Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
File: lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft (raw, json)
Hash identifier: gK++EC8eRXgbCnFGTcvLGr1LiCd83X+YXabfIWY0pVs=
Subject key identifier: 45:E3:6B:D5:A8:FE:B4:C0:0E:62:A5:2D:88:48:A2:1C:F1:02:EB:44
Authority key identifier: 96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
Certificate issuer: /CN=960e68c8389b09dc345464a400af276568e7f96a
Certificate serial: 019752D8CD8B76AD8B5B5BB4D058045C5C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
Manifest number: 0E03
Signing time: Mon 09 Jun 2025 04:00:29 +0000
Manifest this update: Mon 09 Jun 2025 04:00:29 +0000
Manifest next update: Tue 10 Jun 2025 04:00:29 +0000
Files and hashes: 1: lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl (hash: TyWzIupkyJPYlB6DxEguB1OYkefkjUPRxE0zMQkxOg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d8:cd:8b:76:ad:8b:5b:5b:b4:d0:58:04:5c:5c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960e68c8389b09dc345464a400af276568e7f96a
Validity
Not Before: Jun 9 04:00:29 2025 GMT
Not After : Jun 10 04:00:29 2025 GMT
Subject: CN=45e36bd5a8feb4c00e62a52d8848a21cf102eb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:88:fc:86:23:46:60:e3:07:d4:c3:e5:30:
b7:80:c6:be:0c:89:ab:bb:78:b1:d9:71:49:9b:6f:
79:1b:6d:16:18:ed:91:f0:0c:4b:38:35:64:03:a2:
0a:df:4b:13:ae:2f:d0:a8:bf:ec:07:31:30:59:79:
7a:69:e9:37:95:4a:da:8c:76:a6:05:77:ee:b3:1d:
62:45:df:01:46:81:84:be:07:b3:ea:d9:a5:ce:a3:
22:62:1a:50:cf:52:b4:16:2d:75:fc:60:26:c7:af:
7b:db:39:87:3c:0b:9d:9b:54:14:a1:a8:52:16:73:
d7:0d:19:68:86:83:e0:f4:3c:54:54:21:9d:9a:73:
10:87:61:2c:27:4a:ab:fe:e2:aa:3c:6c:6c:b4:07:
ec:24:b3:77:20:7b:a6:04:6c:ae:e1:83:05:eb:d1:
e5:92:dd:81:cf:fd:21:9f:f7:69:90:96:53:68:57:
3c:b9:8c:73:ca:ca:f2:f7:50:cd:f1:a0:6a:8b:cb:
70:24:32:c7:d4:b7:cf:61:f5:d3:d2:01:55:cd:55:
87:e2:ce:a9:d7:1c:65:9f:1a:86:a7:f3:b1:da:2d:
5b:77:1e:e1:c2:ae:a4:ea:6e:f2:3f:6d:0f:52:23:
b5:2f:d6:ab:aa:3b:75:b3:ea:c9:30:d1:fd:0b:36:
bf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E3:6B:D5:A8:FE:B4:C0:0E:62:A5:2D:88:48:A2:1C:F1:02:EB:44
X509v3 Authority Key Identifier:
keyid:96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:46:6f:c0:8b:2e:f3:02:ea:63:2d:3c:7d:4f:74:19:97:b9:
3b:73:1d:a7:6d:f5:e0:ad:20:2e:49:46:58:bc:38:e7:b5:ec:
4c:ba:d6:0b:f6:e8:b3:e6:8c:f4:de:c9:fe:58:56:2f:af:4e:
5c:b2:fd:6a:33:8b:5e:c3:4c:f3:df:a3:92:c0:13:44:28:7d:
4a:68:d5:5c:7e:0d:e5:a1:d0:0c:6d:b2:8b:60:6a:e3:c0:6f:
cb:ce:29:cd:9d:89:71:b5:2e:76:b0:4a:c9:9d:bd:2b:44:2b:
60:bc:81:50:50:b7:54:f0:9d:c8:5f:6f:93:97:f3:5c:56:2a:
a1:52:a8:5f:e3:35:56:81:5f:d7:c4:2d:5a:38:ab:15:0d:a3:
89:17:e0:a3:3b:2e:de:15:8f:25:f6:e7:39:c2:6b:cc:90:6b:
f8:cf:84:51:60:62:37:bd:2c:c9:a4:49:e2:23:64:74:77:d1:
f3:d1:a1:f8:79:7b:47:b1:54:f9:c0:f0:c8:4e:be:b3:18:bd:
98:96:01:68:78:56:8f:3a:ac:e6:47:36:ed:b2:4b:c1:d8:0f:
80:38:43:6c:83:a6:17:b6:1e:ff:75:f2:f3:d6:10:97:ae:57:
b2:64:21:b8:10:26:4b:3e:2b:92:3e:33:04:3f:b9:7b:f5:5f:
66:c6:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:22:06 2025 by rpki-client