Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json)
Hash identifier: F2WdbyMWxB6ZMLj8kidpJVZ+iijZW3qCWhYB+So/qmM=
Subject key identifier: 66:32:C2:01:72:20:16:02:3F:D2:BB:18:5A:43:EA:6A:33:D4:02:79
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial: 01964D104525E03C61F60014A28B3ADC1B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
Manifest number: 04DF
Signing time: Sat 19 Apr 2025 08:00:33 +0000
Manifest this update: Sat 19 Apr 2025 08:00:33 +0000
Manifest next update: Sun 20 Apr 2025 08:00:33 +0000
Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: bEVP145qT2Dzo1QL9z815WIm5o+qYotkQjCaow6hC8Y=)
2: S8Gv615Ih2EECVB1a2b3J3u_PZw.roa (hash: QLn7xaZ0/yy3B92jWZmiyfhzxbYSpkw1Q0HqcssnojQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:45:25:e0:3c:61:f6:00:14:a2:8b:3a:dc:1b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Validity
Not Before: Apr 19 08:00:33 2025 GMT
Not After : Apr 20 08:00:33 2025 GMT
Subject: CN=6632c201722016023fd2bb185a43ea6a33d40279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b4:9a:48:89:3d:bb:e7:68:e5:68:78:02:89:
a2:75:86:0b:2d:2f:5f:fc:ab:94:8e:35:ac:67:53:
f3:f6:17:37:37:80:4f:01:f1:b8:10:5b:d1:34:07:
6c:fc:48:ea:d8:9c:49:d7:e4:0b:06:c5:12:4f:ed:
f9:c7:d9:57:9f:5e:84:f9:14:20:a7:19:e7:7c:c4:
da:07:6c:99:e6:5c:e3:5e:1e:fc:11:fd:a3:1e:06:
ef:23:96:ac:dd:eb:b7:8f:a4:d6:b4:08:cd:f5:23:
4b:3d:09:14:3f:f5:48:de:cf:f2:05:ff:af:fd:e7:
83:e4:62:5e:50:fd:8e:f9:ab:5c:c2:5f:55:39:04:
87:4d:1c:ff:50:e5:7d:6e:89:ba:48:21:95:ca:50:
8b:61:97:5c:7f:66:f8:71:21:a1:e6:27:f9:6f:5f:
a2:f0:b0:fb:f9:61:1f:da:3d:08:30:2c:ab:d4:ce:
36:55:cb:cf:e2:45:f1:98:f9:96:85:53:73:ec:8c:
1b:42:66:9d:dd:7d:19:1f:c4:fa:b2:5b:19:fd:52:
bd:5f:16:55:09:f8:af:7f:57:67:96:97:db:7a:70:
06:b7:58:ce:e3:93:77:90:6d:46:b7:29:1c:21:ce:
4b:5b:0c:85:4f:c6:a5:db:7d:b0:61:a5:f6:a5:0d:
ed:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:32:C2:01:72:20:16:02:3F:D2:BB:18:5A:43:EA:6A:33:D4:02:79
X509v3 Authority Key Identifier:
keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d1:d3:2f:35:33:7e:74:34:b5:db:d5:e5:f0:fd:b0:7a:23:
ae:18:0a:f2:50:71:90:ab:0b:7e:c3:f8:1f:0c:56:b2:2b:92:
ff:f1:d8:d3:11:dd:a3:1a:d8:bf:25:0e:66:96:bb:c5:b4:19:
47:42:2f:65:31:59:ad:e6:11:0f:26:48:22:f4:f4:8f:83:dc:
32:da:6c:23:6c:08:11:e8:e0:05:84:a2:1c:4e:89:8b:7f:91:
40:2d:36:d1:1b:01:32:e8:74:0d:32:9a:1b:a2:16:ed:78:b6:
ff:e0:10:36:1c:2b:ab:ae:70:7a:cf:87:36:cd:96:00:1c:b9:
43:23:c2:4f:25:ca:7c:1c:c3:65:9b:a2:6a:e6:db:49:7a:55:
c7:48:8f:d1:45:bf:1b:46:ad:45:3a:8d:a4:03:19:d3:69:30:
f3:46:e4:62:85:e9:e9:8e:c6:d1:a1:99:52:fe:b4:84:65:02:
95:99:fa:52:a2:23:a8:3d:8b:c5:c7:a6:78:1b:f5:a0:6d:af:
6a:d2:08:d4:24:eb:f1:35:67:51:49:59:c3:1f:ee:e4:47:ab:
8d:95:e8:0b:93:e2:65:6d:78:f0:94:e7:3f:46:fa:01:c1:65:
9b:7b:30:b1:fe:a3:1a:bb:78:70:37:3b:b9:c2:e8:67:88:d7:
5e:8d:14:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:00:05 2025 by rpki-client