Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft
File: LphQiZ2cq14AM9C-lyKn6zBdfGA.mft (raw, json)
Hash identifier: 2rNqKMmtPCpIzGXxJhPCfL4+i2CmfFmVHsa6QThs9J4=
Subject key identifier: 14:9D:A1:D6:DA:31:A3:8A:D1:77:A9:99:77:3E:99:E2:DA:6A:B2:18
Authority key identifier: 2E:98:50:89:9D:9C:AB:5E:00:33:D0:BE:97:22:A7:EB:30:5D:7C:60
Certificate issuer: /CN=2e9850899d9cab5e0033d0be9722a7eb305d7c60
Certificate serial: 019653492AFD05D56B9EFB1ED61DFF2BFB7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LphQiZ2cq14AM9C-lyKn6zBdfGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 13:00:26 +0000
Manifest this update: Sun 20 Apr 2025 13:00:26 +0000
Manifest next update: Mon 21 Apr 2025 13:00:26 +0000
Files and hashes: 1: LphQiZ2cq14AM9C-lyKn6zBdfGA.crl (hash: JAEChBrHLwhfqPuGQIW3brE9oOh6T6rNOuJeU9gXKPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LphQiZ2cq14AM9C-lyKn6zBdfGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:2a:fd:05:d5:6b:9e:fb:1e:d6:1d:ff:2b:fb:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e9850899d9cab5e0033d0be9722a7eb305d7c60
Validity
Not Before: Apr 20 13:00:26 2025 GMT
Not After : Apr 21 13:00:26 2025 GMT
Subject: CN=149da1d6da31a38ad177a999773e99e2da6ab218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:41:3e:ef:83:b9:75:28:97:89:eb:5f:24:29:
3a:1f:f1:9f:63:80:8b:1f:ca:f1:40:1f:fe:09:80:
b3:5e:d6:3a:bd:7d:5a:70:21:e6:e7:5e:84:88:b0:
ed:02:22:d5:1f:90:1a:7c:2c:0f:84:fe:76:77:01:
83:27:9a:30:9f:17:9b:bb:bb:2b:ba:5e:0a:95:3c:
53:16:f7:be:d2:e7:ac:47:64:66:4c:ce:19:c4:44:
a1:51:a8:c6:13:57:a0:b7:54:a1:37:8e:36:19:5b:
eb:5a:b5:6b:a6:43:ea:e6:3f:c4:a7:65:54:12:d6:
77:de:8e:62:7c:ee:c0:72:a1:ba:3c:2d:50:5f:01:
4c:0a:c6:6c:34:75:18:d0:53:bb:54:3b:15:97:9d:
6c:99:75:c6:6a:d9:23:8b:26:e6:c2:18:f4:ed:ac:
75:bf:c5:79:e9:27:f2:bf:62:e8:9b:31:5e:1c:dd:
4e:45:c4:e9:e8:cc:f8:d6:a5:34:2b:b0:b8:7c:f3:
76:3b:71:fd:2e:e1:aa:08:58:79:f1:1a:f1:be:94:
e9:51:62:ac:01:ce:94:1f:06:7a:da:3d:a1:f0:77:
45:17:47:b5:c6:3f:2e:17:27:a4:53:26:50:bf:0f:
59:a2:61:b6:9b:98:b3:56:40:0c:2b:ba:a2:68:ee:
d8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9D:A1:D6:DA:31:A3:8A:D1:77:A9:99:77:3E:99:E2:DA:6A:B2:18
X509v3 Authority Key Identifier:
keyid:2E:98:50:89:9D:9C:AB:5E:00:33:D0:BE:97:22:A7:EB:30:5D:7C:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LphQiZ2cq14AM9C-lyKn6zBdfGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7f:08:b9:d8:4e:11:d5:13:39:3b:09:83:12:ba:be:3f:46:
ac:20:18:89:b9:34:2d:19:69:f4:f2:eb:b9:58:d8:a8:f1:08:
53:1b:bb:eb:90:b6:57:43:c2:f7:bf:e6:99:c7:c7:e5:93:0b:
70:1f:7d:7b:38:b8:ea:74:32:6f:fa:92:33:5e:71:af:88:44:
6e:d5:6c:bf:ab:b7:cb:80:3d:3e:7e:49:88:5a:94:f3:0e:7f:
d2:d2:9a:32:b7:37:fc:ac:ee:52:aa:6f:83:04:18:9f:c3:83:
0d:0b:1a:b6:d2:1a:b0:3d:8e:0b:7d:71:79:ec:07:46:0c:81:
62:65:4c:ad:cb:de:1f:38:24:b1:5c:b1:0c:6d:ee:39:cb:0e:
b9:60:78:8e:2d:6f:67:24:18:63:3c:a3:b4:8d:3e:c9:53:24:
58:f8:91:6e:51:af:bd:53:e2:96:a6:e3:cc:32:28:54:28:9f:
82:7f:4e:52:68:63:3c:f8:c4:a2:cd:00:a4:ae:70:29:03:ce:
e8:65:3c:eb:cf:dd:fe:3e:ec:34:48:96:78:2e:86:ef:34:7a:
d0:a1:1a:de:08:9b:40:0a:c8:38:c2:db:9a:a7:c3:da:2b:82:
da:0f:25:09:f5:b9:14:39:59:04:6b:d0:ed:0b:c3:b2:56:79:
3e:d9:69:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:12:10 2025 by rpki-client