Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
File: LswQU0wEJcv21GXoQRT_euDwsFI.mft (raw, json)
Hash identifier: idgE/MJS+RDlcO1RR0IY11mykatSETebKolUPSCxDAg=
Subject key identifier: 0F:84:57:F1:0B:48:88:37:5A:BC:B3:3B:48:DF:BA:38:CC:D5:E4:01
Authority key identifier: 2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
Certificate issuer: /CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Certificate serial: 01965538769B61F25A9018FB35F799552868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
Manifest number: 057D
Signing time: Sun 20 Apr 2025 22:01:25 +0000
Manifest this update: Sun 20 Apr 2025 22:01:25 +0000
Manifest next update: Mon 21 Apr 2025 22:01:25 +0000
Files and hashes: 1: LswQU0wEJcv21GXoQRT_euDwsFI.crl (hash: 0r8cmGYWOAujAEm2Ux+P+tajS6s4IHaJtAeOP7gkBl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:76:9b:61:f2:5a:90:18:fb:35:f7:99:55:28:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Validity
Not Before: Apr 20 22:01:25 2025 GMT
Not After : Apr 21 22:01:25 2025 GMT
Subject: CN=0f8457f10b4888375abcb33b48dfba38ccd5e401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:3f:70:bc:ae:51:41:4f:1a:48:ba:b6:17:
e7:65:7e:01:86:7e:65:46:40:64:8b:31:38:31:e6:
4b:8d:df:9b:cc:e7:9e:f7:33:74:f5:d4:aa:c6:90:
97:cb:d1:97:0c:0e:5f:e8:3c:6f:1e:8d:11:1a:af:
c3:f9:6c:04:0d:e4:1a:b8:43:99:d0:6a:a4:b7:ca:
58:8d:89:0e:fe:75:06:77:ea:8d:e1:09:27:bf:00:
d5:83:92:59:1c:15:c0:ec:eb:84:69:7b:8a:a5:63:
a8:1a:09:e5:bd:ce:f8:d7:9b:ab:8a:55:88:46:a1:
da:ec:f6:37:23:6e:a7:e0:4f:f7:b8:44:4d:50:70:
58:58:22:a3:50:3b:ba:1a:41:a8:be:67:a0:76:39:
58:f6:57:75:fd:0f:80:47:e6:ec:8e:c9:8e:6d:d4:
63:3c:e9:54:b8:60:08:90:49:65:5e:b8:c2:b3:60:
27:e2:c9:31:97:33:ea:9b:46:f2:d5:25:e6:55:ac:
76:9b:97:a0:b0:98:13:f2:22:0a:fc:58:da:93:99:
8e:ad:2a:0b:19:ba:36:db:05:d8:9b:9c:9d:64:f8:
6b:f6:af:d9:1a:77:ef:2c:b9:71:f1:52:dd:e5:e2:
4d:c9:62:4f:b3:07:e3:0d:d5:13:d3:b5:2b:b2:4b:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:84:57:F1:0B:48:88:37:5A:BC:B3:3B:48:DF:BA:38:CC:D5:E4:01
X509v3 Authority Key Identifier:
keyid:2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:fc:7f:68:bf:d7:40:3a:f5:05:44:02:88:99:cd:b9:37:97:
8f:a7:68:1a:83:3e:a5:55:75:b6:c4:16:e1:16:45:a8:48:1b:
71:03:dc:62:0d:a7:14:14:bc:8a:03:a4:45:8a:2c:00:a3:5c:
15:5c:0a:5d:a7:00:8c:56:ae:a1:1a:8c:87:1a:3c:63:e8:bf:
41:bc:fd:25:3d:9a:eb:6f:48:71:36:35:bb:76:27:e0:87:4d:
41:df:82:d1:b0:a1:35:a5:e2:99:df:84:14:d5:56:1c:c3:8f:
da:62:d2:ca:15:be:f5:04:58:d9:d2:60:d3:7e:73:99:95:ff:
30:bb:78:2a:b4:7d:a9:79:b2:db:bb:26:5d:50:65:c6:62:a3:
77:c4:4c:9a:7d:b4:93:1b:ae:3a:18:4d:c6:fc:7f:da:d7:20:
cf:88:ba:02:fb:14:9a:6e:4a:41:24:e7:f1:d6:a7:b2:ec:ca:
21:aa:3d:c5:81:04:32:ad:09:91:a8:b9:a4:bb:45:bf:d2:5b:
c6:8f:f8:34:02:7c:34:58:e1:2f:71:53:a1:23:73:60:a1:e7:
7b:49:32:53:41:0a:12:7d:50:bc:55:03:64:54:da:b7:7c:11:
a2:75:69:ed:44:e4:3a:74:9b:f3:93:79:a6:c4:9b:9f:2b:e0:
be:ce:d1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:54:01 2025 by rpki-client