Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
File: LKw-jWOxw6_HxsC_2p1ayBe27m0.mft (raw, json)
Hash identifier: RhfgzNcZ3h8ClthXUGTwRRavHlAJr4sPhsLG8vCzg0g=
Subject key identifier: 20:75:5F:99:6C:1A:8B:CB:9E:5E:85:A5:97:AB:60:60:BC:4F:18:16
Authority key identifier: 2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
Certificate issuer: /CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Certificate serial: 01963F549F4651021082743236D725473072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
Manifest number: 0ECF
Signing time: Wed 16 Apr 2025 16:00:32 +0000
Manifest this update: Wed 16 Apr 2025 16:00:32 +0000
Manifest next update: Thu 17 Apr 2025 16:00:32 +0000
Files and hashes: 1: LKw-jWOxw6_HxsC_2p1ayBe27m0.crl (hash: HrFJCck/oMwMMT7JktEfbNu2AVOT0+EtuXFwKRtvuqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:9f:46:51:02:10:82:74:32:36:d7:25:47:30:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Validity
Not Before: Apr 16 16:00:32 2025 GMT
Not After : Apr 17 16:00:32 2025 GMT
Subject: CN=20755f996c1a8bcb9e5e85a597ab6060bc4f1816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e3:3a:1e:fd:eb:93:f5:df:5f:60:22:2c:b6:
95:a2:8c:b4:eb:87:c9:d1:d8:90:af:4d:3a:a1:67:
08:4a:ff:a2:be:63:16:90:53:43:e5:8a:5b:9c:b7:
83:53:81:5e:5d:2b:9f:38:91:b4:52:82:a9:c3:ce:
5e:bb:52:1f:90:ca:1b:8b:8f:ed:4d:46:2e:82:19:
17:65:75:5d:34:ec:01:04:6d:cf:99:96:b7:c0:6d:
21:21:65:1c:b3:af:45:3f:e8:51:18:85:1d:2e:1d:
e0:4c:36:e8:fc:58:22:cd:6a:5e:1e:6a:42:ca:62:
99:1e:a2:9a:01:bc:49:bf:b2:cf:f3:77:53:49:76:
f9:41:4c:a1:87:1c:d6:b5:8c:dc:f2:50:3e:66:b9:
6a:64:26:01:f5:90:a2:ab:78:7d:c9:83:e4:6e:d5:
fa:5c:d5:12:d4:57:ac:4d:b7:d4:7c:c6:10:2b:67:
a5:82:19:eb:a7:3c:3a:b3:a7:0a:84:95:8e:07:47:
11:90:7f:e5:5b:0f:8f:1a:a5:06:a1:81:ee:99:b0:
9f:ba:1a:c8:21:a8:fb:14:69:06:90:3c:92:74:5a:
91:d8:88:0e:73:13:fe:fd:92:96:fa:e0:53:6f:8f:
f6:8b:a7:cb:d4:b8:9c:69:cd:52:6c:73:b8:8a:44:
63:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:75:5F:99:6C:1A:8B:CB:9E:5E:85:A5:97:AB:60:60:BC:4F:18:16
X509v3 Authority Key Identifier:
keyid:2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:28:76:6e:89:e0:35:60:79:f4:e2:51:b3:db:7f:43:52:4f:
d8:04:28:3c:b1:d0:e6:f0:17:c8:ac:9c:e6:0d:3e:8e:c9:5f:
87:f2:62:89:c7:50:0c:1f:cf:9c:6e:e1:db:85:c3:7e:57:81:
f1:01:ef:b4:a5:65:6b:db:ba:c4:03:a9:95:89:0a:9c:b6:8b:
d5:5a:bd:48:c8:9e:b0:65:63:56:99:91:b4:52:2c:a6:54:41:
c1:ee:f3:6d:99:e6:54:61:cf:f0:ac:30:6d:9b:fb:8f:a6:14:
29:69:b2:51:5c:74:4e:d8:21:0f:d3:27:fc:38:60:ca:4c:cd:
99:16:94:a0:ea:06:40:b7:96:91:58:16:74:5f:06:a7:b8:7b:
25:25:dd:c8:05:e5:81:5e:69:27:10:78:ae:00:36:82:b1:f2:
b6:34:93:f3:ee:65:49:5b:0f:41:94:76:cf:c0:c1:33:29:45:
75:08:69:80:5b:de:f6:a4:85:60:57:ba:e8:84:a5:88:51:6c:
22:21:09:e0:31:64:5b:33:5a:0a:07:e9:72:10:7d:af:24:70:
40:85:76:8b:09:3f:d2:2b:43:e7:17:5f:80:50:25:1e:f5:f5:
b0:65:43:aa:23:d2:8a:ed:37:b5:cd:89:46:c1:9e:29:f8:43:
1c:5e:46:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:40:49 2025 by rpki-client