Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
File: lM53iNLj_vf8ANXOEz19bcAPhik.mft (raw, json)
Hash identifier: qZ0aBlModyu/wQGnWX+eeq2VB0+xx02TdzXkyBMoCko=
Subject key identifier: 5F:D0:94:71:C6:D2:75:BE:1D:41:71:C7:5F:50:C3:C0:02:6C:45:64
Authority key identifier: 94:CE:77:88:D2:E3:FE:F7:FC:00:D5:CE:13:3D:7D:6D:C0:0F:86:29
Certificate issuer: /CN=94ce7788d2e3fef7fc00d5ce133d7d6dc00f8629
Certificate serial: 01965F4D4D78F94CE23AA5AC0E76CDAE2756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
Manifest number: 0C79
Signing time: Tue 22 Apr 2025 21:00:23 +0000
Manifest this update: Tue 22 Apr 2025 21:00:23 +0000
Manifest next update: Wed 23 Apr 2025 21:00:23 +0000
Files and hashes: 1: lM53iNLj_vf8ANXOEz19bcAPhik.crl (hash: zgMPiLEEUM3KxJQAZVI0NI+FmfGsRNFQJ4b2tpz4eiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:4d:4d:78:f9:4c:e2:3a:a5:ac:0e:76:cd:ae:27:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ce7788d2e3fef7fc00d5ce133d7d6dc00f8629
Validity
Not Before: Apr 22 21:00:23 2025 GMT
Not After : Apr 23 21:00:23 2025 GMT
Subject: CN=5fd09471c6d275be1d4171c75f50c3c0026c4564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:87:14:8b:44:24:2e:a0:31:68:c7:cf:25:3f:
b3:ee:f9:98:75:0b:4a:42:9a:44:d4:35:28:9b:35:
95:30:3c:a7:f7:3c:ee:4a:4b:8a:0a:6f:78:ce:4e:
5a:63:8f:6f:69:57:3a:a7:81:cf:6c:a2:14:82:52:
62:38:f6:be:6d:9b:2d:10:97:ab:ed:50:38:1c:05:
7c:d7:4b:79:c4:49:81:6a:90:04:86:b9:af:49:e2:
6d:de:68:ce:cc:83:9b:a7:4a:bd:d8:3e:78:28:db:
8e:22:24:16:bd:6a:0a:f4:9d:15:16:e8:40:59:32:
56:7c:f0:a6:c1:71:3e:b8:75:c4:c9:66:a7:1a:39:
8e:c2:67:d0:13:35:71:34:80:a8:78:b7:7b:41:8c:
01:69:b8:cd:38:ec:16:7a:d4:bb:73:c6:3b:58:03:
b7:01:3e:0e:95:04:f8:e4:18:3c:4a:3f:3c:eb:77:
7e:6d:a2:17:f9:4a:fd:a7:d2:09:28:59:b5:bd:d9:
72:3e:ca:00:8c:9b:ed:28:19:2f:07:0f:40:c7:84:
ae:de:04:f7:6c:c5:a0:31:d7:f7:58:61:32:e4:9c:
5c:28:16:29:20:9e:b3:e6:db:4e:25:f1:1e:13:ee:
1b:7f:d1:9e:3e:6a:7d:62:c1:7d:4a:52:de:cc:dd:
37:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D0:94:71:C6:D2:75:BE:1D:41:71:C7:5F:50:C3:C0:02:6C:45:64
X509v3 Authority Key Identifier:
keyid:94:CE:77:88:D2:E3:FE:F7:FC:00:D5:CE:13:3D:7D:6D:C0:0F:86:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lM53iNLj_vf8ANXOEz19bcAPhik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4ef629-12e2-4d99-9b4a-336623afe898/1/lM53iNLj_vf8ANXOEz19bcAPhik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b7:58:82:e9:2b:eb:eb:63:3a:43:ff:f7:fc:96:11:54:a0:
a5:6b:cb:5d:ba:c3:cf:22:35:53:1f:10:89:fb:bb:83:ab:83:
25:6e:ec:a2:b6:30:23:fa:ea:6f:7d:62:e8:27:b9:85:1b:61:
de:a8:d9:3a:a7:17:40:87:74:81:34:6e:65:19:80:d6:a8:05:
b8:3c:18:35:6c:19:42:56:fb:55:2e:00:e5:be:9b:a2:6f:8f:
24:a8:f7:6b:a7:bf:f6:19:e5:07:0a:a4:35:26:f6:62:ab:bf:
8a:48:7b:99:52:1c:33:cb:f0:30:3d:13:13:e8:15:29:72:3f:
96:af:a5:29:72:3d:dc:23:1a:35:86:7b:27:61:85:3c:d2:86:
94:9e:f8:a4:f7:bb:51:7e:7a:e2:4c:c3:41:2a:72:fd:75:0f:
5b:d9:a8:f1:99:e3:f4:38:26:29:d7:4b:ac:df:05:e0:c7:18:
dc:be:71:07:28:8c:71:f9:9e:cd:57:ed:cf:ba:2c:86:59:6a:
42:ba:9a:67:4d:ae:d9:f0:71:24:af:0d:78:68:c3:05:53:e3:
9e:aa:4c:9e:50:24:6f:29:a5:bf:e9:fa:16:da:72:c6:64:1c:
77:c8:13:f5:f8:4c:1e:73:ed:3f:9d:08:91:fd:30:d6:d6:39:
06:de:f3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:10:21 2025 by rpki-client