Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
File: LX893KDLOOx7CMaQKeIPUtxAjxc.mft (raw, json)
Hash identifier: W/B+mTYFdP3MhvKN7cpXeu2QAoEdgOBweeuKkkoiNnI=
Subject key identifier: C1:66:B2:1A:97:B5:1B:82:49:D3:6F:8D:1D:53:D4:EE:EB:CC:91:2D
Authority key identifier: 2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
Certificate issuer: /CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Certificate serial: 019675677042F93E4F8488EA0FC7BF81AC56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 04:00:35 +0000
Manifest this update: Sun 27 Apr 2025 04:00:35 +0000
Manifest next update: Mon 28 Apr 2025 04:00:35 +0000
Files and hashes: 1: LX893KDLOOx7CMaQKeIPUtxAjxc.crl (hash: pTWqgDR7J5SG5GO0uZf1570WxyTnTcxFM0uQ5xNOt7U=)
2: NJtD_wJPtwe6yI8QzJv-rd_AAv4.roa (hash: goN8mo/tdm+T4x5aP0V4Y6dre6dhF2ryG392gou/4Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:70:42:f9:3e:4f:84:88:ea:0f:c7:bf:81:ac:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7f3ddca0cb38ec7b08c69029e20f52dc408f17
Validity
Not Before: Apr 27 04:00:35 2025 GMT
Not After : Apr 28 04:00:35 2025 GMT
Subject: CN=c166b21a97b51b8249d36f8d1d53d4eeebcc912d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:44:56:74:fd:25:07:59:ce:c7:75:62:c6:c5:
93:42:6e:2d:8b:3d:2b:58:4a:96:4f:60:6e:00:a1:
9b:3d:1b:63:ae:78:c0:a5:4e:d9:db:12:62:cb:32:
b1:78:cf:05:64:bf:31:fc:5f:8d:c5:28:f4:42:1a:
78:13:73:4c:3e:9f:f4:50:24:6d:e6:d6:33:38:72:
89:64:2e:26:b8:6e:67:1d:2d:0f:bd:7c:85:d0:0a:
2e:30:d9:cf:10:28:99:92:0b:e0:cb:45:54:b3:18:
df:b8:82:ea:a2:d0:2c:d5:4e:c6:b2:76:c8:51:eb:
49:0a:1b:fc:ee:34:ab:39:a9:7c:d2:0d:90:36:82:
8d:4e:f3:b1:e4:7c:cc:97:db:34:42:6f:1a:41:fe:
ec:73:38:63:6b:9e:36:48:ee:aa:43:19:50:9f:69:
ec:62:ba:52:55:d9:1d:09:0d:fe:74:56:00:81:11:
48:de:39:85:02:ab:9d:90:12:fb:3e:b9:11:f9:c4:
ef:e9:55:a4:27:06:a5:1b:4d:b9:34:b9:04:b2:e9:
3d:6c:43:f3:cd:1c:a7:69:87:b3:fc:13:68:da:d2:
92:79:e6:be:b9:8f:d0:70:9d:fb:4a:b3:2b:5f:cf:
f1:a4:e0:05:2d:0f:9a:57:07:67:c2:0a:b1:16:cf:
15:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:66:B2:1A:97:B5:1B:82:49:D3:6F:8D:1D:53:D4:EE:EB:CC:91:2D
X509v3 Authority Key Identifier:
keyid:2D:7F:3D:DC:A0:CB:38:EC:7B:08:C6:90:29:E2:0F:52:DC:40:8F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LX893KDLOOx7CMaQKeIPUtxAjxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c75af4-9d26-4290-b027-a56c52be198c/1/LX893KDLOOx7CMaQKeIPUtxAjxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:00:6e:6b:8a:3e:ab:2d:24:33:fe:09:24:8d:e5:98:89:87:
59:e9:62:d8:ae:98:d9:3b:90:f9:c1:da:64:e0:09:57:26:2f:
5c:05:df:52:4a:4e:78:06:80:d6:0e:6c:e8:25:94:9e:89:60:
16:07:89:b3:b8:0a:ac:de:5f:82:27:bb:c2:22:75:24:70:e8:
a9:eb:bb:a3:bf:d3:a3:fa:f8:8e:f9:2f:e7:7e:33:9b:3d:9f:
19:a8:72:02:d6:06:18:0d:dd:70:b8:b7:ad:4a:f0:63:3c:72:
84:30:3a:b3:87:ac:41:1e:92:ec:fa:c8:4a:f7:ab:e5:9a:a7:
00:e8:d3:59:f1:67:97:25:6c:6c:f0:a0:b4:4f:27:fe:4b:69:
7b:71:cf:e8:01:7e:c0:7b:ab:c8:96:18:4c:6a:c0:a1:fa:46:
be:b9:70:25:f3:19:22:54:a2:ae:eb:8d:2a:23:6b:98:9a:19:
a0:b1:96:92:f8:83:e9:18:95:ab:68:a7:cd:84:c7:dc:fb:36:
79:d2:4e:cc:07:b6:f7:b6:51:0c:50:c0:05:10:00:1e:0d:97:
f4:e6:53:fe:32:bc:52:ad:7f:03:be:9a:4e:16:65:44:64:c9:
70:87:34:63:42:97:5b:54:5e:78:bd:c5:0d:11:23:f8:1f:0c:
b0:05:9c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:55 2025 by rpki-client