Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
File: LijWjfjYqxVZsR5zmeYu3DMjyj0.mft (raw, json)
Hash identifier: AYuPz0kR+9YfrjFl3SaaYYqd2o1PQa8XL8fLOmGJnWQ=
Subject key identifier: 16:8F:1B:3A:25:E7:EF:C0:D5:14:F1:D5:AD:1B:A0:E3:C6:55:A6:E0
Authority key identifier: 2E:28:D6:8D:F8:D8:AB:15:59:B1:1E:73:99:E6:2E:DC:33:23:CA:3D
Certificate issuer: /CN=2e28d68df8d8ab1559b11e7399e62edc3323ca3d
Certificate serial: 01965E041F0273C2788DAFE27C231D2159BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
Manifest number: 01D4
Signing time: Tue 22 Apr 2025 15:00:50 +0000
Manifest this update: Tue 22 Apr 2025 15:00:50 +0000
Manifest next update: Wed 23 Apr 2025 15:00:50 +0000
Files and hashes: 1: LijWjfjYqxVZsR5zmeYu3DMjyj0.crl (hash: tayUCKy0BOV53GMG0u8MR7LAJQLO1UBR3S/2A9kGZwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:04:1f:02:73:c2:78:8d:af:e2:7c:23:1d:21:59:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e28d68df8d8ab1559b11e7399e62edc3323ca3d
Validity
Not Before: Apr 22 15:00:50 2025 GMT
Not After : Apr 23 15:00:50 2025 GMT
Subject: CN=168f1b3a25e7efc0d514f1d5ad1ba0e3c655a6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:08:a5:f3:1f:f3:a0:89:f8:3d:58:17:5c:
ae:ae:f5:49:78:66:43:60:86:d4:57:c3:34:9b:b8:
ba:76:c3:03:75:d7:d7:67:83:c4:df:b9:14:4b:ea:
38:d6:24:15:85:84:9a:32:80:1c:1a:8c:d8:1b:3e:
b6:18:d1:62:df:c7:ee:db:f1:24:d5:2f:b6:2f:68:
45:1b:67:77:72:4e:32:e4:0b:37:ab:bc:4b:8c:dd:
20:68:f1:b1:af:8c:dd:80:aa:99:b5:8c:e2:67:5a:
fa:7c:d4:d3:3a:ee:68:49:ba:14:eb:f5:47:6f:a2:
b9:12:32:59:73:0d:53:b9:07:bd:89:f5:8f:aa:1f:
34:e8:40:e8:a1:77:6c:c1:d6:e6:fd:86:80:0b:1c:
88:0a:2c:f9:b1:f8:e1:63:99:e8:e3:6f:53:10:a2:
b8:64:98:d1:35:45:66:af:b1:50:7f:7f:79:55:61:
70:a4:83:2f:e5:9a:39:a7:b5:4e:ac:a1:1a:36:83:
60:9d:5c:ff:3a:07:f6:15:ad:af:c3:8b:72:be:3a:
2f:96:6f:de:d3:5c:16:f0:54:8b:e1:d6:4e:47:39:
2f:d7:9b:77:0d:41:66:41:7a:ba:a1:d6:c4:6a:cd:
9f:ba:31:10:46:5a:dd:47:f0:3d:21:12:2d:34:fa:
c9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8F:1B:3A:25:E7:EF:C0:D5:14:F1:D5:AD:1B:A0:E3:C6:55:A6:E0
X509v3 Authority Key Identifier:
keyid:2E:28:D6:8D:F8:D8:AB:15:59:B1:1E:73:99:E6:2E:DC:33:23:CA:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:67:f9:d1:c5:64:47:5f:b8:4c:34:70:6e:3d:9c:c4:a5:1d:
21:a8:6a:38:09:a6:d7:c7:a0:f2:3a:11:00:2b:21:30:54:0c:
07:36:91:49:b6:71:08:27:73:9f:4d:87:a6:b6:64:a4:bf:20:
84:34:dd:98:86:a4:ab:63:81:a0:73:b4:9b:94:f3:db:85:0c:
b8:eb:7f:14:ab:40:48:f3:a9:3f:33:c1:64:98:c3:8a:57:b3:
f9:32:80:e5:66:b7:2d:73:29:db:27:f5:86:1c:0a:5c:ed:81:
3d:c0:3d:1b:3b:0f:31:95:0c:e1:e7:db:0d:f7:47:b2:e6:70:
a0:57:9b:ee:83:ed:31:ec:7d:16:79:34:62:e9:cf:f7:cf:c7:
67:2a:92:4a:de:a7:ed:b1:0e:8b:89:84:31:63:b7:ab:ec:38:
be:38:75:f1:aa:af:b6:d9:64:7f:43:3d:6c:c4:4e:72:7a:76:
cc:8d:45:a8:cb:ac:8d:3d:bd:b8:3c:23:e0:f8:b6:d0:46:74:
e8:b3:bd:c4:07:ca:e7:29:51:85:26:89:d2:0e:0f:b7:93:96:
31:c4:69:59:2e:15:64:3a:8f:30:33:76:48:06:00:b0:da:eb:
f5:85:a5:c4:dc:af:88:26:99:a6:60:74:fb:09:07:38:36:f8:
c5:52:56:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:08:53 2025 by rpki-client