Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
File: llxaucCRqzxFBQaKkv_LAZhJqng.mft (raw, json)
Hash identifier: v9s7gz9aqgQ+CEWW/4uD4QVnsQBMR9+rt4VBS/QynyU=
Subject key identifier: 94:96:69:E6:23:49:49:92:C0:4A:F6:91:C5:D7:2F:AD:FF:0D:5F:A4
Authority key identifier: 96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
Certificate issuer: /CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Certificate serial: 01964B8FE02C9F4EC440DFCCBC1D1EA87487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
Manifest number: 145E
Signing time: Sat 19 Apr 2025 01:00:42 +0000
Manifest this update: Sat 19 Apr 2025 01:00:42 +0000
Manifest next update: Sun 20 Apr 2025 01:00:42 +0000
Files and hashes: 1: llxaucCRqzxFBQaKkv_LAZhJqng.crl (hash: PSrzbq9YEelnn15lNp0KsNhmaneXkW1OD9Ef/H74qlk=)
2: rHF1daiHavMGYa0v18HeRyOPIy4.roa (hash: 2UkzQwhMHZ2kO8ZqSfqH6Gvo+L0wbAUFPUcHU8Sig88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:8f:e0:2c:9f:4e:c4:40:df:cc:bc:1d:1e:a8:74:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965c5ab9c091ab3c4505068a92ffcb019849aa78
Validity
Not Before: Apr 19 01:00:42 2025 GMT
Not After : Apr 20 01:00:42 2025 GMT
Subject: CN=949669e623494992c04af691c5d72fadff0d5fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:79:d1:8f:ff:19:8a:8b:79:d3:72:78:e8:
5d:43:35:c3:53:14:8b:f1:35:e8:cc:b4:8e:ce:57:
9f:2c:de:e9:4b:05:b4:42:a3:1b:aa:26:76:71:16:
ae:05:9c:73:31:5f:34:6a:98:56:6f:8a:43:d9:e0:
95:94:f0:07:a0:d4:b0:ae:64:c1:49:36:f7:04:23:
d0:d6:ce:d1:b1:da:fe:aa:01:08:51:e1:0e:7e:c7:
4c:8e:d5:eb:31:1d:e6:d1:85:51:ee:f5:7e:02:01:
3d:08:ea:4c:58:17:77:cf:14:b5:06:50:90:28:85:
a5:53:e1:b0:cb:04:41:e1:d4:b1:9c:a2:30:2e:7a:
f6:a3:ef:09:46:df:30:d0:bf:a0:97:c7:67:52:1e:
3f:77:ef:6b:c4:37:1c:12:45:a0:1f:ac:b9:83:5a:
83:b8:73:a2:b7:6e:9b:f7:2e:35:b9:5b:2a:d9:e6:
a0:ee:d3:02:b1:73:47:b4:23:8c:fe:ef:2d:18:79:
72:db:fd:37:bf:ff:84:be:a1:88:09:40:aa:1b:98:
48:87:be:86:5a:c9:aa:0b:19:b8:73:48:2e:30:ba:
c8:29:89:8b:ed:42:cd:08:4b:67:7c:91:80:8e:04:
b9:49:25:ae:08:13:87:0a:ff:5a:d4:ff:70:d1:74:
db:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:96:69:E6:23:49:49:92:C0:4A:F6:91:C5:D7:2F:AD:FF:0D:5F:A4
X509v3 Authority Key Identifier:
keyid:96:5C:5A:B9:C0:91:AB:3C:45:05:06:8A:92:FF:CB:01:98:49:AA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llxaucCRqzxFBQaKkv_LAZhJqng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c26261-e8ef-4fb7-8722-0ab475f9a9a3/1/llxaucCRqzxFBQaKkv_LAZhJqng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a1:62:df:4d:95:c1:9b:d6:cd:4e:44:8b:a2:e2:79:a8:9b:
1c:b6:d3:8d:91:f5:25:1b:66:a4:9e:39:42:2d:a8:99:1f:3d:
63:92:a6:1d:c7:d4:d4:36:ba:16:f5:bf:1e:7c:dc:7e:77:61:
77:7d:6e:09:b6:bf:dc:ab:4e:14:c4:00:61:c8:b0:f4:ce:2c:
87:b0:e9:cc:6c:2a:17:f4:7a:ae:d3:0b:b7:a5:50:52:3e:49:
03:88:45:7d:d9:42:60:36:96:3b:65:d3:5a:2d:9a:89:35:92:
cf:6a:4f:84:d9:c2:9d:17:2f:00:ee:df:3e:7d:c6:68:0b:5e:
d0:9b:74:9a:54:1c:8b:17:ad:10:0b:08:8c:3e:98:8d:c7:60:
db:53:e9:1e:50:dc:85:97:6b:1a:9b:6f:c1:31:6f:1b:db:47:
03:6d:c0:a1:ce:bc:e4:07:8d:43:d2:6c:6f:90:32:ec:5f:b8:
34:3b:c9:e2:8f:0e:c2:64:7f:94:87:ab:a5:c3:a4:c6:df:31:
69:16:a1:1d:72:01:2a:69:90:f3:05:58:08:26:d5:41:78:fb:
f1:c7:ed:a2:f3:0f:18:24:6a:24:9f:ec:30:f6:bc:78:99:77:
51:76:d6:b7:b5:87:d5:3a:ea:27:1f:2b:0d:6f:50:1f:1c:5f:
4f:3a:ef:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:16:58 2025 by rpki-client