Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
File: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft (raw, json)
Hash identifier: ExCqWqLdd4nk0iizO4psM0CZ/xWbtz+DPjhivgQxTt4=
Subject key identifier: 69:18:8E:4F:27:21:EB:DC:9C:DA:C9:0D:33:BC:DA:58:F0:00:BD:6D
Authority key identifier: 2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
Certificate issuer: /CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Certificate serial: 01960565E258D3DF35EB27822E9A67DA516B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
Manifest number: 6D
Signing time: Sat 05 Apr 2025 10:01:25 +0000
Manifest this update: Sat 05 Apr 2025 10:01:25 +0000
Manifest next update: Sun 06 Apr 2025 10:01:25 +0000
Files and hashes: 1: Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl (hash: Uz5XIIpIUItNETwluAXbTagTjW38KjmO/tQXaRQSHaU=)
2: fLlv5aqJH-Xyc8xZ7zKtVoErMgY.roa (hash: NhTDsXx1rGZ6x/7/rknUayaETp5dTu1vdjx00J+ePS8=)
3: g4OghidcBHhG6H0ygzNjK0BOBQ4.roa (hash: yN/WoqH4d4SXT4k7UzUmKgAO2KnbhoqPw7tsWQrX0cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:05:65:e2:58:d3:df:35:eb:27:82:2e:9a:67:da:51:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dcd2c2c1411b46b18f70e677101ada11ccb5198
Validity
Not Before: Apr 5 10:01:25 2025 GMT
Not After : Apr 6 10:01:25 2025 GMT
Subject: CN=69188e4f2721ebdc9cdac90d33bcda58f000bd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:19:cf:78:71:05:32:0b:0e:f2:c1:9a:99:d6:
22:2e:96:4e:78:f8:c8:a8:1c:ca:73:68:32:1f:56:
d8:e3:89:a0:5f:8c:2b:a6:f0:c0:01:90:3e:a8:ba:
f8:e1:42:8f:62:30:66:69:f7:fd:31:17:10:00:40:
36:d4:0c:68:93:ff:64:68:bf:6c:97:5a:dc:68:35:
7f:18:98:9d:99:bd:70:a7:b0:fe:01:58:b4:6b:59:
a9:4d:cf:74:91:50:01:ae:44:8e:86:60:f9:1a:8c:
42:d0:af:c2:8d:de:4c:32:3f:a2:99:09:50:b7:00:
7a:90:a0:41:d3:60:ee:67:83:c9:fb:c5:c9:af:85:
80:e1:97:1e:3a:72:4d:bc:f6:b2:a7:80:4b:2e:a6:
14:4f:4f:54:92:cf:57:e0:43:30:d1:11:8b:b4:c6:
95:a3:4c:90:60:9b:a0:33:fa:0d:69:81:dd:f7:be:
36:69:86:5c:8a:b3:fd:40:d8:1c:bc:44:49:d1:c3:
ff:cd:a5:23:c1:68:aa:fd:16:b3:87:9c:cc:e4:de:
05:ce:8f:41:b6:4f:e5:f2:49:77:67:b6:02:41:8e:
6f:d3:59:48:29:c1:82:eb:fc:fd:58:5f:98:55:37:
14:f9:c0:2b:ec:c6:ca:a5:a4:66:ba:33:76:94:18:
d8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:18:8E:4F:27:21:EB:DC:9C:DA:C9:0D:33:BC:DA:58:F0:00:BD:6D
X509v3 Authority Key Identifier:
keyid:2D:CD:2C:2C:14:11:B4:6B:18:F7:0E:67:71:01:AD:A1:1C:CB:51:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dffa1f-cf4a-4c90-b307-db36eea8307f/1/Lc0sLBQRtGsY9w5ncQGtoRzLUZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f2:d3:24:57:0e:21:ed:bc:df:1b:42:0b:2c:e2:2f:f5:6f:
5b:7f:73:27:2f:e0:df:a4:3e:7c:e8:70:f3:7c:e5:7a:c4:ef:
ca:ef:42:76:9e:2a:e6:46:9e:a2:7d:af:a0:95:52:f0:1c:45:
a4:78:91:ba:15:98:20:ab:8a:6d:d3:a3:a0:b1:4c:23:41:ed:
c5:7c:e5:0e:73:99:e6:49:9a:74:30:c1:a7:ef:1d:bf:60:45:
62:dc:f8:65:83:bd:55:8c:9c:5b:65:4b:06:05:2d:b2:80:d6:
93:4a:fb:df:2a:09:99:a7:e2:a8:95:5c:9b:33:e0:31:2c:1d:
7b:eb:d5:0e:7f:f6:72:6f:4b:1c:77:c4:4b:40:cb:9c:91:8d:
ce:56:fb:bf:7d:57:c5:81:21:46:37:73:d5:59:a6:0e:db:ec:
e0:b7:0d:ae:8f:87:c0:23:05:67:d4:2e:5b:4e:3f:7b:ec:87:
13:d2:6a:08:99:cb:e3:00:9c:a5:a9:9c:68:71:bc:01:cc:7f:
ac:9c:6d:f2:e0:a2:07:8b:4b:12:85:5d:da:5a:7c:10:c6:bb:
81:d1:5b:b3:4f:c7:72:fd:8d:73:20:9c:96:11:6e:a7:b1:82:
3f:67:5b:4c:52:4f:d2:40:ba:b0:66:e8:2b:ab:a6:85:14:57:
bc:f2:18:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:08 2025 by rpki-client