Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
File: LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft (raw, json)
Hash identifier: 6edT+lbRF2icFxlp3NpGVXw/nXDPMmXkzykThHuDg+w=
Subject key identifier: 4F:4C:0D:86:60:3A:03:A7:C6:7C:7A:EE:C3:A4:B2:65:4A:FD:63:56
Authority key identifier: 2D:C5:6E:E0:CC:43:CE:E2:28:C4:0C:E4:FC:47:2D:D4:EB:DB:1D:FC
Certificate issuer: /CN=2dc56ee0cc43cee228c40ce4fc472dd4ebdb1dfc
Certificate serial: 019654C9756C147AA6FABCF8FFEDE6489AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
Manifest number: 01B3
Signing time: Sun 20 Apr 2025 20:00:10 +0000
Manifest this update: Sun 20 Apr 2025 20:00:10 +0000
Manifest next update: Mon 21 Apr 2025 20:00:10 +0000
Files and hashes: 1: LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl (hash: xpb7u2OC+2pKxjYCV89GLRidS0cwci6QGNi2JlTwL2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:75:6c:14:7a:a6:fa:bc:f8:ff:ed:e6:48:9a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc56ee0cc43cee228c40ce4fc472dd4ebdb1dfc
Validity
Not Before: Apr 20 20:00:10 2025 GMT
Not After : Apr 21 20:00:10 2025 GMT
Subject: CN=4f4c0d86603a03a7c67c7aeec3a4b2654afd6356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:28:81:e7:e7:44:e9:6d:d7:08:6b:d2:ab:
6c:b0:5a:6f:04:9d:2c:e6:e6:64:a2:80:d8:27:61:
b2:8f:cc:b5:a5:15:60:e5:2c:bb:c4:ec:db:06:62:
1e:29:31:8e:b7:60:d3:ff:e7:18:3e:24:8c:c5:65:
e2:cd:ae:51:14:27:73:28:a7:7f:a4:56:69:a9:48:
25:ae:30:4d:fe:70:81:37:2f:2c:24:87:93:b5:1c:
da:2b:01:0e:91:18:91:48:68:47:94:2c:38:83:fe:
2d:4f:98:ff:5c:a5:23:c3:57:81:36:95:8f:67:10:
28:c3:dd:9c:8f:f0:38:2c:5b:05:21:c4:83:25:08:
86:8e:9a:92:bc:3f:9f:3b:2f:17:79:94:8c:3a:c1:
76:5f:41:29:3f:0c:bf:63:8a:52:32:f2:e3:93:4b:
ce:9c:f9:0a:a6:75:8d:92:ca:61:7c:ce:3f:41:be:
71:19:f6:19:15:13:32:dc:57:97:d8:1e:4f:40:e9:
48:09:1d:b0:3e:b0:c5:3a:5c:60:3a:ee:68:5f:ff:
83:b6:eb:2b:fd:89:70:66:72:69:87:71:5d:b1:88:
82:fb:9f:fa:d9:fd:30:22:a0:e5:45:e2:f0:9c:79:
f5:55:4e:42:76:85:f4:dc:d6:94:37:3b:85:75:d4:
c1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4C:0D:86:60:3A:03:A7:C6:7C:7A:EE:C3:A4:B2:65:4A:FD:63:56
X509v3 Authority Key Identifier:
keyid:2D:C5:6E:E0:CC:43:CE:E2:28:C4:0C:E4:FC:47:2D:D4:EB:DB:1D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3d:a8:24:8e:09:07:0c:5b:fe:60:ef:68:dd:78:d5:40:96:
24:0b:75:c8:ae:ca:1f:6c:22:08:32:ed:95:45:0f:ed:63:c8:
e9:d8:a0:d1:f0:c3:0d:17:10:fe:58:ec:b1:e9:62:cd:52:cb:
99:63:66:cf:ac:99:89:fa:04:c8:60:d3:a9:74:70:77:2f:9f:
ed:ec:ff:c8:5d:37:f2:c1:18:56:f5:81:a9:fe:f1:f6:40:eb:
50:60:33:94:55:63:b0:92:7a:12:24:f2:eb:65:4c:50:ca:21:
21:19:6c:fd:e1:09:55:ba:89:2b:a1:bc:54:2c:cb:f2:68:d9:
8c:aa:60:21:87:2a:c5:95:a2:ec:9f:e6:16:16:27:22:0b:8d:
ec:81:11:f7:90:21:e6:7a:d0:e3:1d:4d:fc:e7:07:1e:31:28:
ef:68:1b:63:fe:31:18:5c:d7:9c:c4:25:0a:35:fa:98:30:73:
b9:9e:d1:b4:a9:a9:6e:69:22:b2:b2:b3:37:f2:fb:ec:6c:fc:
8e:95:28:87:6e:80:8e:ee:34:7f:5d:f7:ec:27:85:66:83:9d:
b0:87:9d:3d:5c:96:a9:b5:6d:f0:13:b3:4d:00:72:be:92:44:
6a:c5:63:6c:f0:03:12:49:63:45:e7:19:c1:18:dc:1b:52:36:
ec:93:64:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:00:51 2025 by rpki-client