Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
File: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft (raw, json)
Hash identifier: BuwM6L2XOS199d0wug/55mBCVDRKN8ICi0YYvKM6mWg=
Subject key identifier: 3A:26:26:DC:0B:44:0A:3A:8D:82:77:AA:4E:E6:34:7C:A5:42:39:43
Authority key identifier: 2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39
Certificate issuer: /CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
Certificate serial: 01965011D8D0A96BABD228EBDFF9BE2FFBFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
Manifest number: 0FF9
Signing time: Sat 19 Apr 2025 22:01:08 +0000
Manifest this update: Sat 19 Apr 2025 22:01:08 +0000
Manifest next update: Sun 20 Apr 2025 22:01:08 +0000
Files and hashes: 1: 6HQFKIaH-doszFtkd3GkDQ1Wxaw.roa (hash: 1OXXKiYa8WQkCMkAZRnTwQi7yeY/wqvng1D/8Z8Ivmg=)
2: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl (hash: vkktgcCeZA/RtpHseM7Ex1swX9FVwaR0J2zWezSvCxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:d8:d0:a9:6b:ab:d2:28:eb:df:f9:be:2f:fb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
Validity
Not Before: Apr 19 22:01:08 2025 GMT
Not After : Apr 20 22:01:08 2025 GMT
Subject: CN=3a2626dc0b440a3a8d8277aa4ee6347ca5423943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:31:92:9c:10:71:13:22:10:f6:19:d2:7f:
74:d1:06:4b:78:ce:51:46:79:7b:be:b3:47:07:19:
9f:3a:51:bc:69:f9:07:a3:ec:62:8a:77:57:e6:f1:
b4:5f:23:27:34:24:29:c5:e9:22:02:16:84:86:db:
5c:55:b7:9e:b8:90:bd:7c:af:81:be:eb:7f:89:f3:
dc:db:c1:27:21:c8:4e:4e:a8:71:13:ef:9c:8e:ab:
31:df:d0:ff:b1:b3:16:3f:3f:b0:a3:d6:cb:35:db:
1a:0a:fb:68:f1:c5:9a:67:92:ac:62:53:82:55:b8:
68:db:26:a6:b9:8a:ba:9d:11:11:1c:44:12:4c:7e:
b7:7e:22:31:1c:35:b1:f9:dd:34:5e:bd:da:ec:f3:
ed:b4:02:91:13:4a:c5:2f:5d:43:b3:09:53:80:fd:
c6:d0:3f:6a:bb:9f:3a:3c:e7:0c:ea:0d:d7:30:09:
b5:b5:49:49:d9:e5:09:61:35:56:2a:6a:bb:71:fe:
cc:bc:dc:93:2f:00:54:66:59:94:b9:6e:c4:c8:a8:
00:42:68:16:7f:9a:07:7f:95:0c:13:ae:96:f2:cf:
ea:ef:02:8d:32:e5:28:c7:06:db:07:36:87:83:b9:
8c:27:80:e5:0d:c4:7d:ae:84:a2:42:bd:50:ef:3a:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:26:26:DC:0B:44:0A:3A:8D:82:77:AA:4E:E6:34:7C:A5:42:39:43
X509v3 Authority Key Identifier:
keyid:2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bf:38:2a:e6:32:0d:5d:bc:cc:bd:a8:30:93:b8:1a:cf:eb:
64:89:6d:19:db:29:5b:21:0f:3a:3e:1b:cd:d0:59:b0:3e:bb:
64:9d:6b:75:bf:65:15:8c:58:03:41:36:e7:76:10:4b:a9:15:
a8:ce:8f:76:f1:3b:3e:e9:d5:8e:66:92:f2:bf:70:af:10:f4:
87:47:16:fa:c3:01:64:d2:a1:1f:81:7c:74:1d:cd:7d:84:a1:
1a:08:da:63:5a:24:5d:ec:72:44:9e:78:87:4c:0e:f4:9f:bd:
d3:00:f6:92:5b:54:50:e1:a7:5d:ea:89:de:37:f3:07:db:96:
f4:68:00:9c:ec:94:77:42:c5:e5:0e:cd:c7:8c:f1:f6:ad:d7:
40:08:4b:96:76:14:df:6c:03:dc:13:d1:9b:f1:65:b1:2b:5d:
25:2f:71:81:79:0b:ce:a3:34:47:e3:45:c1:19:73:e4:57:93:
7b:ba:66:3f:90:59:ab:e8:db:a0:40:84:b6:6a:49:12:59:c6:
d8:79:f9:08:97:55:65:df:5c:fd:40:e6:dd:5b:8a:e1:95:73:
b0:11:96:73:21:b7:f1:66:75:b9:8c:6f:42:dc:40:44:8f:24:
c0:b9:08:76:00:e4:f6:1c:14:3e:3a:44:50:be:de:ff:00:1b:
df:c4:dc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:08 2025 by rpki-client