Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
File: LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json)
Hash identifier: VhUZzBEb4svj5jo8CUhP3j/IisAUdqleEhg8d+FESg4=
Subject key identifier: F3:9F:BE:1D:44:4A:77:EC:AD:F8:DF:9E:17:39:9F:0F:33:CC:A2:66
Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
Certificate issuer: /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Certificate serial: 01965DCD9AAE6CD38F848F1D7A9EA4E8AB1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 14:01:17 +0000
Manifest this update: Tue 22 Apr 2025 14:01:17 +0000
Manifest next update: Wed 23 Apr 2025 14:01:17 +0000
Files and hashes: 1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: cqnyZoHIs3hk+mN/RU2jyczYZi5dvJUkv3LfJOWtg4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cd:9a:ae:6c:d3:8f:84:8f:1d:7a:9e:a4:e8:ab:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98
Validity
Not Before: Apr 22 14:01:17 2025 GMT
Not After : Apr 23 14:01:17 2025 GMT
Subject: CN=f39fbe1d444a77ecadf8df9e17399f0f33cca266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f5:3f:21:c1:6d:1f:c5:02:8d:3c:5c:96:f4:
e7:fa:04:54:8e:2d:e3:8f:b9:0d:57:f2:2b:58:ea:
f4:21:4a:fe:b2:e1:42:fc:05:fc:7a:34:2d:f2:a8:
28:97:f8:3a:bc:ce:17:43:18:ec:e2:77:b2:cf:13:
34:fc:c1:37:3f:fa:62:26:20:a4:59:7f:76:c0:6e:
eb:d5:5b:34:13:f1:af:38:d5:f5:57:20:ee:b2:2a:
cb:bd:72:34:f9:8f:3b:e5:ce:a1:d4:c0:d3:32:4e:
36:46:14:46:a2:15:7c:f7:b5:aa:80:56:d9:a7:b5:
de:a8:c4:d3:0c:8e:f4:5f:bd:f0:35:af:54:26:d3:
12:c8:b1:89:6d:d5:fe:4b:58:23:85:ee:00:8d:fa:
0e:65:93:06:8c:4e:8d:98:67:f0:de:85:7c:71:b1:
52:9e:9b:53:94:2f:0a:6a:91:ef:42:b6:73:b9:6b:
5b:7a:86:aa:a0:53:05:7d:19:c9:32:76:ee:11:e0:
e0:44:cc:9d:49:c9:12:fc:8c:02:1a:d2:83:10:83:
4c:2c:18:60:e1:7c:f9:6c:57:a7:f8:de:c2:19:fe:
1d:cb:e2:71:66:71:d1:72:64:c9:e5:05:b4:95:6d:
81:5e:60:d0:91:1f:c8:90:c9:97:b7:e0:1d:76:4e:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9F:BE:1D:44:4A:77:EC:AD:F8:DF:9E:17:39:9F:0F:33:CC:A2:66
X509v3 Authority Key Identifier:
keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6f:d9:df:d7:ca:f7:83:11:12:eb:af:44:ae:ab:68:6e:ad:
12:6c:95:b4:bb:d7:be:df:97:1c:1a:2c:60:b4:74:9d:c2:b0:
87:47:24:06:0a:74:2e:37:3d:18:32:0f:db:c8:e9:05:e4:b1:
71:2c:23:ab:9a:4f:34:2b:16:ba:c3:36:97:17:76:4c:b3:e0:
d4:d6:36:5d:86:ca:d6:8b:6c:4f:db:5e:0a:8b:c0:bc:6a:1e:
ba:56:65:90:ed:3e:64:c8:50:4d:f1:bf:0e:1f:3c:4e:a5:71:
72:00:83:91:b6:ce:b1:a4:a5:b9:9d:e4:85:80:23:3a:81:84:
cb:63:13:9f:ff:52:4b:3e:53:f0:fa:75:ee:c3:54:cb:e3:a1:
88:6f:5b:9a:58:b2:68:5f:40:c7:14:7c:8b:53:40:0a:b4:0b:
32:da:ad:72:4e:c3:5f:56:07:aa:ac:52:41:fd:fd:7d:d6:9f:
f8:d6:3b:cd:9c:f1:39:46:94:07:51:4f:7c:83:33:a2:9f:0d:
4b:20:2e:86:2c:ef:37:2f:20:01:bd:ef:2f:b8:8a:dd:03:89:
b6:ae:6b:43:20:ae:23:98:eb:34:29:14:91:c5:60:f5:37:c1:
11:ee:9b:01:2c:ab:90:e9:ea:46:c6:16:94:98:b0:06:db:36:
c3:c2:c6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:24:03 2025 by rpki-client