Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
File: LLE1YlrAUaKAl39jBs8j1gxAa5A.mft (raw, json)
Hash identifier: vJb5sdB2ktLc54E9t1DtAQdbKBwn5U4Kl9DBGYZa/B0=
Subject key identifier: 29:F9:40:16:26:53:31:3D:88:B1:B7:C7:13:8B:3A:71:1C:C4:F9:61
Authority key identifier: 2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
Certificate issuer: /CN=2cb135625ac051a280977f6306cf23d60c406b90
Certificate serial: 019659B9CB2E9E90EF8F47A1C678E758FC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
Manifest number: 1194
Signing time: Mon 21 Apr 2025 19:01:10 +0000
Manifest this update: Mon 21 Apr 2025 19:01:10 +0000
Manifest next update: Tue 22 Apr 2025 19:01:10 +0000
Files and hashes: 1: LLE1YlrAUaKAl39jBs8j1gxAa5A.crl (hash: ZNMEO0Jft8Sw0GVrgxEWwH3DNitmxVYymxcgopLoCcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:cb:2e:9e:90:ef:8f:47:a1:c6:78:e7:58:fc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb135625ac051a280977f6306cf23d60c406b90
Validity
Not Before: Apr 21 19:01:10 2025 GMT
Not After : Apr 22 19:01:10 2025 GMT
Subject: CN=29f940162653313d88b1b7c7138b3a711cc4f961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2e:21:7b:54:b7:f4:fb:71:5c:9a:94:0d:aa:
a3:99:be:2f:16:ac:db:0f:02:d3:db:65:34:8a:9d:
ac:fb:2f:29:3b:d0:bd:fa:81:48:65:ba:5d:2a:5b:
31:54:ce:e1:e3:7c:70:f2:cc:04:b6:85:0d:4c:b0:
e8:a1:c6:01:fb:8f:9e:3d:2b:aa:69:ec:5c:e4:91:
64:2f:1b:32:a9:df:ec:97:0f:01:da:85:87:84:4b:
cd:54:9e:83:a2:0b:98:07:74:1c:61:64:4e:1e:ec:
7e:00:34:f3:aa:1e:04:13:f6:67:d0:5d:e6:7c:0e:
46:c1:38:8d:25:3a:fc:5f:c7:a5:90:54:5c:a8:f7:
f7:96:7d:27:83:d3:b2:e5:9f:36:9f:00:ce:1b:0d:
6c:49:45:0f:22:f0:37:63:13:04:bf:b0:2b:8e:ed:
a1:29:c6:c7:6a:28:83:c5:35:6e:70:f1:6b:84:f1:
8a:39:c5:4d:15:d8:d5:15:6b:2a:52:84:72:cb:57:
bd:c4:d9:41:fb:04:9b:f5:1e:78:7b:44:cf:cb:3b:
90:97:6b:db:be:91:6a:ae:62:df:df:53:f1:2d:16:
c3:fd:89:0f:1c:21:55:13:9a:30:7b:f4:c6:f9:c7:
65:10:67:0f:20:8e:38:11:3f:86:55:65:a7:3f:b5:
8a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F9:40:16:26:53:31:3D:88:B1:B7:C7:13:8B:3A:71:1C:C4:F9:61
X509v3 Authority Key Identifier:
keyid:2C:B1:35:62:5A:C0:51:A2:80:97:7F:63:06:CF:23:D6:0C:40:6B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLE1YlrAUaKAl39jBs8j1gxAa5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c740e6-ce6b-4d1a-8ece-fe9edbfcc7ef/1/LLE1YlrAUaKAl39jBs8j1gxAa5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:76:70:ac:44:02:13:cf:59:ce:72:d5:79:90:05:80:bb:e7:
77:c1:ec:d0:cf:13:08:2c:3f:e2:ec:e6:b2:07:44:bd:ae:bc:
e6:e5:93:40:46:bd:8e:d5:f6:56:cd:97:36:54:35:99:7d:34:
b1:3e:0e:5c:65:4c:58:5c:3a:db:86:a3:15:b6:0e:6c:be:2a:
e2:78:dc:26:2f:49:94:2a:ce:7b:36:29:90:ef:b7:17:2a:a6:
cc:a2:80:6e:d7:c9:bb:5e:82:5f:60:1c:27:62:1d:e9:40:1a:
0c:51:37:3b:0b:93:61:12:f0:37:ad:e0:d8:23:f3:19:1c:f1:
97:cb:8f:aa:13:c1:df:1f:c4:b0:43:f4:10:b4:52:b2:bf:1d:
81:97:0b:8a:c8:47:32:f9:1a:70:d6:42:28:28:dd:de:24:19:
f6:b5:ed:2d:fe:5e:e5:73:35:1c:61:94:28:1f:ce:71:a3:d0:
24:82:d5:3c:e8:a0:dc:83:4f:27:37:98:51:77:e2:44:8a:02:
d9:0f:b2:0e:69:0a:36:9c:0a:27:bf:3d:4e:76:8f:f4:a3:60:
68:e8:c2:7d:6f:b0:99:08:39:8c:01:07:74:a0:32:82:5d:97:
ee:db:c8:5a:fe:03:f2:f4:34:05:21:49:b1:15:4a:b8:12:26:
d2:7d:02:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:32:14 2025 by rpki-client