Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
File: LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft (raw, json)
Hash identifier: lnBAZFWg0ZNymn8KnDXYklSIhpejngfBE6txtxIGTVA=
Subject key identifier: 3A:0A:A6:69:05:91:23:83:9B:6E:B1:BC:3E:5A:59:21:2B:B6:91:BD
Authority key identifier: 2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
Certificate issuer: /CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Certificate serial: 01965613AFCA432D2207CCB13A5C109289D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
Manifest number: 0171
Signing time: Mon 21 Apr 2025 02:00:52 +0000
Manifest this update: Mon 21 Apr 2025 02:00:52 +0000
Manifest next update: Tue 22 Apr 2025 02:00:52 +0000
Files and hashes: 1: LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl (hash: SyQW9DU5Iwx4wNdIPoWqL/U9MR0lwhQEzvsXyLrTydc=)
2: gs1oqbY6yQy7zAFFldXKYUCI-wY.roa (hash: ZNZX8jrrMnmqL1is9AmdkQLXAoTMMp75O03M5D0JqjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:af:ca:43:2d:22:07:cc:b1:3a:5c:10:92:89:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df58aa526c81e32c1b959bfcadf08c19adc412c
Validity
Not Before: Apr 21 02:00:52 2025 GMT
Not After : Apr 22 02:00:52 2025 GMT
Subject: CN=3a0aa669059123839b6eb1bc3e5a59212bb691bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e3:8e:f7:97:cb:a1:df:8a:84:46:90:2c:9c:
c6:e2:fc:6c:6e:e9:65:a4:e2:ea:18:03:cc:6d:5f:
25:37:be:2e:46:41:cd:4c:91:e4:48:68:43:c6:f2:
7d:3e:23:83:54:26:9d:75:8c:41:f2:82:49:6f:4f:
b7:7b:99:f2:3e:d4:b3:ec:7f:54:cc:11:b9:ac:a0:
07:2a:fd:56:88:c6:f4:99:ac:2e:b0:e5:93:63:24:
e4:4b:ac:35:3e:74:51:e6:5e:f4:89:c6:b5:f2:21:
27:32:21:61:28:3b:d8:db:3a:ef:69:aa:88:0c:b5:
75:25:63:d6:e9:84:60:1b:f0:1a:35:1a:0a:c2:11:
55:84:90:62:82:00:2c:04:22:77:9e:b2:63:1b:54:
09:3c:65:84:e9:2d:fd:68:1b:37:58:e7:af:aa:26:
5a:63:0f:9d:07:77:83:d3:f5:04:12:e5:81:1b:09:
2a:19:99:28:1e:0e:31:22:04:d8:9d:3c:c3:80:91:
46:98:87:ff:2a:f7:36:5b:b2:94:b9:29:45:56:30:
e7:e9:2d:b1:3f:26:2a:f3:72:57:70:66:94:6c:c9:
0e:51:bc:93:9c:9a:0d:31:da:42:20:58:65:4d:5f:
c4:dc:87:ca:b4:bb:0f:20:e0:34:83:93:89:a7:b0:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0A:A6:69:05:91:23:83:9B:6E:B1:BC:3E:5A:59:21:2B:B6:91:BD
X509v3 Authority Key Identifier:
keyid:2D:F5:8A:A5:26:C8:1E:32:C1:B9:59:BF:CA:DF:08:C1:9A:DC:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfWKpSbIHjLBuVm_yt8IwZrcQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2c8cc8-0fe2-491e-ad89-7e8b97528b1c/1/LfWKpSbIHjLBuVm_yt8IwZrcQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7a:ce:a3:4d:45:40:7d:7a:28:93:98:f3:bd:09:61:54:aa:
30:ab:38:fc:05:3f:78:38:d6:ba:ce:d1:18:af:fc:b1:6b:6c:
f8:e8:78:97:76:96:2c:5c:88:d9:45:40:e0:c1:0e:14:ea:47:
b6:9e:56:ca:50:e2:db:41:65:36:17:6f:a6:fe:e0:5e:c4:49:
cc:af:ea:3a:5e:1f:b8:e9:8b:62:60:d3:b9:8b:de:45:92:c0:
6b:62:1b:58:2c:bc:20:ea:55:c8:f4:17:65:df:c5:79:36:69:
c3:8a:f9:e4:cf:7d:4d:ec:5d:a2:63:d8:e8:8a:d3:79:c7:45:
c3:c7:34:d9:30:75:f6:4a:38:3b:22:9a:08:8d:82:0b:c0:14:
01:40:a8:31:56:c7:b8:34:c0:c3:c7:de:2a:8c:d5:1d:98:23:
60:70:e9:01:cc:be:a7:63:df:30:bf:0a:90:9d:23:4f:4c:fe:
e1:2f:7d:09:1f:59:b4:21:b2:af:dd:63:0d:9f:72:5b:4a:7b:
c1:08:6a:3c:60:3f:64:6c:76:14:31:67:bc:c9:22:25:f1:b6:
a8:63:d3:18:f3:e0:95:da:85:60:c9:52:fe:3c:33:4b:a1:24:
5e:5e:c0:95:a6:d5:db:db:b6:ce:71:f5:46:b0:d8:13:2f:5f:
b3:67:f1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:40 2025 by rpki-client