Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
File: lQSgmkWW2BV9pp3DNGxavOTOThM.mft (raw, json)
Hash identifier: dZqAW0/4KdGYVlvME/L4AnMO53PxhvuVnAXgVrR5C2Y=
Subject key identifier: 78:A5:59:61:C2:3F:B5:34:58:8C:2D:C1:1C:CC:0E:B4:2E:87:9C:A9
Authority key identifier: 95:04:A0:9A:45:96:D8:15:7D:A6:9D:C3:34:6C:5A:BC:E4:CE:4E:13
Certificate issuer: /CN=9504a09a4596d8157da69dc3346c5abce4ce4e13
Certificate serial: 01967C0E873E0F4B80D3C7AE0539AF904D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQSgmkWW2BV9pp3DNGxavOTOThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
Manifest number: 016E
Signing time: Mon 28 Apr 2025 11:00:48 +0000
Manifest this update: Mon 28 Apr 2025 11:00:48 +0000
Manifest next update: Tue 29 Apr 2025 11:00:48 +0000
Files and hashes: 1: lQSgmkWW2BV9pp3DNGxavOTOThM.crl (hash: 6kiL1r5ArUzCdK/vi9OGt2b1ZuJy0dtMoM3eaBJsL0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQSgmkWW2BV9pp3DNGxavOTOThM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:87:3e:0f:4b:80:d3:c7:ae:05:39:af:90:4d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9504a09a4596d8157da69dc3346c5abce4ce4e13
Validity
Not Before: Apr 28 11:00:48 2025 GMT
Not After : Apr 29 11:00:48 2025 GMT
Subject: CN=78a55961c23fb534588c2dc11ccc0eb42e879ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:90:35:40:16:9a:c9:f3:58:d7:64:a9:05:
8b:b9:88:91:fd:97:1c:5c:fc:58:d6:17:72:3d:25:
e3:c5:f2:be:fb:e3:f1:00:cd:6a:ba:5f:61:bb:1b:
ee:45:29:f5:2d:59:73:33:38:5a:21:63:3c:02:6a:
93:dc:90:46:cb:91:4a:3a:bd:9d:d0:ab:be:19:d8:
d2:b8:9f:8a:f7:40:95:d4:c3:92:0f:8e:b9:3e:9b:
4a:3e:0c:4a:66:a4:89:cc:47:5c:b0:a5:4c:87:cb:
09:cd:4a:0c:21:54:5c:fc:33:a3:40:8b:95:42:30:
9d:11:f2:b8:28:50:9f:07:32:8f:55:63:28:88:88:
27:7d:1f:5c:74:31:9f:2c:d1:7f:b7:d3:03:6f:12:
54:c2:10:38:52:69:3a:24:53:03:e5:c4:d1:43:99:
97:94:83:6a:e9:df:94:ed:e5:c5:b0:76:dd:33:91:
e0:c6:40:09:ce:49:ba:06:cd:ce:1c:ea:96:10:cf:
f3:40:17:03:c1:06:69:d5:75:31:9a:38:83:11:26:
73:86:40:9a:8a:e2:41:5a:69:2d:ac:bd:dd:b9:49:
62:69:f2:b9:3f:3e:92:31:36:6a:54:5b:37:73:93:
96:01:b2:7f:1c:c0:d4:60:d9:aa:d2:ef:89:50:e3:
2b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A5:59:61:C2:3F:B5:34:58:8C:2D:C1:1C:CC:0E:B4:2E:87:9C:A9
X509v3 Authority Key Identifier:
keyid:95:04:A0:9A:45:96:D8:15:7D:A6:9D:C3:34:6C:5A:BC:E4:CE:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQSgmkWW2BV9pp3DNGxavOTOThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9eaf5c-8c54-45ed-bfc4-673c3889161d/1/lQSgmkWW2BV9pp3DNGxavOTOThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:22:9f:fa:11:2c:8e:84:b4:11:26:69:6b:b8:f9:f9:51:60:
13:51:db:5e:ff:5b:55:48:0a:8e:ed:b9:e4:8a:99:ca:26:cd:
24:83:ab:b1:78:34:bf:1e:68:c4:44:e6:86:87:47:a4:be:fb:
7a:b5:71:03:b3:87:27:7c:6e:da:03:e9:e4:8d:23:00:df:04:
59:0a:11:d5:8f:4d:34:3e:da:09:c3:2f:8b:9e:b5:56:b0:94:
66:1f:92:13:0b:80:ce:21:8d:73:17:5b:cb:27:e0:3c:9e:6e:
15:20:02:b3:e4:5a:3c:35:04:41:46:38:ea:9f:a0:b9:32:5b:
58:f0:2c:81:1d:27:78:0a:3f:7e:a1:51:69:d7:79:2d:04:ee:
75:9b:9a:02:93:4d:ed:ab:f6:9e:11:07:b0:f7:71:3e:c4:cd:
68:2c:b0:6b:ea:b4:7c:f1:97:41:49:8b:4d:89:5c:81:e8:6d:
68:05:14:74:46:c6:3e:f4:d1:94:54:a9:d2:2a:da:94:7f:ee:
0e:f0:73:c6:82:26:be:7d:39:01:4a:53:17:a1:64:01:91:92:
56:f8:55:bc:68:5e:86:98:22:fc:27:2a:04:e6:90:71:c6:92:
43:d1:f3:c1:b4:68:08:10:e2:d1:3b:5a:45:28:ae:df:42:52:
56:19:a9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:58:46 2025 by rpki-client