Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
File: LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft (raw, json)
Hash identifier: 5ymczWQ7HMU1IKflOUqb6UOvU9UwO0wtSyizVzHZQ9s=
Subject key identifier: 27:64:47:B8:E0:F5:8F:F2:1A:A3:58:C8:6F:D0:E5:1F:0C:D5:C0:D1
Authority key identifier: 2F:15:B7:3A:7C:2D:13:1E:C1:4E:BD:90:71:71:8B:54:C3:FB:A6:92
Certificate issuer: /CN=2f15b73a7c2d131ec14ebd9071718b54c3fba692
Certificate serial: 01964F6C3B6E0333968970D84DE434EA8B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
Manifest number: 020F
Signing time: Sat 19 Apr 2025 19:00:15 +0000
Manifest this update: Sat 19 Apr 2025 19:00:15 +0000
Manifest next update: Sun 20 Apr 2025 19:00:15 +0000
Files and hashes: 1: LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl (hash: wo9S4a4ubyUG5GlxphhQVwtIcOJuBd8pkGT4mNnK0EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:3b:6e:03:33:96:89:70:d8:4d:e4:34:ea:8b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f15b73a7c2d131ec14ebd9071718b54c3fba692
Validity
Not Before: Apr 19 19:00:15 2025 GMT
Not After : Apr 20 19:00:15 2025 GMT
Subject: CN=276447b8e0f58ff21aa358c86fd0e51f0cd5c0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:1e:41:3d:62:33:ef:c6:b9:e6:0e:d7:73:
ae:8e:df:a6:34:56:5f:fb:f5:3e:a4:1f:7b:42:7b:
98:26:c2:88:e4:1c:ef:45:6e:95:ed:3f:c0:31:ca:
65:1e:a7:55:f4:e0:50:dc:61:4c:d7:a7:f0:92:a4:
ac:0d:82:80:c1:89:53:99:3e:ea:a5:b9:bf:be:51:
26:a9:f5:d7:f8:e3:e6:2a:4e:65:7e:a9:0f:28:4c:
06:fd:76:ce:db:c5:27:09:70:81:e6:7b:1f:49:60:
dc:68:cf:15:4c:07:fe:b5:c7:35:4d:a1:87:2e:35:
9c:5e:ca:81:12:7c:a5:7d:e5:76:4d:1a:7b:60:59:
ae:d4:75:11:2d:9d:96:3a:0c:f9:71:77:fc:d5:9f:
fe:ea:a9:2b:f8:a8:64:4f:71:0c:29:d9:eb:8e:04:
3a:89:21:a1:77:40:78:b9:ca:1d:2a:20:51:31:94:
61:9f:c9:33:2d:19:f0:ee:33:2c:78:ae:e6:df:eb:
87:95:77:f0:39:4d:da:69:e9:be:14:2d:d3:7a:47:
25:b4:5e:8e:18:45:30:85:7b:1c:b4:89:d8:08:3e:
a1:77:bb:07:9e:37:92:ac:81:51:c3:8b:40:78:67:
fe:49:ce:b4:d0:0c:16:ed:01:30:16:8f:31:07:4a:
fd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:64:47:B8:E0:F5:8F:F2:1A:A3:58:C8:6F:D0:E5:1F:0C:D5:C0:D1
X509v3 Authority Key Identifier:
keyid:2F:15:B7:3A:7C:2D:13:1E:C1:4E:BD:90:71:71:8B:54:C3:FB:A6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0d:c1:e7:23:58:f6:e4:cd:ba:1f:0e:45:a2:bc:34:9a:71:
a2:25:5e:b2:3d:bc:6a:fc:e4:f0:a4:16:dd:4d:2f:f7:00:80:
b9:ad:1e:5f:9f:e1:5e:ab:90:5c:93:ce:db:2a:d1:ce:52:0f:
d4:a1:b4:b8:88:71:8b:57:15:83:fe:d5:a6:07:91:23:e9:a7:
ea:4c:8c:d7:8e:3b:28:d4:aa:00:67:a2:2d:20:1c:d6:3b:22:
d5:bd:28:02:02:04:74:4e:76:88:92:eb:67:c4:9b:48:25:88:
36:05:87:11:07:d1:45:14:f4:33:63:91:86:62:78:eb:76:54:
b1:45:bf:d4:5f:7e:81:45:94:fc:45:9e:6c:55:22:97:ef:2e:
e7:7e:04:7f:1c:2d:65:79:bc:88:54:f0:af:0c:4f:70:31:62:
73:d6:0b:d0:a1:2c:9e:87:65:98:6c:ac:93:bb:fb:37:81:56:
09:8c:ad:b1:fc:09:2f:b0:8e:13:ae:03:7a:14:13:0e:4d:a3:
0f:50:cb:98:05:47:77:b0:e8:98:e0:e9:11:a9:f5:04:a9:43:
7e:06:22:b7:68:59:8d:d9:84:ee:2a:98:23:e0:ad:b7:5e:29:
8a:f7:ba:90:f9:10:5b:e7:5c:c4:85:bb:cd:da:b7:f8:f5:d2:
b5:61:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:20 2025 by rpki-client