Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: gnvLH4nJQEkiVy0a2AFuhdLBlONFrEbY4Zl+4uvaY4A=
Subject key identifier: CD:76:89:AF:5B:0E:47:81:CC:09:73:68:72:2D:CB:B6:A2:DD:0E:E1
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 01964CD970FAA3C1F3D0D7C5AD32330A643C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 07:00:40 +0000
Manifest this update: Sat 19 Apr 2025 07:00:40 +0000
Manifest next update: Sun 20 Apr 2025 07:00:40 +0000
Files and hashes: 1: 0jE-nEfR5T_d7BILsWZTUD9dG5M.roa (hash: av9KzOnABL0S/mILNTQRWW5+TsQkQ7Bk5uNHmlLtxtc=)
2: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: xmfa93Uxdi/hp3Cnx8z/d4bAZgqAti9ZOKzxF12xdgM=)
3: gSdyPqr-OoyLVq-r6dULnURGpXQ.roa (hash: AJDr6l36OnIeYet8bGE+tBeIfs9sdxJq8CBSPv8HuMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:70:fa:a3:c1:f3:d0:d7:c5:ad:32:33:0a:64:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Apr 19 07:00:40 2025 GMT
Not After : Apr 20 07:00:40 2025 GMT
Subject: CN=cd7689af5b0e4781cc097368722dcbb6a2dd0ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:49:f5:45:35:92:be:fc:48:9b:5d:a1:47:b5:
d7:37:b9:23:1d:d3:14:3a:2c:03:fa:59:b4:fa:4e:
cb:45:84:c0:8c:63:9a:69:b1:b8:e0:cf:ae:8c:7f:
16:50:53:76:d1:44:f2:98:aa:19:69:6a:3d:45:50:
eb:81:ac:a0:0a:b9:81:50:de:29:b5:f1:61:ee:42:
60:9c:01:f8:c7:86:8a:d2:0c:52:d0:0e:3e:e1:d4:
ed:51:70:b1:9a:76:db:74:8b:4c:7f:97:fd:12:b2:
41:d8:5a:e1:3d:36:ad:92:17:ab:f8:71:35:5a:9b:
b3:02:39:ce:09:5b:8a:e3:9a:88:5f:59:1a:d9:a7:
27:dc:c8:67:a9:bc:c5:30:c5:ec:8f:70:29:f2:74:
ef:27:b8:f6:96:31:1d:aa:df:e8:72:03:09:7e:21:
e7:81:ca:7f:a7:af:68:e2:bd:fc:37:33:08:9f:65:
36:a5:08:7e:65:5a:30:5b:e8:f3:b5:5c:58:75:4a:
07:3c:ba:82:94:fc:05:a0:87:1f:10:81:c4:32:9d:
75:f1:ee:0e:b5:80:ac:82:14:64:cd:85:d0:10:18:
e5:17:12:ea:9f:3b:8d:65:7b:3d:07:a5:2d:55:e0:
58:59:73:fe:2a:31:5e:77:ae:2b:65:0e:01:d6:ad:
f8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:76:89:AF:5B:0E:47:81:CC:09:73:68:72:2D:CB:B6:A2:DD:0E:E1
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3d:dd:12:ee:e6:35:11:2a:97:8e:2b:9f:8b:17:e8:2c:0f:
29:c1:19:24:bc:31:f1:f8:d2:7c:5e:17:ae:c1:5a:05:3b:c6:
4c:d1:7d:0d:a3:bc:76:a8:ff:ac:49:ab:ad:44:bf:b5:05:f8:
0d:66:90:ea:30:c8:b5:21:21:90:51:7e:e8:ef:87:6f:07:2a:
82:49:c3:0f:f5:c0:39:5a:51:85:48:a8:15:96:9f:5b:74:a2:
b7:ae:51:00:9f:a1:14:a8:9d:25:e1:5f:a0:f4:a6:4b:5f:f3:
be:b5:f6:fd:72:e3:a1:7a:3a:06:1e:b1:75:62:ee:07:47:52:
cb:62:4d:df:26:09:6f:7c:eb:e7:58:e9:a6:b6:7c:77:cd:47:
44:aa:d6:03:00:13:eb:15:3a:76:c3:92:b6:a4:09:e5:64:2c:
af:0a:c8:01:89:f0:d0:83:47:5d:e6:90:a2:20:32:cc:85:8f:
6f:7b:49:63:df:a3:af:31:f2:f2:f7:d3:51:7e:6c:d4:c3:9e:
7a:5b:14:08:84:b9:ce:bb:f8:10:a4:e7:eb:3c:b9:19:f6:30:
c1:3a:c8:c9:4b:ac:cf:52:b1:21:2c:6b:31:1d:88:81:f0:43:
9f:f4:90:8b:7f:ad:d8:f5:e6:ec:ec:10:c8:b4:ec:ad:9c:83:
cd:e8:59:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:11:49 2025 by rpki-client