Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
File: LnOtRfij6-Znq7GWoonWcZvruC0.mft (raw, json)
Hash identifier: UP33d8XK+KYwMSh3lGwsFHeAIBBtGSe2gPIKSIOlAA4=
Subject key identifier: A4:88:0D:A6:BB:68:33:0D:84:CE:60:C8:52:A8:86:37:DD:DE:83:A1
Authority key identifier: 2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
Certificate issuer: /CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Certificate serial: 01958C2945C9FDF48835101B2BBE1BB2DB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 21:01:09 +0000
Manifest this update: Wed 12 Mar 2025 21:01:09 +0000
Manifest next update: Thu 13 Mar 2025 21:01:09 +0000
Files and hashes: 1: LnOtRfij6-Znq7GWoonWcZvruC0.crl (hash: BXSf/Ya9o+qD4mQhsbIEaG3rsR3asD8xqBa+uuizIwY=)
2: xBYzLNgtWEdItwv5XiwC0f2BVHs.roa (hash: M4igOLaB0nj0vGEKkqVeIm87sQmGzEgR39n8QW/vxOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:45:c9:fd:f4:88:35:10:1b:2b:be:1b:b2:db:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e73ad45f8a3ebe667abb196a289d6719bebb82d
Validity
Not Before: Mar 12 21:01:09 2025 GMT
Not After : Mar 13 21:01:09 2025 GMT
Subject: CN=a4880da6bb68330d84ce60c852a88637ddde83a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:ed:57:53:fd:4d:bb:78:20:8f:88:73:5b:
d7:e1:09:d4:9a:8f:eb:a2:ac:e9:82:a0:ff:74:7e:
89:fe:4e:1c:87:02:68:74:57:fc:3b:a4:69:8d:2e:
4a:0f:57:71:77:f4:13:a4:ec:51:5b:f2:a5:6a:2e:
23:f2:26:2f:ec:86:fd:eb:df:ea:9a:01:08:21:d6:
24:ef:46:fd:1b:27:f2:03:0d:54:05:95:d4:24:96:
2d:7e:8f:8a:7f:35:55:c5:59:13:43:d3:d1:07:1e:
97:09:ed:bf:10:98:c6:99:96:9b:70:8c:24:1e:de:
1d:e4:22:8d:eb:28:c3:8a:65:cd:cd:40:a6:9d:43:
8d:0e:c5:e2:c6:e0:97:28:ca:8a:bd:5d:75:76:e5:
d8:ee:ee:c9:10:41:95:75:c9:0a:6c:f9:57:43:8a:
da:54:d7:2a:63:d0:07:ac:9a:49:a6:d9:b2:84:83:
ed:46:5a:c3:33:d8:c3:0b:93:ad:dc:ff:f4:fa:a3:
1a:05:75:a8:40:cd:be:11:fa:fd:46:97:25:46:c8:
c5:26:89:0d:bf:fe:b3:b6:31:b6:f6:a6:39:c8:a6:
5c:be:87:03:34:9b:d0:c4:5c:79:19:fc:19:11:ec:
9c:7f:14:31:76:78:4a:74:a5:10:e5:45:3c:fe:ce:
1a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:88:0D:A6:BB:68:33:0D:84:CE:60:C8:52:A8:86:37:DD:DE:83:A1
X509v3 Authority Key Identifier:
keyid:2E:73:AD:45:F8:A3:EB:E6:67:AB:B1:96:A2:89:D6:71:9B:EB:B8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOtRfij6-Znq7GWoonWcZvruC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9a60cf-9d94-4585-a25b-5e7f95811562/1/LnOtRfij6-Znq7GWoonWcZvruC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f5:40:3d:c1:c7:27:d0:22:bb:e5:92:92:d7:d5:2c:66:0a:
63:c5:fe:f2:e7:04:3e:c8:0f:16:a5:c0:05:e7:61:ca:eb:c8:
5d:5a:df:4b:c8:2d:cd:cd:7c:b1:d5:4e:a6:27:69:05:43:65:
06:83:94:44:3f:aa:cf:e7:f6:da:6e:8f:61:18:25:2a:dd:d5:
d9:10:44:07:47:56:f4:f7:04:fa:ef:2b:f5:39:77:d9:9a:87:
e9:60:4c:86:9e:84:a6:f7:78:32:3c:44:ff:8f:01:2d:ba:2e:
57:b9:ef:66:e9:3d:bb:4b:ab:16:a6:5c:72:df:95:12:02:cc:
d2:cb:0f:21:9b:5c:39:e7:df:2d:86:c9:e8:c7:f7:20:ee:63:
97:29:e4:67:ea:8c:b5:ab:08:88:4c:2e:84:f1:9f:85:70:8e:
5c:c1:13:f0:7d:2c:be:e6:14:f7:16:19:eb:56:88:cf:c9:54:
44:bb:1e:cf:c8:f6:8e:8c:d0:de:11:82:09:83:b0:6d:ce:7d:
cf:81:11:6c:4e:51:64:1f:ba:f9:29:88:26:64:d2:58:8e:3e:
07:bc:69:15:bb:f0:06:77:b6:43:2a:02:47:8a:7b:ec:c0:e6:
ee:d6:df:a3:a0:fe:f2:5f:dc:53:70:fa:67:31:f6:3e:c0:52:
3d:ed:aa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:40 2025 by rpki-client