Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
File: LJl56ji5293KdLe_pzdotXv_wS8.mft (raw, json)
Hash identifier: 0zRBRivFvZUZnOBNOtRTb+EjI9IDH2wewHPQVWy834k=
Subject key identifier: 7B:1F:6C:50:F7:B8:FC:1B:20:C9:53:5E:29:32:52:41:4E:20:E7:5F
Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
Certificate issuer: /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Certificate serial: 0196526D8D3E0975AC0CA1A6F3B44322CABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
Manifest number: 0784
Signing time: Sun 20 Apr 2025 09:00:33 +0000
Manifest this update: Sun 20 Apr 2025 09:00:33 +0000
Manifest next update: Mon 21 Apr 2025 09:00:33 +0000
Files and hashes: 1: LJl56ji5293KdLe_pzdotXv_wS8.crl (hash: 1cZ0+7ty4TEKNIv1W8RHRVX7SYw69nv/ULlf9dAXx44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:8d:3e:09:75:ac:0c:a1:a6:f3:b4:43:22:ca:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Validity
Not Before: Apr 20 09:00:33 2025 GMT
Not After : Apr 21 09:00:33 2025 GMT
Subject: CN=7b1f6c50f7b8fc1b20c9535e293252414e20e75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f2:83:52:6d:95:c9:8c:0c:e1:de:05:d1:99:
d3:e5:62:ff:71:db:ce:62:be:9f:63:26:7a:ed:be:
b8:52:5a:1d:34:e4:ac:56:26:89:8f:64:ad:ed:0d:
4c:36:2a:f2:4a:89:8a:0d:b5:19:63:34:27:c2:93:
d6:dd:1c:49:0f:f6:33:c6:09:97:15:dc:f9:f9:02:
21:15:2a:72:ba:4c:fa:58:8d:37:90:73:cf:73:5a:
2c:88:7f:97:2b:4a:55:46:db:79:df:b8:7a:c8:00:
3f:53:f6:df:cd:20:27:9f:ce:5b:d1:9c:38:5e:37:
99:84:a4:3c:a4:f2:70:bf:67:b8:73:ba:9e:42:b5:
89:47:2b:cb:52:77:bd:32:fd:76:76:7d:ac:e9:fb:
91:fe:da:56:7e:0a:24:b1:5c:ce:c3:46:40:71:76:
5f:fd:80:f7:4f:f5:be:62:ed:19:29:b6:d0:d6:08:
03:c4:ea:43:93:9f:91:0f:4e:96:bc:7d:28:a5:68:
c2:52:9c:18:ab:dd:88:b2:3a:18:f3:40:13:98:9a:
f0:ff:8d:02:d9:30:ab:32:08:c2:e5:c1:66:b6:f7:
2f:f7:d5:13:33:42:6c:53:cb:2a:f7:30:e3:5d:a1:
65:fb:cb:5a:f0:e1:98:01:1b:c8:2f:ba:ea:d6:a4:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1F:6C:50:F7:B8:FC:1B:20:C9:53:5E:29:32:52:41:4E:20:E7:5F
X509v3 Authority Key Identifier:
keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:a1:af:92:0e:63:c0:69:6b:de:af:e9:53:fa:0d:b7:1f:a0:
d8:ad:53:05:e9:82:d5:1a:5d:14:8a:eb:8d:b2:48:da:c2:ab:
fa:9c:67:10:89:64:67:c4:01:db:08:25:01:1e:51:36:59:1a:
84:4c:07:45:2e:16:9e:ff:e1:ff:2f:64:4b:0c:93:2c:a6:2a:
85:3f:bb:68:79:10:08:98:e7:59:75:09:6b:fa:50:a1:f0:b7:
eb:82:b3:db:e5:77:4d:ac:11:23:53:d3:04:3f:11:28:a6:0b:
75:d9:6b:20:dd:a9:a7:7c:5b:41:c2:92:c2:4b:d8:92:0f:70:
b1:7f:81:79:cd:66:c9:b1:c9:7d:00:38:50:e9:98:4d:6e:58:
29:42:e9:30:3c:49:c0:cc:c3:ec:99:2c:a3:f2:67:e3:78:31:
c8:96:b9:47:14:93:6f:f8:d1:d9:af:ca:2c:ac:fa:8d:90:fd:
5e:b2:42:0f:e2:a1:b4:c8:82:1b:20:5f:5a:1a:27:79:0b:6c:
cc:a2:6e:f4:24:f0:e8:f3:70:ff:eb:08:7f:ae:75:4a:bb:df:
28:d3:c3:74:33:0c:67:59:93:da:a3:14:03:06:ca:35:de:d9:
b0:03:33:60:1a:f8:5d:d0:55:c6:ef:26:12:9e:d1:d0:95:41:
08:3d:68:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:26 2025 by rpki-client