Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
File: LOuI0A5SCtZgtBbZIInGDVyPE-E.mft (raw, json)
Hash identifier: iYpxIJDsUmU16DqidrXNOnvFY/gbU8+M0hTpn2Hkmqg=
Subject key identifier: 33:3A:55:A6:B1:12:C6:E6:87:18:F0:ED:D3:EC:75:82:D1:26:28:EB
Authority key identifier: 2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1
Certificate issuer: /CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1
Certificate serial: 019674C2496449F09E89AF64AE6BD7467245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
Manifest number: 017F
Signing time: Sun 27 Apr 2025 01:00:11 +0000
Manifest this update: Sun 27 Apr 2025 01:00:11 +0000
Manifest next update: Mon 28 Apr 2025 01:00:11 +0000
Files and hashes: 1: LOuI0A5SCtZgtBbZIInGDVyPE-E.crl (hash: SCfJvTQRgTdADQY64CSgaIC/64E4jGtM/RSYvRkfwe8=)
2: Y46vCOXYHw7rQaQKH4vVvjsoPj0.roa (hash: x4bPgE4P0Zq2nwgUR4AjUuUSz6sm/lpYmxdn5ktx7oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:49:64:49:f0:9e:89:af:64:ae:6b:d7:46:72:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceb88d00e520ad660b416d92089c60d5c8f13e1
Validity
Not Before: Apr 27 01:00:11 2025 GMT
Not After : Apr 28 01:00:11 2025 GMT
Subject: CN=333a55a6b112c6e68718f0edd3ec7582d12628eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:a9:7c:c6:be:b5:b1:f8:b7:28:df:7b:68:
b5:22:6f:74:83:d1:9f:d9:e5:7d:e1:88:0c:19:81:
02:a2:ac:aa:f3:8b:4d:f9:85:64:63:8f:4d:05:03:
ec:5b:c7:72:07:63:26:0e:99:3a:11:34:6d:98:86:
06:e6:20:7a:76:09:f0:41:19:2b:a0:d3:8a:97:44:
53:21:b3:ce:2e:60:a6:06:58:97:84:b7:b1:10:15:
11:c8:b1:05:98:07:54:f3:e8:1e:59:1d:5d:40:67:
90:c4:4c:3d:b9:7f:83:95:01:a9:ce:e6:41:14:ca:
28:5b:32:24:ec:49:e7:ab:46:cf:60:a6:86:d7:1c:
43:da:94:5b:08:40:b8:32:d6:fa:1c:10:cb:e0:bb:
29:f1:44:20:fa:4d:cb:41:9d:42:8e:34:12:73:20:
31:d9:6c:dc:32:8d:73:f4:cb:03:c5:65:62:e3:2d:
90:f4:4e:e2:49:7b:e5:fa:3a:7d:c3:d5:9c:03:f1:
cf:bc:e1:ac:6c:b1:18:55:4e:6b:15:df:8a:77:e7:
da:28:53:86:13:62:b2:13:5a:57:03:85:1d:38:9d:
9b:b6:1a:6b:81:48:60:84:00:4a:88:5d:48:ad:35:
5b:0e:2c:e5:9a:95:62:73:71:2f:71:96:06:6d:28:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3A:55:A6:B1:12:C6:E6:87:18:F0:ED:D3:EC:75:82:D1:26:28:EB
X509v3 Authority Key Identifier:
keyid:2C:EB:88:D0:0E:52:0A:D6:60:B4:16:D9:20:89:C6:0D:5C:8F:13:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOuI0A5SCtZgtBbZIInGDVyPE-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b238e3-0ad8-4a99-bf2f-ce782aed30b4/1/LOuI0A5SCtZgtBbZIInGDVyPE-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ba:60:08:9e:e1:5b:8b:f9:06:e5:e6:19:3e:00:6b:01:0e:
cb:8d:9c:c0:d8:ca:04:3f:10:35:f4:37:d4:f6:bd:7b:ea:9d:
d2:f6:93:5e:d2:c4:53:0f:b5:f4:ce:a3:e6:cc:c3:12:e3:4a:
7f:ba:62:6c:29:59:90:16:15:31:af:65:4a:f4:63:e1:c0:85:
73:75:9b:f9:b2:c2:fa:49:b5:f6:22:6f:17:bc:43:6e:6b:48:
ca:04:88:79:ef:64:d5:01:36:77:71:df:ee:b4:86:de:97:2c:
d9:0d:3a:ba:7b:3e:a6:66:e9:a7:0b:63:cc:cd:6a:d9:a7:7a:
0a:8e:a6:4f:0c:b2:4f:02:15:ff:58:6b:8d:66:ef:ea:78:d1:
de:31:1b:22:81:f9:eb:49:ff:9b:03:7a:61:1c:8c:c2:f2:ac:
ef:78:dd:1e:54:c1:84:7c:21:98:43:90:b6:d5:d1:18:89:16:
1f:24:19:41:c7:b3:43:cf:4f:c2:60:bc:70:38:be:db:5b:70:
0e:79:c0:38:dc:0a:2e:69:24:ba:8f:08:f8:66:db:fb:38:fd:
9b:d5:ae:0b:4f:cf:f4:69:ce:4e:c5:64:22:a4:9e:3b:7e:b5:
f0:77:f8:1a:77:75:c9:f2:1c:46:f8:1c:f4:b9:7f:4e:6c:f0:
a8:19:d7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:02:35 2025 by rpki-client