Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
File: LDe0vsl9YIq-I7xXujmCRszFd2A.mft (raw, json)
Hash identifier: eXRAH7dgNJAdLzmn6e6v9X/xZ8o9npNK9E1/foED5LI=
Subject key identifier: AD:48:9B:AB:DD:DE:D4:FE:74:E8:E6:85:E4:94:35:58:50:43:EF:BB
Authority key identifier: 2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
Certificate issuer: /CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Certificate serial: 01965A94D8F0AC4372EB6B2C86D10ED607CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 23:00:26 +0000
Manifest this update: Mon 21 Apr 2025 23:00:26 +0000
Manifest next update: Tue 22 Apr 2025 23:00:26 +0000
Files and hashes: 1: 7BY_kFwL8OEGCGg4fffLBCGfbIk.roa (hash: wPQVbJEzFYU2FTuvcz3iiUbD5hpnYkEGB5yumpXFpQo=)
2: LDe0vsl9YIq-I7xXujmCRszFd2A.crl (hash: +ri9BulqBxDupQrNyWaJVehFlPRlPzFdQUsCPWY0Ldo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:94:d8:f0:ac:43:72:eb:6b:2c:86:d1:0e:d6:07:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Validity
Not Before: Apr 21 23:00:26 2025 GMT
Not After : Apr 22 23:00:26 2025 GMT
Subject: CN=ad489babddded4fe74e8e685e49435585043efbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:8c:be:43:36:47:de:03:8b:ae:b9:d3:8b:
4f:d1:4e:1b:3e:fb:31:f2:e4:4d:cd:42:8a:b0:1f:
5b:1d:84:e3:7d:6d:97:fe:66:bb:db:67:34:e8:f5:
19:0b:41:f6:20:a3:17:de:f9:8a:7f:53:95:ad:53:
cd:4b:d7:f3:86:29:0a:8d:19:39:96:5c:1a:97:74:
dc:5c:eb:05:57:16:17:d2:10:22:91:a3:7d:c4:75:
84:95:05:1d:f6:20:46:af:f5:0d:3f:da:4b:73:85:
b1:60:4c:83:4d:4e:d6:a8:ee:20:a4:6d:a3:67:8c:
72:a0:a8:2b:63:a5:f7:1e:48:7d:2e:af:e4:b5:24:
1b:f4:e8:db:75:d3:ef:b1:93:01:14:f8:81:32:a9:
26:50:98:df:4a:d6:07:26:46:c5:54:8f:47:3d:5d:
c7:0f:ba:85:d1:77:97:59:61:4d:8c:4d:32:ca:b3:
00:2e:76:c7:fa:97:ac:77:3f:cd:01:a3:b9:92:1d:
7b:00:18:15:76:2f:f8:b2:f2:17:9d:38:c8:03:cf:
92:9a:b0:50:e8:9c:46:b1:00:d8:14:97:66:6f:cb:
2f:bb:06:5e:e4:f8:d1:10:25:27:ac:fd:49:8f:bb:
1e:66:cf:93:5e:49:77:50:fe:8d:a0:9f:42:46:ba:
eb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:48:9B:AB:DD:DE:D4:FE:74:E8:E6:85:E4:94:35:58:50:43:EF:BB
X509v3 Authority Key Identifier:
keyid:2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a7:2e:67:0b:15:a5:7b:24:81:bb:e8:0c:a9:4c:78:ab:39:
b8:b2:65:f9:8a:7e:3d:d7:3f:cd:2b:54:15:de:eb:9c:23:35:
bb:12:79:85:d9:5f:fe:83:2d:93:ea:e9:f7:ba:ef:04:b4:05:
f3:54:8a:83:09:b9:75:bc:f1:dc:27:d2:f7:59:c2:fd:09:9d:
3b:75:4f:9e:55:96:1f:a1:c4:7b:fd:ff:3b:a7:33:92:83:9b:
47:e9:46:4a:48:97:73:d0:a7:75:61:a4:c7:0f:54:94:47:03:
f3:43:b8:6b:64:94:14:61:49:6a:32:ad:4d:6e:bb:00:62:42:
7e:af:e2:de:d4:f4:4a:e9:6e:47:ef:03:c1:e8:b2:b6:68:9d:
bb:e4:bf:44:62:27:e6:70:bd:76:c2:1c:b6:90:5e:78:f8:5d:
d8:ae:6c:cb:25:f5:f8:2e:6a:14:be:f7:09:e9:b4:53:bc:f4:
f3:da:6a:6b:f2:71:bd:a5:ab:c3:df:4d:d3:19:e3:06:64:33:
84:18:5d:a2:f1:65:39:29:29:f8:38:25:92:f0:55:60:20:7d:
ac:b3:4c:7d:cb:8d:97:7c:95:21:9b:47:4b:70:d5:35:80:aa:
03:45:60:c4:4a:5f:88:ad:e9:7e:bd:67:d1:95:50:21:60:c1:
28:dd:fa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:39:44 2025 by rpki-client