Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File: LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier: f3jjwKpEJMIJAEcFBRlltcqrHCoSFyVjEoAXn8waAic=
Subject key identifier: BD:43:A0:78:48:7D:8A:35:A7:6C:9B:34:AE:E5:5A:B6:86:D3:D3:FF
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial: 019649A14D4DFB5D1125335556A3D228F9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number: 10C9
Signing time: Fri 18 Apr 2025 16:00:29 +0000
Manifest this update: Fri 18 Apr 2025 16:00:29 +0000
Manifest next update: Sat 19 Apr 2025 16:00:29 +0000
Files and hashes: 1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: LwouFmJm9Dtft6OFYrbPHBjemuElVD9FMdvb30APpts=)
2: ssRyWeDCXopCvGWiQY8ruW0oDiQ.roa (hash: 2AZtRMi6nv+D2sxR4SnvHBIVqRBNOJ+vabvqkW1Wzsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a1:4d:4d:fb:5d:11:25:33:55:56:a3:d2:28:f9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
Validity
Not Before: Apr 18 16:00:29 2025 GMT
Not After : Apr 19 16:00:29 2025 GMT
Subject: CN=bd43a078487d8a35a76c9b34aee55ab686d3d3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:09:26:ed:bf:cb:bd:7e:80:51:ef:22:d1:
48:82:f3:c2:d3:ea:ae:41:ba:43:2d:85:4c:2d:f3:
3d:c6:9c:06:b6:cc:34:4b:23:88:67:58:58:52:1c:
04:29:06:c8:73:66:02:f7:79:e5:ca:02:e9:38:ac:
ae:1c:e5:66:e1:61:54:46:08:a1:31:7d:e1:98:be:
17:db:48:40:f1:9d:01:7b:78:06:a4:30:b8:08:3a:
77:42:93:4b:a1:4c:49:31:bd:3b:48:22:45:8c:52:
c0:87:07:54:01:2a:d2:79:1a:bc:e0:54:8c:46:d4:
f6:e4:17:00:d3:e5:f3:9a:5c:ef:17:97:21:dd:e4:
0c:95:ed:7e:bb:70:b8:bd:ef:95:e5:21:86:a4:d7:
28:48:24:ae:c1:59:29:49:31:55:d8:af:97:f3:a3:
d2:93:b5:e8:fa:f5:0b:52:a1:60:42:aa:5e:73:e2:
f8:e9:80:74:24:52:b9:81:fd:42:28:b9:1d:c3:0d:
c7:6e:38:c3:69:ee:44:22:3f:8a:b8:42:24:73:00:
72:41:2a:1b:85:81:05:d1:a9:f7:34:d9:b1:3c:95:
69:a2:2c:05:2e:b3:fa:0b:bc:38:a0:20:92:b9:3d:
a9:63:81:f6:94:22:ea:89:c7:fa:47:d0:d7:7b:a2:
4d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:43:A0:78:48:7D:8A:35:A7:6C:9B:34:AE:E5:5A:B6:86:D3:D3:FF
X509v3 Authority Key Identifier:
keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:00:d6:5f:a8:31:22:16:7c:c7:4d:92:e8:d2:75:1e:3e:f7:
84:dc:5d:90:54:c5:4f:45:17:fc:a4:f4:3a:1b:88:27:16:8a:
7a:ee:3f:f7:ad:6c:fd:19:5c:95:ff:26:38:35:1c:82:f9:87:
92:81:37:7f:c1:2a:48:e9:97:02:d2:cd:24:c4:94:38:1c:d4:
e1:68:50:0d:96:64:29:40:13:39:a8:af:eb:73:32:64:79:e5:
05:80:13:b2:73:59:16:a5:f4:97:94:05:c2:d9:ca:12:0a:b6:
f3:1a:7a:a8:8d:66:88:ca:26:22:7e:f1:35:3c:e5:2c:50:b4:
e5:b5:28:ca:41:c4:87:22:55:9a:f3:3e:59:67:9b:3e:82:7a:
84:9f:b2:3d:d2:18:71:7e:25:c9:3d:3f:e6:d9:66:c4:18:a9:
16:ac:18:0a:78:72:18:39:5f:eb:15:d7:a3:2f:fb:03:53:d1:
0f:48:5d:df:91:a1:95:6c:f5:58:72:69:59:50:e2:9b:70:0f:
01:1a:cb:23:6e:69:18:6c:4e:21:69:4c:94:19:41:89:45:a1:
0b:21:2e:37:b9:ce:c6:69:58:21:87:b0:e1:80:a1:d0:4e:84:
2c:6c:df:25:57:46:ca:44:fa:f7:f6:cf:47:70:ae:76:a8:b9:
ad:2a:8e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:31:31 2025 by rpki-client