Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
File: LJ5JliBz-e-2akswNQbaY0FWdFA.mft (raw, json)
Hash identifier: /RAdaMRq5mjD9Nv8Vx91EVrgG46RMV2F7i9GN5ILXdI=
Subject key identifier: 07:8D:F9:09:CC:D6:E4:56:1B:56:CF:FA:6D:0D:E7:7C:D3:49:A2:0A
Authority key identifier: 2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
Certificate issuer: /CN=2c9e49962073f9efb66a4b303506da6341567450
Certificate serial: 0196760C75AA0D53FB30B46071D87B9D97AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
Manifest number: 0496
Signing time: Sun 27 Apr 2025 07:00:50 +0000
Manifest this update: Sun 27 Apr 2025 07:00:50 +0000
Manifest next update: Mon 28 Apr 2025 07:00:50 +0000
Files and hashes: 1: LJ5JliBz-e-2akswNQbaY0FWdFA.crl (hash: 0GYhFVs5WrKrzeppkmivd2eajg+Z/9IIKwe55OLW2gI=)
2: VnFuwyOVc-8FDMBGZlBiQ-irUzE.roa (hash: tRAgQjQoKta45RiBiGyMeDtAGjPlZ73eJ8Ph4HOTmxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:75:aa:0d:53:fb:30:b4:60:71:d8:7b:9d:97:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9e49962073f9efb66a4b303506da6341567450
Validity
Not Before: Apr 27 07:00:50 2025 GMT
Not After : Apr 28 07:00:50 2025 GMT
Subject: CN=078df909ccd6e4561b56cffa6d0de77cd349a20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:9c:a9:d4:03:b1:a2:be:39:52:4f:c6:89:
63:9e:87:60:be:74:bc:1b:88:a4:9a:08:aa:a2:b1:
32:f0:46:54:cf:0e:a3:c7:81:f7:be:cb:f7:98:61:
65:98:34:00:9a:96:a1:2d:cf:84:2e:ed:6a:ef:2e:
80:63:53:34:1d:18:66:53:25:a9:68:45:f7:05:d3:
a4:0d:99:06:92:0f:0b:18:ed:d5:3b:a6:6f:30:8c:
2c:08:e4:dd:22:41:a4:3f:4a:52:c9:e7:e1:9a:b7:
de:f3:50:a7:63:dd:a6:2d:1a:4e:e4:6e:af:e4:5d:
5b:b6:d5:e8:f3:94:55:7c:72:73:89:2d:f7:6f:9d:
5f:a9:08:f9:2f:39:2e:88:88:ee:f2:00:d6:14:68:
77:86:10:a8:82:fb:65:8e:2f:1b:ba:c1:5a:ac:dc:
94:91:2c:f4:74:27:78:1d:88:60:be:6c:c0:11:52:
5f:0f:a0:f8:af:c6:b4:42:b6:60:80:fd:15:98:bd:
f4:38:2d:47:57:49:7d:32:f9:c1:68:06:19:78:aa:
34:3a:d4:ae:29:ac:9b:2e:7c:66:75:8a:f8:06:6d:
66:35:75:78:fe:72:5a:2d:af:f7:c1:3f:78:31:33:
92:40:b7:19:0b:c8:65:ba:40:23:09:18:0a:d2:95:
71:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8D:F9:09:CC:D6:E4:56:1B:56:CF:FA:6D:0D:E7:7C:D3:49:A2:0A
X509v3 Authority Key Identifier:
keyid:2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d1:2d:e0:49:bd:a5:2c:59:f3:d7:57:5c:42:81:19:a8:f4:
be:ba:06:80:d8:bf:0c:c2:f0:06:6a:d4:21:27:98:87:d3:da:
3e:bd:a4:a5:bf:2c:f3:2d:34:dc:5e:00:ef:28:e9:b8:46:42:
31:77:cd:1d:d2:ea:05:87:49:55:0f:1e:aa:69:b4:9a:73:9d:
a7:89:9d:c6:bd:60:3c:2f:09:8b:b6:1b:d8:d1:bc:ca:84:7f:
97:26:73:08:ee:96:72:43:ff:30:a8:ba:2e:0d:b7:95:3a:78:
12:6b:f0:32:ff:dd:39:40:5b:a7:9f:50:66:39:40:1a:9c:e8:
cb:68:78:d8:ec:ff:72:c2:b2:23:2c:f1:d6:14:e4:17:0d:58:
0c:1c:53:47:49:64:a0:02:f6:42:b4:fc:85:26:5d:4c:f7:50:
0b:f0:89:99:23:64:d5:73:50:53:18:b1:1b:cd:d8:22:56:14:
cf:51:69:9d:ff:b1:d8:42:9f:1a:1a:d5:f6:9c:4c:91:a2:45:
d0:35:d1:a5:e6:87:12:c2:1e:66:ca:12:eb:41:6a:7f:26:8a:
27:6f:2b:0f:d9:1c:1d:8f:e5:6e:00:72:68:5c:b3:48:73:d3:
35:34:15:84:b4:e3:2b:ef:87:04:86:71:f9:37:62:13:db:ef:
26:16:eb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:33:03 2025 by rpki-client