File: _lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft (raw, json)
Hash identifier: HSxEGnm345vjXbGYTS/a592D/9/eSiFN4zpNXTFCN8s=
Subject key identifier: 3E:F5:36:C2:D9:4F:B6:62:F0:F7:F2:C0:24:B0:1A:14:6A:86:42:BA
Authority key identifier: FE:54:DC:FF:A2:06:F4:10:08:20:6B:51:F0:EF:19:C9:C5:80:DD:28
Certificate issuer: /CN=fe54dcffa206f41008206b51f0ef19c9c580dd28
Certificate serial: 01967BD77E358442EA138577190503108B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
Manifest number: 122F
Signing time: Mon 28 Apr 2025 10:00:42 +0000
Manifest this update: Mon 28 Apr 2025 10:00:42 +0000
Manifest next update: Tue 29 Apr 2025 10:00:42 +0000
Files and hashes: 1: _lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl (hash: gdcqBcMaRGE/1qIl02e9kMo+lCixw96k62Yx55ELJbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:7e:35:84:42:ea:13:85:77:19:05:03:10:8b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe54dcffa206f41008206b51f0ef19c9c580dd28
Validity
Not Before: Apr 28 10:00:42 2025 GMT
Not After : Apr 29 10:00:42 2025 GMT
Subject: CN=3ef536c2d94fb662f0f7f2c024b01a146a8642ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:14:ba:89:0d:5d:fc:0e:78:ce:19:56:57:
fc:0f:0c:f6:2c:69:81:6b:45:32:d9:72:a0:60:21:
94:e5:f4:f0:65:2e:53:30:e4:45:cd:16:54:9f:af:
d8:2b:ec:38:6d:62:e9:1d:cb:14:3a:1c:05:77:03:
d8:c0:5d:c6:55:86:b4:87:5d:e1:cc:70:69:38:97:
4a:f6:93:ea:e1:c6:90:4f:08:0e:11:2d:33:3f:46:
20:bc:e9:1d:e2:a4:79:b2:93:3a:eb:d5:af:f4:28:
97:2c:f8:64:5d:19:15:64:91:e5:59:86:ae:bf:3c:
3b:ca:6d:9e:1f:41:b8:fb:8a:a6:a7:1a:f1:24:93:
a2:63:57:8b:70:5b:01:90:25:80:2d:c6:b5:6d:7e:
c5:a8:f7:7f:38:16:ce:62:f9:24:af:4a:27:54:bb:
bb:f2:09:6e:34:d4:64:27:72:75:af:3e:1f:17:6a:
be:63:8e:7d:e8:dc:ce:9a:b7:1a:2a:e5:51:dd:4f:
37:8f:4d:e4:86:f6:60:f8:29:d8:83:4c:f1:c2:08:
a3:64:f1:4f:a6:db:80:59:ad:47:d6:85:7d:41:be:
c5:e0:c3:72:29:aa:df:8f:05:e6:dc:16:2c:8b:71:
76:b3:18:73:e5:f6:f6:56:a1:0d:f4:8b:4c:d8:31:
fe:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F5:36:C2:D9:4F:B6:62:F0:F7:F2:C0:24:B0:1A:14:6A:86:42:BA
X509v3 Authority Key Identifier:
keyid:FE:54:DC:FF:A2:06:F4:10:08:20:6B:51:F0:EF:19:C9:C5:80:DD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d7a04c-3999-42e7-ae7c-861184b881b0/1/_lTc_6IG9BAIIGtR8O8ZycWA3Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8f:6e:9f:89:15:8f:3a:35:8e:0e:88:a9:ac:3c:0c:4c:6c:
c7:00:cc:23:0c:49:86:0f:5a:7c:52:f2:5b:89:92:39:cf:81:
df:72:71:47:a9:b1:3e:6e:53:9b:2d:95:5d:5d:fb:b6:d1:5a:
cb:77:2b:13:29:e6:02:27:39:6f:78:8f:6e:2b:77:7b:a4:ba:
c6:e2:bd:c7:13:3b:d8:5f:49:41:4a:12:67:2f:aa:20:7c:34:
2a:5a:5e:44:b0:42:56:75:75:4e:a7:6a:bf:c7:15:0a:9d:71:
de:09:71:57:30:48:d9:37:1f:87:83:9b:65:11:b1:5e:4f:56:
ce:3c:b6:c1:86:44:d5:a4:96:cb:64:83:4f:9a:a1:0e:92:44:
76:dc:f7:eb:70:a8:65:ef:17:6e:07:38:78:b1:bf:81:0c:89:
6d:a5:72:b1:7a:4d:2c:44:f3:2c:d7:a7:cf:cb:28:9e:cc:e6:
76:11:df:e3:a9:be:ff:7b:6f:5b:24:1b:c1:22:76:82:18:d3:
f3:4c:95:5f:d1:c7:fc:bb:18:66:d7:6c:10:62:c0:b7:4c:94:
f9:5b:87:90:77:9d:50:e2:6c:ff:44:2b:1d:ac:f0:c7:a6:86:
c0:dc:4d:a6:de:b4:ad:69:06:81:5d:e2:f9:d9:16:4c:b7:ee:
cc:80:f4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:24:28 2025 by rpki-client