Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
File: lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft (raw, json)
Hash identifier: 2y9cqBvECWfUo+t93m3kEfKbPzqRDvWvPLCx3BmgVoM=
Subject key identifier: C1:68:A2:52:0B:06:79:A7:55:14:03:7D:03:63:1A:0C:96:88:C6:4F
Authority key identifier: 94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
Certificate issuer: /CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Certificate serial: 01965492B0FC1A7ED22212BE4ECF4F1C4B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
Manifest number: 07BD
Signing time: Sun 20 Apr 2025 19:00:21 +0000
Manifest this update: Sun 20 Apr 2025 19:00:21 +0000
Manifest next update: Mon 21 Apr 2025 19:00:21 +0000
Files and hashes: 1: lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl (hash: QehK3SNf0r9OeDZxFz/I4AZisAwCcCyClY5kpJBm8zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:b0:fc:1a:7e:d2:22:12:be:4e:cf:4f:1c:4b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Validity
Not Before: Apr 20 19:00:21 2025 GMT
Not After : Apr 21 19:00:21 2025 GMT
Subject: CN=c168a2520b0679a75514037d03631a0c9688c64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:71:ab:c9:7a:56:25:fe:06:61:dd:4c:c0:
12:8c:ed:61:4f:15:f4:2e:0a:47:f6:9a:bb:b7:11:
d1:4e:d3:72:3d:db:f1:02:20:ad:43:91:5a:b1:4f:
bd:c4:06:15:dc:9c:ff:07:aa:6a:b9:7b:cc:10:a9:
a3:3f:59:73:2d:7b:98:19:a6:a0:74:ac:3d:b8:29:
59:24:9c:d1:29:b1:94:ce:e7:66:01:7f:ae:65:66:
4a:07:3b:a9:f6:24:7f:1b:3d:7e:3d:7a:fd:32:4b:
f4:9c:5b:3b:3b:5e:38:0f:e3:f7:0e:d9:47:c2:73:
1c:09:0c:88:8e:39:52:5f:18:2d:c4:40:8f:2b:4c:
d2:cb:2b:97:6b:22:ec:b2:a1:d4:08:b7:cf:9c:0b:
28:d8:73:d1:27:ef:74:26:f3:d5:e5:e9:88:e8:e1:
ae:b0:c4:f3:31:12:3d:9d:2c:79:71:e2:ad:73:df:
1a:7d:cd:16:2e:59:87:fd:e5:25:08:12:2f:2c:3f:
95:43:23:bf:be:ae:c4:40:9b:c4:74:38:b4:90:13:
0d:19:4d:20:15:69:40:2f:e9:3e:2a:b9:d1:1e:c5:
c2:a9:24:7d:06:12:ba:46:59:93:0e:0a:2e:43:31:
70:12:1a:0f:96:02:ee:b1:02:db:88:69:aa:39:7f:
ac:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:68:A2:52:0B:06:79:A7:55:14:03:7D:03:63:1A:0C:96:88:C6:4F
X509v3 Authority Key Identifier:
keyid:94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d0:92:d6:2e:9c:df:a7:21:e5:20:c3:48:a3:a3:f3:c8:9d:
74:42:06:8c:a3:14:cc:9b:85:93:59:85:60:d1:9a:a9:ce:fe:
65:93:3c:41:3f:17:24:1f:c8:80:11:c5:6a:aa:f4:ca:e3:bc:
dc:ca:4e:ad:e9:9d:85:96:7c:9c:32:ea:44:ee:35:6c:b5:94:
b6:74:2c:45:dc:30:1d:46:68:63:f7:d7:cb:8c:81:8b:c8:62:
ff:86:5a:c3:9b:b7:46:bd:4c:c7:f1:f5:43:5c:05:be:75:15:
3e:57:98:e6:c7:27:f0:81:55:29:0a:ad:7d:7d:4d:9a:4c:19:
bd:b8:05:12:16:46:3c:3d:71:7d:58:0a:1e:7e:73:71:a4:f9:
38:c4:fc:61:b4:61:29:2c:62:75:0f:eb:8a:1d:06:4e:88:33:
03:cd:b2:65:a0:31:b6:1b:96:05:0b:23:68:35:f0:4a:c1:c3:
5b:a1:64:4e:20:2b:fb:ea:bb:63:2d:10:bb:04:1b:be:ae:17:
bf:0d:50:a9:47:be:94:88:03:44:43:fa:87:74:72:1b:ec:8b:
29:a2:ce:ff:c4:5d:82:76:1a:95:3b:5b:c2:3c:19:34:f6:0b:
2e:4c:75:3d:6a:89:c3:f8:bf:07:e4:f1:2a:fe:3d:0a:82:0a:
6e:46:62:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:02:54 2025 by rpki-client