Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
File: LRGXVPwU_-eWimUWvUm9slYzuIc.mft (raw, json)
Hash identifier: U2nv0s8VpQWbmXDQU3FiK/1Y2VCCR6elARI7hRE7wnI=
Subject key identifier: C2:88:E7:D9:66:EF:22:A4:6F:1D:8A:DD:62:D7:BE:C1:90:70:4C:33
Authority key identifier: 2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87
Certificate issuer: /CN=2d119754fc14ffe7968a6516bd49bdb25633b887
Certificate serial: 01963E0BBB9383335B40B7CDB6420304C12B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
Manifest number: 0EAD
Signing time: Wed 16 Apr 2025 10:01:18 +0000
Manifest this update: Wed 16 Apr 2025 10:01:18 +0000
Manifest next update: Thu 17 Apr 2025 10:01:18 +0000
Files and hashes: 1: LRGXVPwU_-eWimUWvUm9slYzuIc.crl (hash: GKs9s6NdmgZBfgzIdVhZaPGeOSdhwmNovBhqiEzdtVg=)
2: Yq8p-Zl2UZI4Tb-nuCgzMSOT2M4.roa (hash: nZW2inX60+r3Vn2H9HqAa0liDQDWLVr6X/Z09+vg9g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0b:bb:93:83:33:5b:40:b7:cd:b6:42:03:04:c1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d119754fc14ffe7968a6516bd49bdb25633b887
Validity
Not Before: Apr 16 10:01:18 2025 GMT
Not After : Apr 17 10:01:18 2025 GMT
Subject: CN=c288e7d966ef22a46f1d8add62d7bec190704c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:15:ba:72:3e:cd:85:45:6f:25:aa:64:38:
cd:0e:47:0c:08:a5:b3:50:e1:40:ac:a6:e8:28:f5:
85:70:4c:f8:f4:36:8d:06:3d:57:2a:40:39:1b:59:
6b:e3:d9:a9:94:18:a6:99:46:0f:ba:a8:f3:7a:aa:
57:bf:c4:72:36:66:37:81:45:c8:d4:8c:f4:94:ec:
61:30:13:7a:c5:ca:6b:fe:0f:fb:00:c1:ae:9c:78:
9e:ef:f1:f2:ba:7d:56:bf:36:26:bf:1d:b3:06:bd:
a0:82:9f:f4:d8:a2:2d:ef:82:e6:9b:67:76:b0:3d:
16:3e:a0:5a:91:68:e5:ab:13:dc:53:1b:21:f8:46:
80:d5:12:d0:bb:47:4d:b8:78:46:f9:6b:9c:3a:9d:
f7:9d:aa:18:8f:3d:6f:68:af:5d:d8:58:58:0f:d0:
49:5c:fc:46:34:1e:84:9f:43:c6:ee:7e:6e:e5:d7:
85:14:94:02:04:c5:54:1c:fb:e5:0e:73:a5:20:39:
57:bc:a0:81:44:fa:dd:3d:06:0e:a2:b7:7c:66:c5:
ea:b3:c0:00:a4:5d:db:d7:ba:8f:cd:d4:e3:b9:14:
29:7d:a7:6d:b8:bd:f5:f5:45:d4:1f:3d:3e:fa:da:
1d:0d:79:84:70:e2:25:cc:78:0f:ab:5b:77:dd:2d:
b9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:88:E7:D9:66:EF:22:A4:6F:1D:8A:DD:62:D7:BE:C1:90:70:4C:33
X509v3 Authority Key Identifier:
keyid:2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1e:a9:4d:74:41:4e:fc:f0:44:c7:23:98:a2:41:e0:6c:38:
10:84:16:07:4b:38:e9:3c:29:4e:32:d1:a2:ff:a8:01:69:18:
ef:08:61:9f:9c:7b:0b:c3:01:93:d6:94:52:d1:53:51:a7:7c:
39:7a:2f:49:a9:21:c9:f4:f1:46:94:37:99:a7:53:3b:28:54:
5d:c5:04:65:9b:e0:f6:1a:81:46:33:6b:8e:91:0c:76:09:a7:
9a:04:b0:11:5f:c7:c3:05:23:d8:08:44:26:b9:2f:e1:2f:b2:
67:37:de:6f:96:12:7e:3c:71:dd:20:d3:e6:73:ef:64:b9:25:
83:dd:b8:f8:24:d9:8d:43:0b:79:30:dd:61:ce:58:7f:c0:fb:
7b:08:d6:1e:d1:7f:ce:b7:f7:4c:a6:36:5e:fc:27:d0:db:f7:
96:f0:4e:95:df:d1:69:aa:43:dd:55:d8:d9:e5:ea:dc:dd:d7:
ee:ef:0a:96:f8:46:5d:12:da:75:e1:09:b3:25:a5:62:54:8e:
ff:9d:d1:ce:40:af:f5:f1:61:df:a9:97:51:c2:7c:4f:85:60:
04:da:51:28:23:aa:19:21:3e:bf:52:f6:21:e8:14:b2:9a:14:
3f:53:a0:ad:01:4c:2d:52:f1:d8:3d:db:2e:60:4d:bb:c2:08:
6c:de:74:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:23:26 2025 by rpki-client