Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ef9a4e-790e-4ece-a845-25ccf32739a2/1/lbzyUZp7TPNY-2x4A5pb56GxMFs.mft
File: lbzyUZp7TPNY-2x4A5pb56GxMFs.mft (raw, json)
Hash identifier: m4p2uWIyfuBtbAv5ZGo/iZwFtThxAQUxT81C8Lte/ho=
Subject key identifier: 70:10:1F:B2:8F:3F:FD:05:A8:06:91:EF:E0:F2:8A:0F:22:1C:10:19
Authority key identifier: 95:BC:F2:51:9A:7B:4C:F3:58:FB:6C:78:03:9A:5B:E7:A1:B1:30:5B
Certificate issuer: /CN=95bcf2519a7b4cf358fb6c78039a5be7a1b1305b
Certificate serial: 01965EE008D59930BEBB44C6F3B739F5AEE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbzyUZp7TPNY-2x4A5pb56GxMFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ef9a4e-790e-4ece-a845-25ccf32739a2/1/lbzyUZp7TPNY-2x4A5pb56GxMFs.mft
Manifest number: 03DA
Signing time: Tue 22 Apr 2025 19:01:02 +0000
Manifest this update: Tue 22 Apr 2025 19:01:02 +0000
Manifest next update: Wed 23 Apr 2025 19:01:02 +0000
Files and hashes: 1: lbzyUZp7TPNY-2x4A5pb56GxMFs.crl (hash: 10mHTcQjxis/tUrWQeB/k3rwYZ1UGbk+srWLFwrU01A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/ef9a4e-790e-4ece-a845-25ccf32739a2/1/lbzyUZp7TPNY-2x4A5pb56GxMFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/ef9a4e-790e-4ece-a845-25ccf32739a2/1/lbzyUZp7TPNY-2x4A5pb56GxMFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbzyUZp7TPNY-2x4A5pb56GxMFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:e0:08:d5:99:30:be:bb:44:c6:f3:b7:39:f5:ae:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95bcf2519a7b4cf358fb6c78039a5be7a1b1305b
Validity
Not Before: Apr 22 19:01:02 2025 GMT
Not After : Apr 23 19:01:02 2025 GMT
Subject: CN=70101fb28f3ffd05a80691efe0f28a0f221c1019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e1:52:3a:f5:32:45:d7:05:39:e7:d8:56:7d:
a7:ff:a3:25:7a:99:22:c0:cb:56:73:9e:41:5c:05:
35:64:2b:92:84:fc:5f:74:36:f0:e9:58:4f:d0:65:
cb:37:ef:18:aa:b3:cc:a6:2a:72:b3:7e:95:64:eb:
21:55:1c:36:5c:96:dc:50:8c:2c:2f:5a:7c:de:06:
28:e0:3a:1e:ed:14:3b:ec:f0:46:8c:76:59:66:6e:
be:16:1e:60:08:d4:8e:9b:10:83:1c:d1:9f:af:51:
6a:a7:7c:36:34:4c:1c:f1:73:0a:86:69:84:a1:ed:
9f:e1:2d:f5:85:1e:a6:f0:41:e2:88:07:bf:20:86:
3e:aa:89:6d:eb:45:f8:64:63:d2:20:a0:e1:0e:88:
3c:0e:1d:37:db:71:ca:f9:42:80:d9:ae:e1:77:ef:
2c:8a:21:ac:3b:fc:a6:28:b5:91:c1:b1:b6:a5:23:
25:6b:c4:78:04:87:98:83:64:83:10:b4:aa:e0:1d:
d7:81:04:e6:55:b4:8f:34:cd:e3:62:4f:d5:aa:bf:
89:12:00:27:75:c5:d9:39:8b:32:75:d8:5c:11:b1:
ac:0e:d9:ee:be:bc:aa:73:fe:42:50:18:01:2f:c6:
f5:d8:06:a4:8e:5b:28:2a:ec:5d:ae:c9:e8:37:01:
4d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:10:1F:B2:8F:3F:FD:05:A8:06:91:EF:E0:F2:8A:0F:22:1C:10:19
X509v3 Authority Key Identifier:
keyid:95:BC:F2:51:9A:7B:4C:F3:58:FB:6C:78:03:9A:5B:E7:A1:B1:30:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbzyUZp7TPNY-2x4A5pb56GxMFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ef9a4e-790e-4ece-a845-25ccf32739a2/1/lbzyUZp7TPNY-2x4A5pb56GxMFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ef9a4e-790e-4ece-a845-25ccf32739a2/1/lbzyUZp7TPNY-2x4A5pb56GxMFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:61:cf:ab:3d:bc:84:33:ec:a0:15:c0:88:45:02:61:e7:8f:
40:06:19:fb:b0:fb:9a:6e:54:17:89:cc:0b:e8:ba:e3:93:ee:
50:4c:37:17:e7:48:48:4e:23:fc:66:4d:f1:18:69:f9:e8:ad:
52:fe:e8:43:48:5d:87:e3:67:7e:7d:4c:d5:e9:00:98:53:a9:
44:dd:58:f0:25:2a:62:15:13:06:62:aa:bd:7f:61:b9:d9:fc:
e3:82:e0:f3:e0:70:1a:d0:e2:08:03:34:4a:ff:fe:a2:08:95:
8d:74:d1:55:b8:3b:65:0c:d1:70:ee:e6:d3:bc:aa:6a:52:71:
70:11:0d:aa:b0:3c:3f:9f:e3:c2:d2:9f:7c:df:4f:b5:44:c6:
d0:17:69:eb:c6:71:ea:42:8e:5c:52:ba:a8:fa:30:d6:1a:09:
b3:68:0b:c9:fe:57:14:ea:6e:75:07:32:3f:e0:16:46:db:dd:
d9:f2:12:fd:22:30:f2:9d:fd:e0:5b:f3:1a:a0:ef:6f:ba:36:
7f:fb:f1:20:ec:1c:f5:a1:ac:0c:ac:36:19:d4:e6:8b:83:6a:
5f:fa:ae:31:da:a8:e3:03:d1:f1:23:8d:93:ab:97:a8:90:26:
ff:c4:d5:36:fc:9e:14:34:b8:b7:41:17:cf:52:32:06:f9:9b:
d1:e5:a1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:28:44 2025 by rpki-client