Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
File: LXR59FZDorguENq_c-_vdwOx4tI.mft (raw, json)
Hash identifier: gDfHClQ+uyuKKmtIS5nr5vUtnAn1Y03CZnsr77PPgrE=
Subject key identifier: 1F:E7:F5:9E:96:AA:81:FB:4C:4E:E8:84:6C:63:B2:E4:10:05:5C:8D
Authority key identifier: 2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
Certificate issuer: /CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Certificate serial: 01967A573E55F7CB76850E22A0A36FA8632F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 03:01:00 +0000
Manifest this update: Mon 28 Apr 2025 03:01:00 +0000
Manifest next update: Tue 29 Apr 2025 03:01:00 +0000
Files and hashes: 1: LXR59FZDorguENq_c-_vdwOx4tI.crl (hash: 066pI664CGWbsJTdz+KelQucbgnoSgnaFswGRM9hgjQ=)
2: unRbkKxOnR98ml1J5g6bUjmiKYg.roa (hash: dSoLjUhYv2hRLBN1CZDtznSmSO++ZyOw/lIWfxfiQjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:3e:55:f7:cb:76:85:0e:22:a0:a3:6f:a8:63:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Validity
Not Before: Apr 28 03:01:00 2025 GMT
Not After : Apr 29 03:01:00 2025 GMT
Subject: CN=1fe7f59e96aa81fb4c4ee8846c63b2e410055c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:74:7c:3e:15:f1:01:f2:dc:6d:ed:41:9a:ff:
f9:d8:31:d4:f4:30:d6:91:43:21:c9:de:52:ed:82:
83:b8:24:89:ae:b6:bd:3f:e3:05:3c:4c:c8:58:17:
71:07:86:24:81:78:b9:f6:d9:f3:22:8f:0e:ca:e5:
08:ab:52:59:8f:36:9e:5a:3e:7d:59:08:74:11:d0:
b8:18:65:6e:a6:b3:18:10:1c:67:8f:7d:eb:93:c6:
c1:c6:99:ee:35:4b:ea:05:03:17:16:1f:d4:1c:06:
7e:86:d4:a1:b0:74:bd:10:b5:68:d0:1e:f2:71:7c:
de:13:fd:81:d6:14:e5:9f:33:80:21:85:46:88:e6:
73:5b:30:ea:ee:b5:25:d3:ae:f5:76:8d:fb:ed:c6:
8d:79:5e:41:3e:f7:b1:17:8e:73:f8:b2:95:65:d8:
de:dd:8a:ba:48:bd:0a:9e:44:17:d3:33:25:3a:08:
c0:52:5f:fb:96:30:16:44:92:e8:88:55:d5:d3:0d:
d7:15:45:09:6b:80:0d:d9:7e:62:35:72:8a:79:b6:
30:42:31:55:11:b7:f0:3b:30:cb:c9:3f:15:72:4e:
0d:e6:c9:98:6e:53:44:54:e4:d6:b4:cc:39:f0:e2:
f5:74:ee:a2:ee:be:6d:6f:e3:f4:36:fa:d1:e9:c6:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E7:F5:9E:96:AA:81:FB:4C:4E:E8:84:6C:63:B2:E4:10:05:5C:8D
X509v3 Authority Key Identifier:
keyid:2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b0:b8:c0:19:77:15:e4:03:84:6c:7c:4a:ce:64:89:0c:53:
70:2c:38:56:ca:22:84:38:11:70:6f:25:d2:c7:f4:19:dd:e8:
94:ff:b1:25:45:31:21:6b:62:49:2e:ec:0c:f9:28:29:9b:5e:
d5:ac:13:c8:c2:40:eb:af:53:57:2b:00:a7:d3:92:10:73:a8:
d7:71:cd:57:ea:91:a7:2f:d7:27:4e:3c:44:71:db:2f:e1:4e:
08:6e:3d:ae:d0:59:0b:45:90:0e:10:4c:9d:77:86:0b:7b:45:
20:ee:34:85:aa:a3:58:6d:32:1a:54:15:72:fd:56:05:b6:78:
00:ec:28:c1:9e:73:47:62:67:c0:89:fc:95:90:3f:0e:e7:5b:
d8:96:42:9c:8d:89:ea:cb:6c:5d:dd:8e:8e:06:75:4d:60:41:
f4:63:da:ff:25:fb:6b:6b:42:fe:a4:56:8e:84:c1:b2:c3:53:
27:25:dd:0f:b4:b9:be:3f:fb:98:6f:a8:ec:d9:87:c6:59:09:
a2:9a:6d:ac:f1:a6:1e:ae:dd:e0:ec:69:d6:c9:aa:42:12:ea:
41:f5:c9:0d:8b:90:6e:74:74:02:03:26:54:94:68:5e:98:e2:
13:eb:0c:1b:b9:8b:39:14:8e:4f:43:fe:81:f6:ce:d5:3e:1a:
cd:c4:88:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:15:09 2025 by rpki-client