Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
File: LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft (raw, json)
Hash identifier: shwROmxbj8vx7h41oEew9L8Dm4ny7aSO0DCsFfb9MbQ=
Subject key identifier: F7:1D:41:49:E1:66:5D:06:F4:D7:97:6B:5C:19:1F:DA:01:3B:E2:06
Authority key identifier: 2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
Certificate issuer: /CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Certificate serial: 0195791079035DA953A5A4B82AD948AA8E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
Manifest number: 0DC0
Signing time: Sun 09 Mar 2025 04:01:17 +0000
Manifest this update: Sun 09 Mar 2025 04:01:17 +0000
Manifest next update: Mon 10 Mar 2025 04:01:17 +0000
Files and hashes: 1: LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl (hash: HY8CK3+0BlFbnRjUr8aOcEq9E6sMSXkxUrPkVkIMYWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:10:79:03:5d:a9:53:a5:a4:b8:2a:d9:48:aa:8e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cabf5754ffe1a1cfb89b4f2b0bf1065823b12cf
Validity
Not Before: Mar 9 04:01:17 2025 GMT
Not After : Mar 10 04:01:17 2025 GMT
Subject: CN=f71d4149e1665d06f4d7976b5c191fda013be206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:b3:0d:a6:75:56:f3:c4:9c:02:f8:91:c2:
98:fc:cd:66:ed:9b:9e:c6:96:b7:58:94:b2:33:1e:
8e:c9:37:b5:ea:4a:9a:ba:cd:83:f9:08:c4:53:91:
31:87:81:04:75:fe:c1:0a:7d:99:b0:1b:e7:56:3b:
a1:94:1e:f8:eb:92:68:d8:e5:a2:9a:4b:5e:b0:ab:
96:9b:b2:7a:ae:dd:3a:d1:1c:29:68:a1:14:95:f0:
57:41:33:59:a7:14:87:18:13:da:36:e7:f7:1b:bb:
87:c0:52:a2:ef:1f:03:2f:7b:b7:87:b2:49:f1:4e:
a1:d3:90:04:16:c5:2b:f9:1f:71:6d:20:2d:e6:6e:
af:c6:87:95:85:01:9a:a8:2d:59:68:84:bd:50:bd:
1c:a2:c3:cb:a5:b5:19:7d:25:16:a2:8b:52:4b:7c:
f4:09:a1:92:c5:9f:7c:7c:35:7f:b7:21:24:3c:a6:
0c:ae:a4:a1:43:c0:84:2d:d3:bd:2a:35:e6:41:fe:
75:fb:3b:9a:f9:26:eb:b3:c0:73:6b:2e:91:68:0d:
d0:c3:c2:62:f1:dc:c8:bb:fc:57:89:47:6a:1a:9f:
a9:6c:ac:b1:b8:16:31:1d:bd:88:da:0e:ea:71:03:
7c:a4:7c:f7:47:7c:75:1e:2c:eb:57:da:aa:41:ba:
a4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1D:41:49:E1:66:5D:06:F4:D7:97:6B:5C:19:1F:DA:01:3B:E2:06
X509v3 Authority Key Identifier:
keyid:2C:AB:F5:75:4F:FE:1A:1C:FB:89:B4:F2:B0:BF:10:65:82:3B:12:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKv1dU_-Ghz7ibTysL8QZYI7Es8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e4b789-3c0f-4a3b-815f-06978f18c734/1/LKv1dU_-Ghz7ibTysL8QZYI7Es8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:12:78:c3:4e:26:d5:91:8b:23:08:d1:8f:bd:a7:2b:0c:de:
81:7e:ee:e3:a0:ba:b8:81:a8:ad:61:0a:46:1f:36:13:39:5f:
16:ce:c0:76:95:d3:7f:3b:30:65:f3:a0:69:56:5c:c1:d9:f3:
b5:aa:d3:03:ef:70:b7:77:e9:51:e4:04:04:1d:39:5f:ba:e3:
7a:49:67:b1:a3:12:88:84:04:77:06:dd:1f:d0:04:bd:3b:a1:
ad:aa:4f:9d:ac:4d:29:80:5d:24:51:dc:d2:12:e1:89:de:e0:
6e:6b:a4:da:3c:96:b8:45:ed:c7:84:29:ce:05:11:43:25:82:
9b:74:8b:a9:32:a3:b6:89:76:0a:5a:3b:59:40:5b:08:63:f1:
f3:a8:c0:34:93:3d:a1:d7:72:6f:2b:ec:d0:6c:60:3f:c2:dc:
c5:ee:6a:b4:61:2e:ac:36:93:a2:f6:ab:93:45:a5:49:14:81:
df:58:9a:c2:c3:07:fc:3f:80:43:98:04:22:62:dc:c2:41:ba:
bf:85:56:9a:b5:88:ed:7f:4e:52:2a:54:dc:40:8b:2c:60:d5:
b9:77:ef:10:2b:a3:73:a5:a7:f1:9f:d6:85:1b:e9:f0:43:db:
dd:ea:ba:38:2e:97:aa:49:b9:7b:88:b6:fc:a8:d4:01:ac:cf:
00:55:5f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:09:27 2025 by rpki-client