Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
File: lKTi_J7qzc9bD1CrkyhM07CUIXE.mft (raw, json)
Hash identifier: O5OQnpCXcPlAStaxUtCRo/Nev0xTZfSnb+cj1HnArjk=
Subject key identifier: BC:59:07:C5:DC:CC:49:41:A9:20:35:4B:1E:12:2C:9A:C5:8B:07:3F
Authority key identifier: 94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71
Certificate issuer: /CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
Certificate serial: 019653122DD2001681435D20965DB53E3B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
Manifest number: 0CBC
Signing time: Sun 20 Apr 2025 12:00:22 +0000
Manifest this update: Sun 20 Apr 2025 12:00:22 +0000
Manifest next update: Mon 21 Apr 2025 12:00:22 +0000
Files and hashes: 1: lKTi_J7qzc9bD1CrkyhM07CUIXE.crl (hash: Ezri+LjMWCAkS1awI4XLeWB/ErPI4m5rcWq30BiB4O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:2d:d2:00:16:81:43:5d:20:96:5d:b5:3e:3b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a4e2fc9eeacdcf5b0f50ab93284cd3b0942171
Validity
Not Before: Apr 20 12:00:22 2025 GMT
Not After : Apr 21 12:00:22 2025 GMT
Subject: CN=bc5907c5dccc4941a920354b1e122c9ac58b073f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:c4:66:25:ca:2d:70:dd:e6:6c:9d:a4:90:
d3:db:e4:aa:36:01:9a:3c:33:45:d5:2d:46:1e:a6:
3d:56:78:dc:cf:62:2c:64:f2:60:5e:c2:7a:84:eb:
a0:38:10:6a:c9:3d:19:7a:38:15:00:cf:34:4b:07:
a2:7c:e7:dc:2a:cc:78:4f:41:36:db:ae:f6:f7:4c:
b5:3e:ce:05:f2:85:36:7b:59:8d:3a:5c:85:59:60:
07:5c:1f:d3:c2:ed:eb:83:d4:cc:e0:bd:90:1c:e7:
03:58:c6:1d:23:8a:75:c3:47:a5:b5:29:13:97:bf:
2c:b0:95:28:49:3b:9d:84:e3:84:9d:a8:8b:81:b5:
96:b0:58:1a:bb:ae:ac:af:55:e8:ae:72:8b:5f:88:
2b:14:7f:cf:ef:c8:28:6c:d3:f3:09:53:5d:d7:3f:
03:20:a1:90:ce:f2:55:3e:f3:c2:32:f2:c7:40:79:
66:14:54:d9:74:3f:33:c2:90:e4:63:51:ff:8a:14:
f2:85:0f:63:8b:51:77:fb:33:e8:7e:2f:2a:f1:60:
37:93:b4:0f:25:a0:97:63:00:fd:35:78:02:18:0e:
6f:6c:a0:03:0b:09:fc:30:0a:62:63:27:40:85:68:
1d:5b:79:25:ba:55:04:4a:8e:8e:ee:16:60:8a:7c:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:59:07:C5:DC:CC:49:41:A9:20:35:4B:1E:12:2C:9A:C5:8B:07:3F
X509v3 Authority Key Identifier:
keyid:94:A4:E2:FC:9E:EA:CD:CF:5B:0F:50:AB:93:28:4C:D3:B0:94:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKTi_J7qzc9bD1CrkyhM07CUIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3ff7a7-27cb-4072-b33b-0248d6afd63f/1/lKTi_J7qzc9bD1CrkyhM07CUIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2c:46:dd:e3:4a:fb:ee:68:f7:c4:d7:1e:7f:4f:f8:d6:09:
ef:39:9b:20:f7:37:d5:6f:07:f3:b5:4a:0e:bb:0b:ef:43:db:
66:58:cc:31:27:9a:43:58:fd:32:1e:66:2f:fe:06:06:b2:4c:
95:d3:ad:b9:98:25:75:c8:0f:02:d7:4a:a5:68:d6:b5:dc:42:
dc:f1:55:dc:03:36:24:2a:a6:f0:af:d5:01:a6:ea:fe:1d:15:
17:44:31:08:b5:cc:ea:05:46:bf:af:8e:3f:05:0d:40:92:e6:
01:6d:a6:47:6c:bf:97:82:91:2b:2d:34:b3:5f:ba:b6:a7:63:
da:37:c1:d1:78:a4:43:69:cc:f9:c2:68:12:2b:ee:f9:2c:67:
34:9b:fc:dd:65:6f:35:44:05:45:1f:7a:ba:3d:c0:8f:b8:c5:
fe:b4:d3:71:83:0b:88:0f:e6:8d:88:6e:71:2b:00:f3:ba:df:
8e:9c:ed:6d:89:4d:07:d4:8a:15:11:0a:cd:ea:97:50:cc:db:
1b:3c:07:7d:c3:ec:a6:d3:26:f4:49:e3:1f:a1:55:a1:31:99:
c9:f3:91:08:01:96:34:19:52:cd:9f:18:2d:85:0a:81:1a:a4:
1b:27:e0:41:47:09:b4:dd:5b:62:dd:45:63:7b:d2:b7:ef:ae:
c9:f6:c6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:15:41 2025 by rpki-client