Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
File: LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft (raw, json)
Hash identifier: nHhqcG4UBMnL2kPK6kZaXYeDLAVHlI05TTd8G9DQomE=
Subject key identifier: 5B:11:FF:87:8B:F4:C9:3A:5C:D8:29:06:4D:A2:28:7F:C3:51:63:AF
Authority key identifier: 2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
Certificate issuer: /CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Certificate serial: 0196764331DF24B7098C12EECE985EE15CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
Manifest number: 1518
Signing time: Sun 27 Apr 2025 08:00:37 +0000
Manifest this update: Sun 27 Apr 2025 08:00:37 +0000
Manifest next update: Mon 28 Apr 2025 08:00:37 +0000
Files and hashes: 1: LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl (hash: rM74FC5RrFrkv4NWBlzbm+ZD8SY3DiZryPn7xHoeaFc=)
2: jw6vhP1XSWL-mJ5DdRhBrk5Uzas.roa (hash: Kw3hAcXjhw+zjLuWTzYjCzsx/BTtTlyQ/NHsrLRcPPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:31:df:24:b7:09:8c:12:ee:ce:98:5e:e1:5c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Validity
Not Before: Apr 27 08:00:37 2025 GMT
Not After : Apr 28 08:00:37 2025 GMT
Subject: CN=5b11ff878bf4c93a5cd829064da2287fc35163af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:95:c6:ef:b4:e5:a2:05:48:68:a0:68:fe:
db:b9:ed:64:13:f8:93:0a:2f:94:87:f4:f8:02:f1:
2e:9a:ef:2c:a6:9c:36:da:94:03:7c:cb:98:d1:7e:
46:97:8f:85:e1:8a:ff:6f:c0:ee:fd:8b:84:9b:d1:
e4:7f:fc:c9:16:70:ef:f6:50:5b:e6:62:a8:27:84:
1d:f9:25:07:32:dd:3e:59:4b:0d:df:d0:f4:38:54:
e2:4d:5e:e5:3f:8b:19:f3:2b:e2:43:6c:93:09:1e:
e7:7e:1c:6f:f2:5c:2a:ad:53:1f:7c:c6:ca:e8:1d:
48:82:54:a5:e2:55:1d:ce:1f:d1:04:ff:d2:45:a4:
6b:20:d8:af:88:92:32:81:f8:46:80:de:2f:6d:6b:
da:fe:3c:6c:c7:3a:5f:cb:0b:81:84:19:e8:da:fd:
22:b6:95:dd:70:a1:58:37:3c:a9:22:be:88:99:01:
38:e6:53:35:1c:c4:79:e9:7d:f1:6b:cd:11:5b:25:
1f:16:f9:fa:35:b5:0e:d7:84:08:19:5c:84:19:18:
0e:eb:ad:4c:fa:cf:f2:73:87:9f:9f:66:2d:5d:68:
76:d1:f1:86:8c:40:cc:53:45:67:d0:c8:5f:dd:7b:
d9:2e:5c:79:a0:7f:59:b5:97:73:55:0e:74:63:fa:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:11:FF:87:8B:F4:C9:3A:5C:D8:29:06:4D:A2:28:7F:C3:51:63:AF
X509v3 Authority Key Identifier:
keyid:2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:15:b6:01:89:26:7b:18:d2:ad:d5:74:3c:29:2e:1a:6b:e0:
a1:7a:c4:7e:65:05:98:f4:bf:18:9f:28:1d:1a:fc:53:0d:a7:
17:58:8d:7c:3e:fc:fe:f0:3f:eb:30:82:b9:a6:71:47:0a:a2:
db:5c:4c:c0:9a:28:45:3c:45:3f:d4:3c:58:38:0e:27:ca:f1:
79:83:04:b8:c3:45:82:f7:c0:60:2b:e4:49:58:b2:ea:5b:00:
9a:5a:19:28:5b:41:c1:08:71:f3:9f:ad:21:e2:ae:b2:88:ec:
75:4c:6f:f1:3f:df:cc:ae:da:f1:12:42:a3:4f:50:ad:69:5e:
9e:c9:80:ea:32:bc:f8:60:2a:64:48:98:33:a6:6c:37:87:92:
cc:8c:5f:d0:67:91:55:ed:66:04:63:09:92:a8:74:b9:1b:dd:
fb:8b:27:7b:b5:20:4e:29:bf:81:58:21:d0:65:6a:6c:8a:98:
04:e8:a1:ce:fd:91:8d:1d:20:f3:6d:f6:67:ae:c4:1c:61:94:
8a:66:fc:e2:f6:be:58:61:d5:b3:37:7d:fa:1b:ae:92:1a:0c:
a5:74:58:58:49:9f:95:e9:2f:30:7b:3b:d9:03:a7:fb:75:4d:
87:50:20:ec:69:1c:46:c6:a0:76:0b:f0:17:4f:12:ca:cb:95:
4b:99:5d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:07:58 2025 by rpki-client