Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
File: LpRuQzNsoql56Z31z11tXnFVgy0.mft (raw, json)
Hash identifier: ZKFTpY+LkIPLj7NcwkIc29dg4peCKVWK/D0J154N+Ws=
Subject key identifier: D8:E7:73:ED:DF:D7:62:4B:13:37:94:C0:F9:E0:B4:38:D3:D6:44:5F
Authority key identifier: 2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D
Certificate issuer: /CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
Certificate serial: 019643D5EB027A3DF1938E550B89996631A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
Manifest number: 078D
Signing time: Thu 17 Apr 2025 13:00:14 +0000
Manifest this update: Thu 17 Apr 2025 13:00:14 +0000
Manifest next update: Fri 18 Apr 2025 13:00:14 +0000
Files and hashes: 1: LpRuQzNsoql56Z31z11tXnFVgy0.crl (hash: /RHbnCSHAusqFxA0gqyzKXp3dCEUk/XW6R21JZcJTMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d5:eb:02:7a:3d:f1:93:8e:55:0b:89:99:66:31:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
Validity
Not Before: Apr 17 13:00:14 2025 GMT
Not After : Apr 18 13:00:14 2025 GMT
Subject: CN=d8e773eddfd7624b133794c0f9e0b438d3d6445f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:24:f4:60:67:63:cd:f6:df:12:35:1a:78:
5c:31:28:bf:c3:d3:f6:10:95:51:1e:10:1b:ba:90:
04:74:e7:8b:eb:3a:af:96:f8:c4:64:eb:12:71:6a:
29:6d:7b:dc:12:7a:32:35:a4:fa:c7:7e:d3:a5:05:
9f:44:85:31:66:10:61:da:03:db:f7:63:3b:06:a5:
64:ff:6d:50:1a:5e:9e:94:4e:be:df:d1:74:09:f3:
34:29:aa:6f:40:b2:4b:63:34:d5:7f:18:55:e4:32:
79:f9:6f:77:82:ef:66:31:9b:6c:35:08:35:d5:33:
e6:2e:89:3c:e8:ec:58:7b:21:40:46:2c:5c:2e:38:
dd:18:a7:72:42:6c:9b:c0:37:65:b3:22:b5:d0:69:
b9:c8:eb:09:0a:60:d0:72:fa:4d:14:8f:9d:78:ff:
fa:df:15:49:0a:b3:ee:09:55:bc:87:d8:65:02:48:
35:32:a0:04:a4:ed:82:84:fd:a4:e6:f8:73:e7:2c:
62:60:14:dc:09:6c:95:a0:43:39:1d:d2:8b:56:96:
64:67:1c:c1:8d:4c:f6:d9:a4:16:45:1e:0e:8b:fe:
e8:76:57:52:a6:eb:6d:16:61:aa:61:4d:a3:4b:b5:
12:f9:65:a5:27:88:44:e8:49:15:a6:e2:0b:7d:cb:
9b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E7:73:ED:DF:D7:62:4B:13:37:94:C0:F9:E0:B4:38:D3:D6:44:5F
X509v3 Authority Key Identifier:
keyid:2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9b:cc:36:62:5f:68:a6:de:27:33:b6:08:e6:f3:7d:c7:cb:
14:55:65:5a:f6:35:a0:3c:a2:79:f8:9a:b5:f2:1e:a7:54:b8:
d1:48:56:cd:db:1b:0c:bb:ed:bc:ba:c8:e4:34:6c:c2:d1:ca:
3c:c4:75:2e:82:6f:e5:29:7f:66:65:ab:a6:9d:35:41:08:f0:
7b:7e:4d:49:9b:72:1d:5d:d0:bb:cd:a5:4c:3c:a6:dd:10:9f:
b0:08:3a:76:73:92:d1:67:19:99:d4:1e:86:f0:72:7d:56:f2:
8e:cc:0d:3a:9d:62:3b:d5:04:6e:bb:50:0a:4b:7f:af:7f:00:
42:24:3d:96:28:00:e4:89:23:d1:cb:cf:e9:2e:c8:f3:70:99:
c5:0f:d8:6e:88:60:da:39:25:6a:8c:48:51:8c:fa:47:54:70:
dc:05:82:9c:e2:0c:ee:78:82:d2:b2:15:68:71:99:7f:30:db:
e7:2b:e1:bd:84:ce:23:32:44:55:37:d2:a7:0a:da:4d:4e:4b:
e2:1d:a7:4e:b4:e6:98:a2:f0:10:90:73:08:83:c7:c4:c0:a2:
f4:ce:b5:d7:95:37:53:6a:8c:49:98:07:d9:5a:59:5a:6a:50:
8d:1f:63:4c:49:7b:87:85:a8:e4:c1:25:66:77:4e:80:24:a6:
70:d3:3b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:38:36 2025 by rpki-client