Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.mft
File: LNX6Kvwzj4QeAM92apA5IkUdN7g.mft (raw, json)
Hash identifier: Ms/JaibusHdelzzC/rfouGZuvBBe9FyD9yUd1OAc/BY=
Subject key identifier: 25:4C:31:48:F5:EF:D8:BD:C7:DE:11:61:53:B2:4C:DD:6F:C6:94:4F
Authority key identifier: 2C:D5:FA:2A:FC:33:8F:84:1E:00:CF:76:6A:90:39:22:45:1D:37:B8
Certificate issuer: /CN=2cd5fa2afc338f841e00cf766a903922451d37b8
Certificate serial: 01965802136D6199B976E129F4974DAE289C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNX6Kvwzj4QeAM92apA5IkUdN7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.mft
Manifest number: 0556
Signing time: Mon 21 Apr 2025 11:00:53 +0000
Manifest this update: Mon 21 Apr 2025 11:00:53 +0000
Manifest next update: Tue 22 Apr 2025 11:00:53 +0000
Files and hashes: 1: LNX6Kvwzj4QeAM92apA5IkUdN7g.crl (hash: Wizrv0QkbJ/mg/yq7VbHU+tN275y7TltjhX1FBGL7fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNX6Kvwzj4QeAM92apA5IkUdN7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:02:13:6d:61:99:b9:76:e1:29:f4:97:4d:ae:28:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd5fa2afc338f841e00cf766a903922451d37b8
Validity
Not Before: Apr 21 11:00:53 2025 GMT
Not After : Apr 22 11:00:53 2025 GMT
Subject: CN=254c3148f5efd8bdc7de116153b24cdd6fc6944f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c1:a4:d4:06:9c:72:2d:1b:52:7f:da:30:ee:
4a:4a:49:b1:4e:5b:28:f0:8b:48:be:20:8d:5d:74:
59:b7:de:e9:ce:92:9d:fd:14:93:15:bf:8c:4a:04:
fd:05:a5:f3:b7:6f:48:25:cb:da:a8:51:c4:9b:a6:
83:bc:5f:bd:ae:47:c6:5a:07:db:93:c9:8d:69:8b:
a3:63:d7:f2:52:4f:71:a1:d2:81:c7:7e:86:0e:0f:
12:1d:91:55:3f:28:6a:da:4f:aa:99:06:dc:3e:1e:
60:f5:cf:53:49:5c:d5:72:10:c5:c8:70:a1:38:19:
bd:74:8a:f5:f1:f1:16:35:22:f8:b0:a9:f1:e9:ee:
a2:e0:64:ec:c4:0c:1b:f8:c4:0a:4e:8c:99:3b:9c:
2d:fd:28:41:5b:a9:33:ca:ae:51:ac:3a:5a:09:66:
fa:60:db:b6:37:8f:4b:a8:33:ba:47:2c:1a:95:5e:
1c:79:00:98:aa:73:b9:1d:5d:3f:50:25:99:89:8f:
13:1b:2a:0e:78:d6:da:20:6c:94:d5:8b:4d:36:b8:
ab:cc:ce:30:8d:1b:20:a1:d3:1b:23:22:62:c4:91:
e3:6d:1d:9c:6c:1b:a7:b5:b4:d3:fc:fb:a7:c2:74:
06:ef:9a:40:57:0e:51:a1:77:fa:9b:4e:c7:b9:ea:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4C:31:48:F5:EF:D8:BD:C7:DE:11:61:53:B2:4C:DD:6F:C6:94:4F
X509v3 Authority Key Identifier:
keyid:2C:D5:FA:2A:FC:33:8F:84:1E:00:CF:76:6A:90:39:22:45:1D:37:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNX6Kvwzj4QeAM92apA5IkUdN7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa735c-357b-4194-be74-80c866849546/1/LNX6Kvwzj4QeAM92apA5IkUdN7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f4:2b:7d:d1:b7:db:10:4e:02:3a:2b:6f:2b:92:63:ee:b1:
d5:49:49:e1:e4:35:cc:27:c2:f3:2e:af:f4:23:ee:1f:d5:80:
ec:9b:29:c8:a4:b1:4a:b4:72:96:7d:0f:68:6f:c1:f3:a9:da:
8c:ac:44:3f:fc:80:f1:1e:ed:56:c3:a7:46:3c:d7:13:fa:85:
aa:b2:dd:7e:94:9b:a2:08:74:4f:60:0f:df:15:ab:b7:3c:b2:
42:5a:32:83:b1:aa:4a:ae:cf:29:59:d3:98:55:c5:be:c9:9c:
7c:5f:71:34:c6:82:8d:ae:63:a9:66:9e:04:25:98:5c:20:40:
bd:b0:e4:46:23:f9:a4:7c:ab:cc:cc:c8:c7:5d:96:02:93:f8:
ed:57:c6:b9:d5:6a:b1:0c:e3:48:79:e8:dc:51:57:e5:ca:16:
32:92:1c:6f:4a:73:9a:8a:2d:dc:51:a9:41:98:43:72:0f:60:
e9:6e:05:04:ef:27:44:75:ca:09:8e:1c:87:ee:be:ff:c9:68:
7f:8a:f8:fd:37:17:7b:8b:c7:dc:75:9a:67:36:55:d1:54:70:
99:29:94:f3:3a:45:1f:47:63:43:08:33:d8:95:23:46:3f:6a:
c1:fe:3c:3a:a3:ee:01:7f:b1:35:e2:37:1d:2d:a5:27:a3:2d:
94:33:85:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:59 2025 by rpki-client