Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
File: lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json)
Hash identifier: Z86/XEzk9DaOeTNTtrtXYjAkPWHMnlS/AIKM+f5K3es=
Subject key identifier: 13:58:DD:FC:F4:23:37:A6:C1:11:91:74:D8:8E:E3:4C:9E:BC:7A:14
Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
Certificate issuer: /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Certificate serial: 0196760C89F856B1E54D04DB40078915E2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
Manifest number: 039B
Signing time: Sun 27 Apr 2025 07:00:55 +0000
Manifest this update: Sun 27 Apr 2025 07:00:55 +0000
Manifest next update: Mon 28 Apr 2025 07:00:55 +0000
Files and hashes: 1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: IVG+Ry/KaJeZMTF7aeO7zNUht53gtMX+nH0txOWdfwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:89:f8:56:b1:e5:4d:04:db:40:07:89:15:e2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Validity
Not Before: Apr 27 07:00:55 2025 GMT
Not After : Apr 28 07:00:55 2025 GMT
Subject: CN=1358ddfcf42337a6c1119174d88ee34c9ebc7a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:8b:1d:97:34:65:72:20:c9:8a:9c:a7:93:
e6:be:f9:42:b5:4a:44:18:35:3f:ff:30:e5:66:94:
c7:b8:6f:8c:b3:77:bd:80:bd:32:ad:4c:79:68:54:
f3:13:e5:5a:c0:63:95:8e:9b:fd:0a:f6:09:7f:b1:
28:6d:bb:29:77:6e:6f:b2:8d:5e:ed:8b:a0:8c:2b:
a2:7b:27:50:7b:26:77:29:52:ab:11:91:9a:36:6a:
17:4c:cd:57:b3:2c:a0:bf:ce:7b:a1:84:91:d1:84:
c2:ab:af:bb:1b:69:50:b3:21:e4:c2:37:8c:2a:36:
5d:71:78:1b:7a:04:81:e9:f4:90:dd:1b:0c:f2:5f:
dd:36:94:50:69:66:f6:fc:3c:4a:00:37:f0:23:87:
16:92:4c:21:75:86:4c:bf:b0:97:a1:8c:42:9a:6c:
82:ed:89:84:03:62:2c:99:cf:36:bd:07:88:b9:fb:
16:ce:b8:d0:76:dc:be:6a:1c:3e:c2:7c:58:8b:da:
83:83:3d:07:80:67:61:ea:e3:81:ac:c1:9b:7e:3b:
f9:77:f8:86:cc:00:e2:19:2e:0a:69:a4:1a:bf:7a:
ad:b9:3f:9e:0f:f7:bc:72:21:15:4d:fe:42:94:05:
22:5b:13:7f:e7:cc:18:2f:34:48:e9:31:dc:fd:c6:
e7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:58:DD:FC:F4:23:37:A6:C1:11:91:74:D8:8E:E3:4C:9E:BC:7A:14
X509v3 Authority Key Identifier:
keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f3:e8:a9:f8:fa:7d:af:0b:c7:72:fb:72:bb:40:37:82:6e:
3d:83:1f:86:a4:56:fe:99:06:2c:2e:96:8e:21:67:3c:55:a0:
1e:24:f0:f2:f2:c0:54:cf:4a:20:51:88:72:0c:ec:07:95:bc:
73:13:2e:87:e7:24:23:f0:62:66:c4:b1:c9:9d:bb:fa:4c:2d:
b1:fe:b2:10:5b:a3:05:23:79:d2:b0:b8:6b:fd:8b:02:82:01:
fd:6d:e6:cf:32:5d:c4:c6:88:9b:48:b9:50:43:2f:eb:fd:cc:
de:ed:f8:b6:1b:da:12:2f:9a:3d:e4:3e:10:d2:1c:53:28:71:
4e:15:4e:f2:3b:15:5a:bf:de:4d:d6:08:3e:38:b2:9d:b2:10:
56:24:79:92:85:36:34:a2:7b:e0:74:1a:ca:50:be:22:6f:9d:
1d:95:3d:f2:47:15:a2:3f:60:bc:da:68:37:f5:33:97:fe:3a:
21:00:db:30:1b:f3:f8:e0:e3:95:92:ce:cd:09:17:13:09:3a:
9e:89:00:6e:69:61:d9:10:16:7a:e4:d4:60:60:c0:1f:d4:c9:
aa:d1:78:97:2b:d3:d7:d4:22:85:ed:f2:eb:f8:43:f7:da:c6:
48:b7:b6:9b:d8:9d:55:87:5e:51:51:6b:15:95:97:2a:a8:12:
49:17:4d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:44:13 2025 by rpki-client