Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
File: lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft (raw, json)
Hash identifier: tNM96IjrPsTYQwkaEhQjkrX1/WPuaU0KK9ylgOeeZkY=
Subject key identifier: F9:6B:71:A7:5F:95:F4:4C:EE:AE:33:2E:54:16:F9:CE:1E:5A:04:EA
Authority key identifier: 95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C
Certificate issuer: /CN=954cf721c08c8e9bc5242d56196677217350455c
Certificate serial: 01964F6D3CF1DCF1D7ABBF2CC0F715DAA528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
Manifest number: 051A
Signing time: Sat 19 Apr 2025 19:01:21 +0000
Manifest this update: Sat 19 Apr 2025 19:01:21 +0000
Manifest next update: Sun 20 Apr 2025 19:01:21 +0000
Files and hashes: 1: lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl (hash: 2hWAb1OYk6zp3fub7c5jAuXbEIRKtXSTcAO9bec0mfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:3c:f1:dc:f1:d7:ab:bf:2c:c0:f7:15:da:a5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954cf721c08c8e9bc5242d56196677217350455c
Validity
Not Before: Apr 19 19:01:21 2025 GMT
Not After : Apr 20 19:01:21 2025 GMT
Subject: CN=f96b71a75f95f44ceeae332e5416f9ce1e5a04ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ad:f1:cc:64:52:30:3c:3a:31:7a:c5:7b:46:
8d:cb:8d:d4:cd:91:70:21:05:61:56:38:3e:41:7b:
31:c5:03:ec:a4:34:12:79:c8:ec:2b:52:8a:36:05:
11:27:f7:4c:0b:d1:76:c7:69:7c:48:ab:4b:28:b0:
43:38:53:cb:83:22:16:8f:88:b3:db:b8:ad:4b:e5:
ae:79:80:e7:7c:14:f0:63:06:ca:ea:83:8d:9b:7f:
2a:af:64:8a:9c:4b:f8:f7:c3:30:08:d1:e0:50:de:
05:26:67:14:60:4b:76:66:75:12:73:bb:3e:ef:5c:
34:63:61:f7:ac:e2:70:e5:e6:5a:02:74:16:87:56:
c6:d9:a5:d1:c9:fb:ca:46:5d:36:41:68:9b:ae:1f:
d7:04:ab:61:64:c3:ef:3f:38:74:86:84:d6:75:51:
e6:1a:a1:49:20:96:9a:c3:bc:bd:a4:a6:e6:1d:00:
08:87:f0:5d:8a:da:f0:13:90:4c:d6:8c:19:c0:84:
05:aa:85:56:14:81:3f:7f:12:06:01:9d:60:09:b1:
88:43:e3:28:ca:16:24:d7:9e:07:b5:e4:ca:29:5d:
18:ec:0b:5a:f7:a8:95:4f:8b:89:b2:1d:59:11:b8:
21:a3:e3:ee:bc:d4:ea:6a:c9:b9:31:cf:e6:a3:d8:
94:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6B:71:A7:5F:95:F4:4C:EE:AE:33:2E:54:16:F9:CE:1E:5A:04:EA
X509v3 Authority Key Identifier:
keyid:95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c2:c8:1b:df:0a:0f:f8:ab:6b:a9:ac:a5:d5:f9:5e:c8:d2:
97:17:83:9a:ac:9c:46:4d:9a:4c:d6:40:36:a2:4c:8c:03:6f:
1b:c9:a5:9b:c8:35:fa:69:23:f1:9f:45:73:62:be:7a:e4:e7:
a8:91:93:13:36:d9:53:7f:11:50:bb:e0:e0:86:b5:73:88:e9:
d4:b7:2d:3f:f7:e4:50:cb:d9:7d:cf:4b:53:65:c7:3e:55:ca:
07:0d:9e:e4:0c:0b:6b:5d:ef:92:6b:a8:d9:e4:b1:dd:bc:81:
ec:0d:4b:13:dc:7a:e5:0e:0a:91:3b:2c:a6:43:02:b8:a4:42:
78:01:e7:8e:fe:75:68:42:1c:6a:81:39:b1:d8:c1:60:4c:98:
b3:05:e1:73:2b:4c:67:dd:24:24:6a:9a:bd:c5:93:07:79:ef:
50:0b:51:0e:0e:a5:44:a0:9b:76:0e:6b:05:c9:3d:25:6f:84:
2e:0e:e9:d1:c7:41:22:2b:a1:38:82:dc:50:01:fd:e7:9b:6a:
28:46:2c:a5:a1:74:09:35:71:29:d7:84:c2:49:b6:2e:77:a8:
18:1a:65:1b:ad:70:d4:48:96:d9:63:bc:aa:6e:93:d1:fc:90:
da:66:75:66:9e:08:16:1b:74:32:70:af:c6:b5:e4:c1:51:59:
77:ba:8e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:58:53 2025 by rpki-client