Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
File: LKyEzuxXs1-jlTSuIwCa6oICOao.mft (raw, json)
Hash identifier: DonqpHtjMz9I9vYNcdcD/sRsb4W2gWaVDndI/FijuDk=
Subject key identifier: 46:8F:4E:C5:85:66:6B:45:09:1D:44:FD:53:02:D1:94:E8:0D:D7:70
Authority key identifier: 2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA
Certificate issuer: /CN=2cac84ceec57b35fa39534ae23009aea820239aa
Certificate serial: 0196545C6342F4713599AB04CB2C24710D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
Manifest number: 0723
Signing time: Sun 20 Apr 2025 18:01:02 +0000
Manifest this update: Sun 20 Apr 2025 18:01:02 +0000
Manifest next update: Mon 21 Apr 2025 18:01:02 +0000
Files and hashes: 1: LKyEzuxXs1-jlTSuIwCa6oICOao.crl (hash: 0dCtHW/Hhgcyj9Ou7iB8t5+3fFxPLwteo1RxQCdrFaw=)
2: cj0dff8EdsGG8DaopETeofzcldw.roa (hash: 06o/5+ZmJQt03Z2LLNo5k4a7U1bSw5gDTRAuW+tjkok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:63:42:f4:71:35:99:ab:04:cb:2c:24:71:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac84ceec57b35fa39534ae23009aea820239aa
Validity
Not Before: Apr 20 18:01:02 2025 GMT
Not After : Apr 21 18:01:02 2025 GMT
Subject: CN=468f4ec585666b45091d44fd5302d194e80dd770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:27:db:5b:f1:88:74:2d:f6:d9:7b:13:2e:2a:
85:f9:bc:29:c7:68:c5:a1:0b:8a:2c:67:88:c4:f4:
11:05:2c:cb:bf:4f:b3:5d:52:31:92:3c:d4:96:6f:
66:e8:c3:e5:a1:e9:e7:d1:90:e0:c1:53:ee:d0:85:
58:b0:4d:42:59:17:e4:83:82:92:01:00:0b:2b:6a:
5f:63:57:8c:85:6d:cb:c2:08:b5:fc:2c:6d:6e:c2:
55:53:01:df:a0:9c:c2:c5:88:65:91:c5:e1:65:6e:
62:1a:10:4c:77:d3:ea:fa:42:d5:a0:ef:7a:1e:70:
6d:a4:82:78:50:21:63:c6:60:f6:4f:67:ee:38:ed:
e7:1a:3d:29:9c:d9:8f:7a:f8:51:e7:b1:f5:f0:3d:
a7:6a:c4:fe:46:ca:b2:86:bd:63:00:71:de:a7:5e:
6e:75:52:60:85:fb:fc:a8:1f:52:49:1e:42:75:4c:
89:63:82:7e:f1:fd:95:d4:a1:82:e5:d7:9a:2c:8d:
df:d0:df:1a:a4:b7:4f:03:65:76:e9:7b:de:be:ab:
0f:08:7c:82:9c:b4:07:fd:e8:fd:f0:03:9f:16:71:
15:16:d3:a4:48:f1:14:06:00:55:22:a5:a9:29:c1:
70:44:c7:b4:6d:41:14:41:bf:1f:1a:53:00:e2:4c:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8F:4E:C5:85:66:6B:45:09:1D:44:FD:53:02:D1:94:E8:0D:D7:70
X509v3 Authority Key Identifier:
keyid:2C:AC:84:CE:EC:57:B3:5F:A3:95:34:AE:23:00:9A:EA:82:02:39:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKyEzuxXs1-jlTSuIwCa6oICOao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/687cd5-6345-4f64-be46-ede70c8ed513/1/LKyEzuxXs1-jlTSuIwCa6oICOao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2b:69:37:f6:73:94:fa:6a:ce:38:f6:41:e3:e6:f2:f4:d3:
0a:9e:28:35:a4:d3:ce:d3:9c:ab:2b:e8:9d:97:9e:e5:f8:21:
38:29:df:b6:bd:29:05:63:2d:ba:28:c6:f8:33:80:0d:9e:6d:
2c:e8:18:15:91:b4:19:5b:0c:42:ae:21:2e:2e:4c:64:ab:9c:
2d:a7:5d:12:e4:93:e1:45:2a:2c:e8:fe:df:6f:4e:2b:51:45:
3a:48:67:3c:bf:fb:7c:2f:19:65:cb:0d:67:a3:ed:82:ea:6d:
d5:3b:2f:55:35:89:fc:84:87:ca:4e:8a:9b:30:c8:c8:b0:06:
35:0d:df:48:39:85:66:a5:6e:11:e1:b7:78:06:2d:53:29:01:
df:35:13:22:72:a3:2f:31:0f:97:07:a5:0d:c8:c8:89:94:6b:
d9:d7:e9:e7:fd:3a:7e:b6:80:3e:c3:d9:20:30:82:5f:76:93:
e9:26:31:2d:f1:28:55:02:7c:d8:88:86:a3:90:52:d3:b2:62:
64:5a:de:57:6f:99:18:14:e8:8a:ff:6d:85:3d:d3:78:41:3d:
d8:5c:6b:e8:33:f2:f3:8d:a6:3f:5c:fd:c8:41:46:89:3e:c1:
13:6d:e0:6f:4f:a0:42:43:fc:2a:44:b5:41:e5:8f:8e:03:a4:
83:1d:78:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:29:07 2025 by rpki-client