Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
File: lkyqlAOgjTc7kLcQpW0-roE5T_A.mft (raw, json)
Hash identifier: UeDJwg3qsZ0li0fTxKpXhDdAV4leOM+jcMbyLc3LgDI=
Subject key identifier: E9:D1:FE:22:9B:23:74:51:76:44:25:0C:4C:A8:09:92:14:4B:32:D7
Authority key identifier: 96:4C:AA:94:03:A0:8D:37:3B:90:B7:10:A5:6D:3E:AE:81:39:4F:F0
Certificate issuer: /CN=964caa9403a08d373b90b710a56d3eae81394ff0
Certificate serial: 01965D5F304ED47DBC3402A5E6A4D8FC24A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
Manifest number: 148F
Signing time: Tue 22 Apr 2025 12:00:41 +0000
Manifest this update: Tue 22 Apr 2025 12:00:41 +0000
Manifest next update: Wed 23 Apr 2025 12:00:41 +0000
Files and hashes: 1: lkyqlAOgjTc7kLcQpW0-roE5T_A.crl (hash: CBCA833I3eW4wzLlEap5aptuWll4Dkkf4Bfb0aLZd1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:30:4e:d4:7d:bc:34:02:a5:e6:a4:d8:fc:24:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964caa9403a08d373b90b710a56d3eae81394ff0
Validity
Not Before: Apr 22 12:00:41 2025 GMT
Not After : Apr 23 12:00:41 2025 GMT
Subject: CN=e9d1fe229b2374517644250c4ca80992144b32d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:49:f6:15:d9:41:03:af:54:f3:52:65:74:
c7:76:56:d3:6c:6c:e0:68:e7:4e:09:7b:62:ff:86:
53:bc:5d:32:30:6f:b1:8e:97:38:fb:d0:dc:e1:dd:
57:b5:7d:80:64:46:65:f5:3e:f3:1a:40:6b:7b:b2:
35:47:13:c8:cf:7e:97:91:c5:92:30:e8:ae:b5:bf:
50:a1:a8:ca:27:44:e9:17:0b:7a:03:6e:16:ab:ab:
6a:31:a5:7b:c2:1c:aa:17:ac:74:1a:e5:9f:2c:af:
ca:da:51:1d:fd:84:7b:92:89:7b:10:c7:b2:eb:06:
2d:7f:d4:f6:d6:26:33:8d:3f:57:45:2b:72:b7:e0:
b7:11:02:5d:48:5c:a2:2f:a6:dd:d5:21:75:ce:78:
c2:56:39:e2:1b:d4:a7:3d:5b:03:9d:56:77:95:70:
15:97:71:a7:82:66:0f:57:7f:c1:36:39:5c:bd:ad:
fd:90:c2:62:21:43:10:44:42:b4:f0:07:8c:25:75:
2f:3b:7e:f6:98:89:e3:89:d6:a9:47:ca:a1:c1:eb:
94:bd:d5:e9:7a:14:a6:6a:6d:31:17:f7:72:1a:e0:
12:ae:22:40:f1:f0:98:f0:25:88:6a:34:43:0f:05:
69:ee:bd:13:c2:a9:18:1b:99:2c:b3:57:03:93:93:
90:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D1:FE:22:9B:23:74:51:76:44:25:0C:4C:A8:09:92:14:4B:32:D7
X509v3 Authority Key Identifier:
keyid:96:4C:AA:94:03:A0:8D:37:3B:90:B7:10:A5:6D:3E:AE:81:39:4F:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:57:cb:06:6c:82:4f:6c:20:d5:0b:70:74:8c:96:3e:88:36:
93:ac:5d:ba:77:be:cc:55:1e:7d:30:d1:48:1e:e2:07:fe:59:
ac:fa:5a:68:7d:3e:75:27:76:5a:9a:0d:77:81:e9:28:8b:f5:
42:ac:f4:c2:5d:aa:fd:d3:ae:0f:48:0a:24:12:55:d5:ad:9b:
9f:99:1b:d1:75:db:fe:64:0e:75:d4:08:ae:48:73:f3:1c:02:
90:52:06:fe:80:9b:b7:23:17:14:d2:6e:6e:c8:30:07:27:ae:
4b:6f:26:87:21:53:44:7e:a9:44:2e:90:5c:a9:9e:6b:eb:7e:
8f:78:39:ec:72:2d:eb:b1:98:bc:72:e3:78:45:6a:30:03:d8:
02:40:bc:5a:e8:71:2d:be:cc:fb:45:5f:8b:bf:52:66:b3:dd:
b7:cf:ee:10:8a:de:11:bf:0e:d6:54:ab:5b:c9:55:87:a4:36:
06:e9:6c:a2:bc:e7:0b:69:5c:fa:aa:06:e8:1b:34:b5:20:a9:
86:33:12:e0:51:df:f6:f3:85:e8:58:e5:25:b0:ed:81:a5:ce:
7a:1c:d6:37:5d:ec:36:e3:ff:52:36:23:08:34:58:95:14:b0:
ae:d9:47:55:a4:22:c1:45:f6:10:76:e7:96:47:73:17:64:aa:
b1:20:91:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:24:08 2025 by rpki-client