Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
File: lpblIk_vUX9NzGbBQQNSzIq_si4.mft (raw, json)
Hash identifier: jBk5akXokM0lQ+4yrxUVLbQubo5gta8jd6+rJhWW2d0=
Subject key identifier: E1:1D:A9:FD:2A:F3:95:58:71:85:A1:87:C3:59:85:C6:75:ED:A8:2C
Authority key identifier: 96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
Certificate issuer: /CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Certificate serial: 019655384A5FF7DEC29E80D25F079523AECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
Manifest number: 148A
Signing time: Sun 20 Apr 2025 22:01:14 +0000
Manifest this update: Sun 20 Apr 2025 22:01:14 +0000
Manifest next update: Mon 21 Apr 2025 22:01:14 +0000
Files and hashes: 1: lpblIk_vUX9NzGbBQQNSzIq_si4.crl (hash: HSd/lpIZL59ox7RlJ50/2OiE8Ml4WbtwwjfN6gmU9os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:4a:5f:f7:de:c2:9e:80:d2:5f:07:95:23:ae:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Validity
Not Before: Apr 20 22:01:14 2025 GMT
Not After : Apr 21 22:01:14 2025 GMT
Subject: CN=e11da9fd2af395587185a187c35985c675eda82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:26:80:79:1a:29:8a:86:5c:28:0b:2c:d5:
3f:1e:0d:0b:6d:a0:52:84:b6:67:47:ff:ca:9c:20:
1c:67:ea:cc:ec:d8:ba:3f:e7:e1:59:8b:f0:4c:4a:
65:b2:04:72:12:68:07:3d:57:7c:c6:e6:c6:54:3e:
4c:dd:94:28:34:2a:36:5a:8c:73:2a:1f:4f:6a:09:
cd:f1:44:0f:8d:5f:d9:ec:9b:9f:f2:55:bd:a1:c3:
c8:b3:33:8e:49:64:69:c9:b4:46:62:34:2c:6c:a2:
b5:ba:88:09:47:97:65:a4:cb:cd:41:82:78:d0:2e:
61:8e:4e:fd:d4:c3:bd:f2:a2:97:69:c8:10:5a:7b:
9e:09:92:ee:7f:5d:21:55:0f:d6:f2:c6:51:46:b8:
eb:94:8c:0d:5c:8f:45:f6:22:81:0f:fb:0c:b3:b8:
a5:0b:3f:bb:3b:93:dc:c6:d9:63:dd:ae:cf:49:a3:
06:c5:9b:57:2c:f0:f9:3f:6b:5e:38:98:8e:c9:43:
f4:c3:b0:e4:27:10:b9:c4:c6:ac:b1:48:2e:12:4a:
77:f4:ad:64:db:c0:6d:6f:ab:6e:3e:5f:6d:0e:25:
d9:2b:74:ff:5a:ad:36:d7:c1:34:16:fb:d7:49:1c:
8b:7f:00:1e:4c:1f:5a:df:7e:e2:eb:3a:40:77:58:
12:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1D:A9:FD:2A:F3:95:58:71:85:A1:87:C3:59:85:C6:75:ED:A8:2C
X509v3 Authority Key Identifier:
keyid:96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:87:e7:0e:00:3e:21:ed:ca:a6:b9:94:11:fa:7a:f0:49:8f:
e2:6d:c8:98:d0:fa:3d:fe:74:85:5c:2c:0b:89:d6:14:d5:46:
4a:fc:96:51:d2:fe:c1:94:e1:7e:f4:eb:20:08:8b:f1:91:12:
c3:9e:1d:02:1c:9b:3c:d2:9d:89:93:9b:2e:64:23:ae:24:4d:
1e:41:19:68:11:ab:53:ca:79:06:19:69:dc:90:a9:bb:64:9e:
70:d1:a3:74:ce:23:20:94:00:b6:ac:02:63:44:50:8f:2a:5e:
e7:ab:b9:f7:ef:1c:3e:f7:e2:3f:e3:02:99:77:e9:c8:97:b4:
75:0d:50:db:94:40:a0:36:e2:99:61:13:14:98:d2:dd:62:7c:
f8:c8:73:ae:bc:ca:bd:b0:ce:19:be:7e:36:5a:94:69:ce:4e:
41:13:2a:73:5e:f1:05:c0:4f:04:0a:c3:8b:12:52:52:6b:9a:
69:5b:16:09:b9:eb:a0:6f:6e:fb:c7:a2:3e:9f:d8:b2:2d:dc:
a9:79:ff:cb:de:14:99:c9:cb:17:65:fb:1f:91:e0:44:f0:a3:
05:fd:00:33:6e:1a:67:fc:66:87:14:c7:ea:61:31:ce:56:ec:
10:2e:82:54:29:de:85:7b:7b:80:40:38:30:92:33:14:d9:f6:
2a:eb:11:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:28:08 2025 by rpki-client