Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File: LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier: QKj0jK2xhGyp+UFtUSoth3dfgoczxk3eMHvrEm0qkjs=
Subject key identifier: 9B:A5:0F:AC:67:D1:3D:58:C2:B5:E5:95:C1:80:9E:5F:36:86:6D:7D
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial: 0196760CECC03B764C3D02D88D63657BA401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number: 10E0
Signing time: Sun 27 Apr 2025 07:01:20 +0000
Manifest this update: Sun 27 Apr 2025 07:01:20 +0000
Manifest next update: Mon 28 Apr 2025 07:01:20 +0000
Files and hashes: 1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: AJaJCq2MYZDsggL+WMLfvIt26eFei5OkDnkFt7GN0s8=)
2: ssRyWeDCXopCvGWiQY8ruW0oDiQ.roa (hash: 2AZtRMi6nv+D2sxR4SnvHBIVqRBNOJ+vabvqkW1Wzsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:ec:c0:3b:76:4c:3d:02:d8:8d:63:65:7b:a4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
Validity
Not Before: Apr 27 07:01:20 2025 GMT
Not After : Apr 28 07:01:20 2025 GMT
Subject: CN=9ba50fac67d13d58c2b5e595c1809e5f36866d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:32:60:a7:be:49:a8:70:e2:49:16:f1:0d:
d3:20:e1:d3:7c:63:14:33:65:bb:1e:23:b7:c6:cd:
9a:17:80:54:fb:f5:0f:18:c5:2d:3c:8e:96:61:c1:
4a:00:fa:93:d7:a7:61:75:2e:e1:a1:22:4b:e1:3d:
c0:d9:97:09:08:61:fc:ac:0f:f7:65:11:82:21:b8:
6e:09:3f:fa:ca:42:23:a3:16:b0:46:d3:6f:09:8d:
f2:97:f0:aa:d4:9e:e8:89:03:a6:c9:19:14:17:63:
d0:7c:1e:81:2b:3a:b6:66:43:68:30:1d:eb:77:50:
53:16:18:e0:f3:57:92:0c:c8:9f:82:5a:77:b2:23:
23:e9:51:2a:43:82:39:72:52:89:0b:0f:4a:dc:22:
17:b3:2f:d4:95:35:c4:b4:41:0d:9b:86:3b:ba:02:
e9:d4:0f:b3:1b:18:30:68:9f:d9:07:8e:0b:b6:8c:
2b:f5:60:2f:4f:07:fd:e4:b4:bd:ef:53:d9:e1:12:
67:a2:6a:40:d3:ee:89:55:0b:dd:04:2f:fb:7a:d3:
26:08:0c:a6:94:ce:cc:e4:e2:21:ca:2e:4f:77:16:
ca:06:96:de:a9:55:c3:fd:a6:93:ec:a0:31:70:6c:
8c:73:96:7f:30:c6:6c:c1:22:02:bf:09:d0:73:d1:
e3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A5:0F:AC:67:D1:3D:58:C2:B5:E5:95:C1:80:9E:5F:36:86:6D:7D
X509v3 Authority Key Identifier:
keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1a:f3:d5:fe:37:1d:3a:92:25:3a:ab:19:9b:4e:c8:f5:d7:
a2:ab:a4:9a:0d:0a:64:0d:53:d4:95:c4:37:4d:b7:93:d4:bf:
e8:92:da:e6:43:da:97:12:b1:bf:7c:58:a7:b8:99:7f:9d:85:
b5:00:ed:98:b5:2d:1a:43:0d:c4:b4:33:9d:77:43:4a:60:68:
95:0c:a4:65:16:6e:88:68:f8:21:53:1d:17:78:4b:0d:0e:c4:
c5:59:5b:c0:f4:72:04:78:69:24:ce:79:19:d0:b6:e7:e7:49:
25:17:f4:23:ba:f9:2a:04:68:46:3d:12:32:3a:7c:01:7c:46:
a2:90:1e:04:f1:ae:1d:6c:d2:95:74:22:b0:2d:76:f6:54:a3:
2e:4d:3d:9f:b6:3f:30:3b:69:67:77:9b:6c:b5:25:32:3e:83:
3d:30:db:c2:ed:d2:d5:09:6b:9e:a6:1a:a9:19:d5:cc:85:1c:
86:7e:9e:b9:2d:3c:32:31:cc:b1:8d:51:2e:9a:44:59:5c:5f:
e2:cd:72:ff:0f:eb:7d:57:87:18:6f:9c:5a:5a:3f:fc:10:ff:
98:5f:21:cc:49:b0:f9:3a:f1:13:df:6c:c6:68:2e:f6:42:e3:
a3:52:d0:76:1a:d6:c3:62:2b:45:47:70:f1:bc:95:61:9d:f9:
c5:b8:2f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:22 2025 by rpki-client