Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
File: lp8NNAHQCKqdqoKKQjWalR-UvQg.mft (raw, json)
Hash identifier: 3XPgIIx4SPkbw62oYbLDF7W/Gk4b0PE/v9WVY3aoPrs=
Subject key identifier: CE:2C:2E:5A:7C:86:61:18:3D:B9:2E:02:82:8C:00:22:7E:EE:39:99
Authority key identifier: 96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
Certificate issuer: /CN=969f0d3401d008aa9daa828a42359a951f94bd08
Certificate serial: 019590741C45380A41C82973C8D3A50F3371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
Manifest number: 02C5
Signing time: Thu 13 Mar 2025 17:01:23 +0000
Manifest this update: Thu 13 Mar 2025 17:01:23 +0000
Manifest next update: Fri 14 Mar 2025 17:01:23 +0000
Files and hashes: 1: lp8NNAHQCKqdqoKKQjWalR-UvQg.crl (hash: p0omfRQzJBFV50ZYqrZR4EtvwF3WOJm13a3j4dtmPhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:74:1c:45:38:0a:41:c8:29:73:c8:d3:a5:0f:33:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969f0d3401d008aa9daa828a42359a951f94bd08
Validity
Not Before: Mar 13 17:01:23 2025 GMT
Not After : Mar 14 17:01:23 2025 GMT
Subject: CN=ce2c2e5a7c8661183db92e02828c00227eee3999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:36:b7:e0:23:cc:d5:26:a8:90:da:57:4f:29:
b8:7d:68:19:c9:63:81:46:de:57:6a:49:67:d3:65:
43:da:38:15:36:c2:18:42:87:e3:e3:66:0a:29:0f:
d5:ee:39:55:f4:0f:3d:33:31:27:f6:94:b1:f7:80:
60:39:d0:89:30:cb:15:45:16:ec:10:dc:62:6c:51:
b5:92:e6:99:1e:ef:3b:b2:b5:f0:3c:f8:6d:73:90:
28:45:f7:56:7d:c0:2c:8c:87:47:e2:3d:e8:ad:ba:
b2:c6:59:22:bf:7a:b9:bb:e3:d6:9e:26:4a:08:48:
49:40:2f:5f:48:31:71:42:d5:f7:d2:69:ce:b3:17:
cf:54:9b:cb:30:cd:db:d0:dc:fa:f6:5e:b7:78:64:
76:e1:28:c2:65:65:03:f8:c8:62:f6:88:0b:ba:c5:
22:65:21:e8:bb:dd:7b:6f:64:8c:5a:35:6b:ce:25:
8b:68:6c:15:70:9d:d1:38:1b:1d:e6:0e:5f:b9:d3:
72:fe:57:f3:3b:3c:ce:63:30:72:30:31:1c:38:e9:
2b:a3:6f:db:3b:4e:41:35:ff:0f:c4:06:0d:9d:e1:
e4:63:6f:81:19:f5:b9:ad:8c:1c:0a:69:ba:8e:f8:
66:87:98:86:21:d9:14:44:26:84:70:dc:d6:48:b9:
59:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2C:2E:5A:7C:86:61:18:3D:B9:2E:02:82:8C:00:22:7E:EE:39:99
X509v3 Authority Key Identifier:
keyid:96:9F:0D:34:01:D0:08:AA:9D:AA:82:8A:42:35:9A:95:1F:94:BD:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp8NNAHQCKqdqoKKQjWalR-UvQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4a8da3-a7a9-42b3-8fb7-858487355bd3/1/lp8NNAHQCKqdqoKKQjWalR-UvQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:50:0d:a1:0c:9e:07:48:ab:a5:37:a2:e6:b8:bf:e9:17:cc:
ef:32:91:58:e5:b5:e0:ca:6c:c9:cd:12:dd:42:76:01:69:ec:
10:16:26:1f:d1:2a:b7:38:5b:e8:3a:58:f7:a7:e7:b9:f3:d7:
b3:d0:9d:5d:15:14:8b:73:42:dd:9c:64:2f:0b:b7:8f:be:3e:
b6:f8:be:f9:8d:b8:cd:9b:c7:28:0e:ee:a6:fa:77:f7:ee:71:
b9:59:dd:a0:25:f4:1d:d7:72:ad:f6:2a:65:b7:b4:d9:f5:4d:
f6:e4:ff:e5:e2:0b:dd:ef:0c:ee:25:5f:e4:43:47:29:46:ae:
78:aa:ea:90:6c:0e:4b:b9:7d:39:6a:bf:47:c6:60:22:08:d1:
69:3e:e0:62:71:1a:68:1f:8e:63:4a:6f:94:d2:be:cf:12:e3:
b0:6a:9b:8c:48:e5:0b:87:9d:ad:2a:56:08:17:c5:53:9a:fd:
f4:28:c5:54:aa:74:1c:aa:2c:5a:ed:0d:55:af:2c:99:12:23:
6b:c4:69:66:08:a7:cd:90:aa:fe:06:3f:3e:73:e9:80:59:86:
fd:d6:0b:c1:d0:87:34:e1:b6:58:fb:ff:a3:9d:1d:f7:3a:2e:
46:f6:78:7b:65:af:89:c7:14:2b:5d:92:e4:f3:8c:ca:14:ff:
9a:60:e7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:41 2025 by rpki-client