Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
File: lowsVdyOuZe_WRIdTC_9VESiLi0.mft (raw, json)
Hash identifier: ZijqgRBzPi6LXt1lx2AenL2C+F75wB5XR/dyJQcMtQY=
Subject key identifier: 87:8E:C6:18:80:A5:3D:0C:C9:D2:8D:74:17:BB:3F:16:6A:3E:FD:BE
Authority key identifier: 96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
Certificate issuer: /CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Certificate serial: 01964FDA86C14BDC54CE1030046D7A45A3E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 21:00:43 +0000
Manifest this update: Sat 19 Apr 2025 21:00:43 +0000
Manifest next update: Sun 20 Apr 2025 21:00:43 +0000
Files and hashes: 1: lowsVdyOuZe_WRIdTC_9VESiLi0.crl (hash: ZZPmqI60bT5j9cPFogcWfdJ1D0XhBtT0oMSAW650Rzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:86:c1:4b:dc:54:ce:10:30:04:6d:7a:45:a3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Validity
Not Before: Apr 19 21:00:43 2025 GMT
Not After : Apr 20 21:00:43 2025 GMT
Subject: CN=878ec61880a53d0cc9d28d7417bb3f166a3efdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bf:a4:a9:31:f4:69:c1:ea:6c:d8:6f:29:99:
55:dd:a9:56:89:3e:75:d7:7d:41:ea:56:16:f7:38:
83:53:c7:9a:3d:67:12:b2:1f:fa:d1:08:a3:7b:6f:
57:a5:34:a8:e8:72:df:85:34:26:dd:10:14:a2:5f:
30:a8:44:e5:c5:d9:2d:c1:74:18:b5:fa:45:0a:94:
b2:e5:9d:76:80:a9:d8:c4:a1:75:94:b8:6a:48:f0:
6c:ad:d7:34:b4:9e:47:19:ba:dc:f2:7d:1b:62:2a:
ec:0c:07:d1:5f:53:a3:b1:2e:93:d8:57:aa:b3:09:
19:1d:a8:9b:37:a8:2a:4e:99:1e:b8:95:fd:ed:68:
26:9e:6a:23:0c:0f:ae:db:74:d5:d0:58:e6:98:4e:
29:17:93:40:58:2e:f1:a7:c0:6f:7c:96:d8:13:64:
2a:4b:f2:42:68:24:26:48:1c:6e:9b:c2:dd:9b:52:
86:ee:79:80:3e:a7:dd:89:08:05:19:bc:1b:8d:d0:
63:22:10:ba:66:64:89:5e:7d:7c:86:98:22:94:64:
c2:43:ab:19:68:d9:12:23:27:b5:25:3a:d0:57:69:
5f:b2:88:d7:fa:2d:28:6a:63:25:63:2b:46:bf:b8:
4e:e8:6c:a9:9c:cf:08:b8:82:f1:e2:62:12:2c:c2:
48:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8E:C6:18:80:A5:3D:0C:C9:D2:8D:74:17:BB:3F:16:6A:3E:FD:BE
X509v3 Authority Key Identifier:
keyid:96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:97:7c:4c:4c:b1:3c:0a:18:0a:a4:be:46:d9:e0:7c:91:07:
56:4e:1b:40:d0:21:ea:44:95:83:fa:e0:24:12:aa:2d:6d:e4:
10:87:95:f7:e5:ed:82:ce:14:8b:a9:73:de:b9:7c:19:56:f7:
e4:83:97:b9:ba:a4:48:f8:4b:0a:2a:8a:c6:11:b7:d0:c5:46:
c5:de:5e:3d:96:c7:b8:c3:d3:db:da:9f:0c:6a:9f:ad:9b:0f:
8b:79:55:32:44:a6:0c:35:da:35:23:19:67:49:fd:62:fc:6b:
da:e3:41:59:24:80:04:94:ab:80:a0:6e:7e:c8:29:72:00:b3:
d6:70:af:07:6d:c8:65:d3:82:c0:80:ee:49:77:f5:26:15:4a:
c7:8b:e9:0f:a3:57:ca:47:fb:78:24:ed:da:5a:19:7c:df:44:
b0:ed:5a:3d:b7:18:8c:6a:b6:40:e7:04:80:99:23:d7:75:06:
b5:ec:99:9f:50:a3:56:b7:ac:70:57:eb:4e:37:e5:a0:d1:00:
d3:ba:6d:ee:f5:85:ea:c5:6e:d4:f9:1d:2b:47:f6:f0:95:65:
2c:0a:71:19:4b:be:c3:e1:43:6a:71:af:ec:df:d3:ad:22:af:
95:d3:3e:1c:40:be:a9:fe:b4:d0:fe:d4:39:85:68:bf:21:e2:
da:83:4b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:19 2025 by rpki-client