Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
File: LRGXVPwU_-eWimUWvUm9slYzuIc.mft (raw, json)
Hash identifier: smmZe4M0satXXuIJQfOG9LcgcOgCVjoW1q5aYjWbcnc=
Subject key identifier: E4:BF:D7:71:16:FE:65:5C:E4:F7:7F:F0:C6:20:3F:95:DE:69:98:BD
Authority key identifier: 2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87
Certificate issuer: /CN=2d119754fc14ffe7968a6516bd49bdb25633b887
Certificate serial: 01958C606EE0AA571B9D0792B6C93CF45948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
Manifest number: 0E51
Signing time: Wed 12 Mar 2025 22:01:24 +0000
Manifest this update: Wed 12 Mar 2025 22:01:24 +0000
Manifest next update: Thu 13 Mar 2025 22:01:24 +0000
Files and hashes: 1: LRGXVPwU_-eWimUWvUm9slYzuIc.crl (hash: b6ZVeahd/2jTQtQ+kDheAdPl8MLirMe/X8kY3x8ajwg=)
2: Yq8p-Zl2UZI4Tb-nuCgzMSOT2M4.roa (hash: nZW2inX60+r3Vn2H9HqAa0liDQDWLVr6X/Z09+vg9g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:6e:e0:aa:57:1b:9d:07:92:b6:c9:3c:f4:59:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d119754fc14ffe7968a6516bd49bdb25633b887
Validity
Not Before: Mar 12 22:01:24 2025 GMT
Not After : Mar 13 22:01:24 2025 GMT
Subject: CN=e4bfd77116fe655ce4f77ff0c6203f95de6998bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:a2:79:90:53:b8:17:29:a8:1f:a5:de:41:
f7:1a:b5:d6:28:4a:f4:f7:e9:f7:32:7e:24:e2:74:
cc:2a:99:27:7a:9d:3f:44:a9:61:0e:d1:e0:3c:6c:
85:a7:a9:1c:c0:c7:a1:89:50:41:8b:3d:d3:02:26:
c0:fa:7a:df:be:e3:e3:33:00:c8:19:c5:b7:7c:9e:
c7:eb:48:02:0d:26:e2:58:5a:61:20:6e:d3:94:ce:
c3:25:57:5b:bc:60:29:5e:e8:da:c4:cf:97:b0:7d:
c8:f9:3d:33:8a:87:53:0c:93:5c:42:b2:0a:c7:d9:
26:28:b0:e1:4a:67:12:8b:d8:25:0a:f1:0c:fc:c2:
08:3c:99:b5:67:43:2f:1c:0f:b0:95:1b:a8:17:44:
a5:f3:09:f6:28:7c:9c:a6:71:93:45:b3:1c:64:11:
25:c8:58:d7:a5:3e:25:b2:1c:be:fc:b4:3d:5d:4a:
a6:65:ba:28:48:6c:ce:92:e4:d8:94:9c:a4:39:2b:
c3:46:94:68:c9:57:3c:23:8b:cd:17:38:7f:0e:78:
fe:8b:11:37:2a:3e:f1:af:6f:73:2b:ce:ac:e8:1e:
ee:77:72:e3:cd:48:eb:00:63:c6:04:c6:1f:18:31:
b1:31:1e:86:f2:d1:08:40:aa:e8:4c:cb:fe:75:f5:
2b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BF:D7:71:16:FE:65:5C:E4:F7:7F:F0:C6:20:3F:95:DE:69:98:BD
X509v3 Authority Key Identifier:
keyid:2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f9:85:5e:df:58:43:af:94:08:d8:3d:3a:30:e3:38:0b:37:
83:66:29:80:d3:85:7b:c9:20:1f:9a:cb:08:d3:81:71:f9:c7:
43:d0:04:2c:bb:e4:43:20:3b:f7:99:a1:57:7b:a3:b9:46:7b:
03:47:17:d1:7f:ac:ae:04:14:c9:17:ed:1e:4a:59:f7:98:fd:
34:5d:38:f9:79:b5:ac:15:7a:df:94:ec:53:e6:fe:e4:a6:a3:
bc:a9:b7:d2:8a:d9:a5:75:6b:ce:77:8e:50:f3:cf:1f:84:af:
ab:5e:6d:71:eb:a0:98:06:6f:7a:bb:4a:86:0d:5e:ec:c8:9d:
e6:0c:b4:50:16:ee:3a:4b:fa:4e:ec:90:8c:7d:af:17:f2:f2:
82:b9:8d:d1:d9:99:9a:51:5e:c9:e3:95:cd:97:43:0a:c6:08:
7f:17:20:38:26:10:91:b7:ba:7f:0f:43:3c:4c:3c:58:f4:5d:
0c:3a:46:8d:da:53:51:2d:a2:57:dd:00:c0:13:67:91:6f:e4:
f1:da:63:34:70:94:10:96:3b:07:02:ac:74:db:38:e6:13:cd:
34:33:c2:41:af:05:95:e4:70:13:9c:c6:17:bc:8f:78:91:4d:
f5:bc:74:59:1f:be:46:fe:2a:ab:20:0d:87:bc:27:d7:27:91:
c8:57:ac:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:18 2025 by rpki-client