Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
File: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft (raw, json)
Hash identifier: qp4Qb+pCFpgarJ91E2u1ImxfZPX99ZMAAGHuSN1EBhQ=
Subject key identifier: 8E:EC:14:A6:A3:58:BD:D6:BA:2A:15:9D:D1:07:BC:C3:52:0A:78:5A
Authority key identifier: 2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
Certificate issuer: /CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Certificate serial: 019676432A49B78CA217B1ACFB785DAD6D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
Manifest number: 0286
Signing time: Sun 27 Apr 2025 08:00:35 +0000
Manifest this update: Sun 27 Apr 2025 08:00:35 +0000
Manifest next update: Mon 28 Apr 2025 08:00:35 +0000
Files and hashes: 1: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl (hash: SJ+FJVg5tS47qrEmwWxU2rq3gl2J0pHKlHzWlqwMhU4=)
2: fQ0Sre67u9FqAYj17x6CK1Kn0s0.roa (hash: gbYNt5MQ+KrOgley7XtqGDbUm1YLGIimwaWi/r+Sqf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:2a:49:b7:8c:a2:17:b1:ac:fb:78:5d:ad:6d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Validity
Not Before: Apr 27 08:00:35 2025 GMT
Not After : Apr 28 08:00:35 2025 GMT
Subject: CN=8eec14a6a358bdd6ba2a159dd107bcc3520a785a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:9b:84:f5:35:47:57:f3:5d:a9:8e:1e:7c:
bb:b2:ff:27:53:ea:25:fb:92:f1:d4:18:e3:2f:ae:
c8:7b:34:27:e6:73:72:0d:6f:25:90:bb:9f:63:8b:
df:08:3d:43:d4:ac:9c:f5:81:f8:89:49:39:3b:99:
89:73:ea:e4:10:0c:75:81:fd:80:69:fa:67:7c:d3:
99:10:54:51:f9:e3:d7:8f:c6:e7:fa:de:eb:e7:02:
1e:ee:f6:b2:09:61:af:d7:74:be:cb:e6:08:a4:cc:
14:0f:30:2f:71:a5:3d:a6:ff:69:fd:f7:ca:5e:74:
ec:65:8e:17:3c:90:1d:81:16:29:3c:84:1f:e2:66:
90:2e:51:4c:64:2e:0b:1f:11:71:21:e1:a1:f4:7a:
67:0f:12:b7:bd:1c:c6:6c:80:1e:1c:d0:ba:4c:26:
24:b8:11:89:b2:c8:b7:82:69:81:f5:91:f2:dc:a0:
9b:bf:3e:89:ba:90:ed:b0:0d:af:50:b1:1f:da:1e:
7a:c5:81:bf:02:3b:76:d4:ae:ba:c1:14:a5:c7:dc:
68:24:c1:63:15:6c:e0:9b:9e:a0:bf:b2:c2:90:be:
45:92:2c:d4:e9:b6:cc:fd:cf:5a:ff:44:bd:d1:00:
d5:58:2e:4a:64:1d:2e:15:c5:81:a9:42:e6:9d:11:
23:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EC:14:A6:A3:58:BD:D6:BA:2A:15:9D:D1:07:BC:C3:52:0A:78:5A
X509v3 Authority Key Identifier:
keyid:2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7a:10:43:10:85:43:90:4d:4d:02:d8:6f:8e:b5:3d:c9:7c:
cf:3a:b8:5b:86:87:dc:ea:f2:95:3e:9e:8c:76:5e:8e:cd:a1:
00:63:8d:d1:c3:f6:d7:40:d8:ed:79:08:33:10:fc:88:2a:64:
a5:1b:08:fb:fe:00:c1:05:94:68:a4:bd:3c:8d:32:f2:99:f9:
a5:17:47:90:15:b8:9b:cf:92:7e:e7:08:d1:03:eb:ab:20:f0:
5e:64:76:7b:22:c7:86:2f:fa:0f:2a:11:84:83:d0:f2:0a:4a:
87:69:6c:0b:2f:94:d5:c3:4c:73:74:48:0d:eb:99:87:5a:30:
81:36:79:ba:16:a0:d7:26:93:1e:b5:29:d8:44:dc:93:36:ae:
12:20:ce:bd:4c:13:f5:75:aa:a4:6f:5b:ff:84:f7:7f:b2:69:
92:a7:0a:fa:2f:ea:2a:1e:5d:50:b7:58:4b:78:81:6b:af:08:
f2:ce:67:53:6e:7b:22:e8:56:11:21:d3:cc:59:92:30:38:28:
f2:6b:b6:79:d4:fa:fc:f8:42:07:e0:10:69:4f:98:b3:fc:86:
9c:06:5b:b1:cb:a0:ba:61:20:27:d4:ad:b7:1c:e9:4b:40:f0:
4b:0e:68:32:45:1a:72:cb:5a:ca:92:d8:18:01:b5:93:44:1c:
d0:29:50:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:28 2025 by rpki-client