Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json)
Hash identifier: L7inIn5EBMX1s41dwkOOg1XLHLns/miFOveOrDt1h24=
Subject key identifier: AF:B7:5D:6E:8C:11:51:A1:E2:E1:15:4C:D2:F7:61:7A:66:D7:4A:2D
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 019655DD3B30D7AEFFADDB9AD0B254CB281B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
Manifest number: 1508
Signing time: Mon 21 Apr 2025 01:01:24 +0000
Manifest this update: Mon 21 Apr 2025 01:01:24 +0000
Manifest next update: Tue 22 Apr 2025 01:01:24 +0000
Files and hashes: 1: CxBTWe0phnLQfEvy14KZrA9LaZk.roa (hash: dM9wG7UCGb2jgf3z7+woCnj6ywdvLeoZBvHOHvMXmvE=)
2: IPPrratubHXAQd-ifZngdpirX5c.roa (hash: I/yflOCWYAytKofslD/06DhDQeYHbVXIxz2aV+s2uxk=)
3: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: rCxNkASaM03wxcKjvpOXFqDc8P1GC2qW6TLdpI8DBXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:3b:30:d7:ae:ff:ad:db:9a:d0:b2:54:cb:28:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Apr 21 01:01:24 2025 GMT
Not After : Apr 22 01:01:24 2025 GMT
Subject: CN=afb75d6e8c1151a1e2e1154cd2f7617a66d74a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:bb:07:bc:a7:08:c7:4f:d8:4c:dd:36:1a:
4f:4c:98:e2:d9:ac:4d:b9:80:a6:92:1d:06:fe:b5:
f8:85:f8:7f:0f:07:8f:b1:98:d6:1d:80:42:ec:f2:
f3:51:8d:b5:93:26:8a:bc:79:64:b4:d1:a8:12:6c:
3a:ae:3b:46:f9:03:e3:6c:b7:9c:dd:31:76:c4:06:
f6:c1:d4:13:24:65:c8:60:7c:5f:e9:b5:a1:6f:fb:
2a:49:5c:d8:09:12:1a:92:5b:6c:cd:02:11:f6:29:
55:37:fd:dd:cd:95:dc:ae:45:6e:1b:98:93:44:e3:
11:39:19:ad:c6:96:c3:d3:38:a6:11:6d:7b:14:a2:
77:6e:e4:46:d7:0e:f4:eb:40:1a:42:4b:ae:ed:b7:
3d:ab:64:7d:22:f1:32:8a:26:79:32:9d:ee:ca:d4:
33:91:c3:48:1e:e2:bf:d3:75:2b:9a:ef:0f:0e:67:
91:71:9f:f4:1a:cc:0d:95:c4:aa:0e:c9:4c:aa:87:
07:8d:b7:45:e4:8c:20:a6:2b:80:b6:9d:97:1c:38:
ee:ed:32:5c:ad:fe:9f:c6:65:d7:17:26:01:06:6f:
9a:6f:9f:f2:cd:c0:5f:77:f1:5e:17:8e:9f:01:32:
e5:3b:10:8a:5a:4d:d6:5d:2f:f7:c6:cc:1c:70:f5:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B7:5D:6E:8C:11:51:A1:E2:E1:15:4C:D2:F7:61:7A:66:D7:4A:2D
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:40:e4:54:8e:e7:3a:e3:32:df:70:bc:b8:b3:d8:30:dd:fb:
15:ae:40:34:bc:0f:1a:61:84:46:e5:39:47:92:f2:bd:30:9d:
63:92:b3:b8:7d:9b:17:b4:0a:64:5b:e7:7e:f4:35:64:2e:59:
cd:f6:08:e7:0a:02:5d:96:a8:b4:e0:71:4e:eb:8b:aa:f9:80:
5f:2d:77:cb:de:b6:37:e8:77:70:94:fe:62:81:a5:34:e1:86:
0e:c1:c6:79:f7:6a:c3:ba:a7:bd:8a:fa:b2:33:7d:72:b8:d9:
2c:7a:7d:18:71:67:70:65:11:7b:62:5d:7c:2e:12:40:0e:c8:
59:6f:18:27:0c:af:0f:36:6b:09:2e:52:1a:4d:d6:25:4e:69:
80:09:44:8d:ca:35:11:ea:31:2f:57:bf:ea:f4:ab:b3:ae:2e:
01:b3:6f:c6:65:02:78:34:53:a4:e0:33:8b:a4:45:57:10:60:
4f:04:6f:60:a5:07:44:e6:83:38:ad:d0:74:ca:31:0d:3a:69:
20:c5:b2:f1:55:63:b8:fa:89:3f:b1:7a:10:1f:55:fd:17:26:
64:b8:9a:72:41:ed:ac:1c:40:10:35:73:8d:5d:37:b4:3c:39:
a2:0a:9e:cc:eb:3c:5c:fb:4e:b1:18:d8:c1:ad:75:09:f6:a5:
3c:39:fe:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:40:05 2025 by rpki-client