Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
File: LUUkZslYX29anMHDDo17Fu1HSkg.mft (raw, json)
Hash identifier: Q5v8ZKPxcEJ/bg7Je/9/b6n5ctDaICCQbBN9Fxbcxuo=
Subject key identifier: 05:D7:C6:BA:D5:64:E0:2E:28:21:AF:75:7D:54:A5:3D:1B:37:66:56
Authority key identifier: 2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48
Certificate issuer: /CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
Certificate serial: 01964DEC2296DAC12AC2E0CBA80947D7B423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
Manifest number: 056D
Signing time: Sat 19 Apr 2025 12:00:42 +0000
Manifest this update: Sat 19 Apr 2025 12:00:42 +0000
Manifest next update: Sun 20 Apr 2025 12:00:42 +0000
Files and hashes: 1: LUUkZslYX29anMHDDo17Fu1HSkg.crl (hash: wFGhnxsxOceElKzJRfyqPnhbxHPINRfT+sA8m6t0Mus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:22:96:da:c1:2a:c2:e0:cb:a8:09:47:d7:b4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
Validity
Not Before: Apr 19 12:00:42 2025 GMT
Not After : Apr 20 12:00:42 2025 GMT
Subject: CN=05d7c6bad564e02e2821af757d54a53d1b376656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:21:c9:e6:f5:bb:b5:00:5a:c0:dc:48:69:
05:8b:fd:41:c3:c9:7e:55:d7:d6:59:63:45:3c:27:
5d:44:3f:7d:a8:56:8d:20:1b:98:98:ea:15:b8:2d:
3f:a1:9c:13:12:47:30:2b:60:31:d8:b4:9a:2b:8c:
95:5c:e1:9c:b4:e1:37:c1:92:a1:ad:3f:7e:08:2f:
25:a6:cf:3c:81:b5:1a:e2:d2:17:3e:75:7d:ce:7b:
2b:52:4a:31:71:e5:b5:69:f5:c0:94:be:03:b8:df:
bc:c7:3e:27:ba:06:f9:97:26:28:ff:3f:ce:ea:c9:
7b:54:59:11:d8:92:b5:f4:ee:14:3b:5c:76:e8:a7:
4a:74:01:cd:a0:8a:46:9d:c6:e4:b7:4f:e8:e0:11:
80:b0:e4:08:87:2c:75:6e:8d:8a:08:7c:bb:b4:77:
c5:90:49:d6:44:8d:45:f6:6c:8a:ea:d9:fa:89:13:
4e:22:cb:7d:ae:b6:dd:c3:ba:b9:4f:52:d4:04:91:
31:25:8f:81:60:15:ed:88:b9:dc:4b:80:72:25:80:
82:aa:5e:10:99:73:50:8b:96:d9:10:7a:ef:41:db:
e2:5b:23:42:7e:e3:dd:a6:17:21:5c:97:32:80:bc:
72:3b:46:98:0a:a4:bb:9f:97:04:26:7c:af:ab:e9:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D7:C6:BA:D5:64:E0:2E:28:21:AF:75:7D:54:A5:3D:1B:37:66:56
X509v3 Authority Key Identifier:
keyid:2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:60:c2:d9:ab:0d:8e:cb:9a:59:4f:9e:90:9e:77:cf:ad:07:
9e:5e:b8:8f:2a:8a:23:75:26:c0:ea:b9:45:4b:17:f5:20:b7:
20:7c:34:65:f8:67:02:4f:17:e8:f1:ad:cb:8e:8b:87:c2:3e:
10:e3:80:52:b6:f7:ee:17:3e:5e:86:4f:b9:84:f5:f8:50:9d:
d7:bb:48:ad:47:b1:c8:9a:e1:38:5e:47:dc:42:f4:2a:2d:5b:
31:e6:23:68:f1:14:c4:95:9c:5e:a9:59:d7:0d:54:ed:91:66:
0f:e0:0e:4c:11:89:64:75:3e:71:02:f6:4a:c2:c3:72:01:fc:
eb:dc:9e:38:8f:e0:ee:84:6e:88:de:62:dc:5e:32:4d:b5:0f:
9a:f7:79:93:01:a5:be:24:a1:42:01:b6:c8:67:7c:a6:af:61:
73:d7:57:88:c7:cd:59:44:fd:56:6b:db:e2:19:1b:83:3c:81:
fe:0b:98:5d:69:67:de:39:46:b7:41:41:28:9c:d2:59:01:91:
a7:2c:66:9f:ec:22:09:61:5b:f6:ed:b1:e1:54:d3:29:1b:6a:
81:e5:8d:65:d0:a1:64:22:3a:68:7a:73:0b:d2:6e:46:7b:e7:
f0:70:95:9f:3b:51:47:6c:c5:21:8d:0c:83:ba:13:6a:1b:b2:
0b:10:2c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:08:56 2025 by rpki-client