Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.mft
File: LQ8z4CVL-gOTic0bLO6J7KHdmmA.mft (raw, json)
Hash identifier: BwvpArz1Va6mXdHvfqsLAgrSjQHzmNH8Lbky39O6FhU=
Subject key identifier: 70:89:BA:26:C1:B9:B1:32:5A:8B:08:21:25:08:90:01:7D:4A:9F:79
Authority key identifier: 2D:0F:33:E0:25:4B:FA:03:93:89:CD:1B:2C:EE:89:EC:A1:DD:9A:60
Certificate issuer: /CN=2d0f33e0254bfa039389cd1b2cee89eca1dd9a60
Certificate serial: 019652A470E3006CB6F41F09D62E6D39D565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ8z4CVL-gOTic0bLO6J7KHdmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.mft
Manifest number: 04BA
Signing time: Sun 20 Apr 2025 10:00:30 +0000
Manifest this update: Sun 20 Apr 2025 10:00:30 +0000
Manifest next update: Mon 21 Apr 2025 10:00:30 +0000
Files and hashes: 1: LQ8z4CVL-gOTic0bLO6J7KHdmmA.crl (hash: FWMTdUl/P4mjx1OvxWv4ouIokvyVzxnw/3HUZImCxmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ8z4CVL-gOTic0bLO6J7KHdmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:70:e3:00:6c:b6:f4:1f:09:d6:2e:6d:39:d5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0f33e0254bfa039389cd1b2cee89eca1dd9a60
Validity
Not Before: Apr 20 10:00:30 2025 GMT
Not After : Apr 21 10:00:30 2025 GMT
Subject: CN=7089ba26c1b9b1325a8b0821250890017d4a9f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:03:24:c2:d1:f9:ae:81:a1:e0:f5:66:60:
96:45:b0:b6:0a:6d:04:77:21:83:41:aa:81:de:70:
7c:43:d0:68:53:24:44:8b:57:62:ef:02:4c:e7:ae:
d5:49:bd:70:02:9f:c3:f5:ca:ba:41:2a:b8:b7:65:
a6:46:6d:d2:31:c3:1b:1d:43:8b:fc:a5:50:28:6b:
5b:e5:b8:b2:55:da:e7:13:08:97:06:5c:c4:4f:fd:
05:4b:19:c1:f3:01:a1:42:e7:8f:db:9e:0e:33:63:
d2:70:28:fe:8a:c7:3d:c2:66:fa:a2:fc:fa:e7:44:
bb:26:6e:46:dd:d5:8b:c9:5b:27:71:83:59:6b:a0:
b3:84:f6:49:0f:87:8b:33:df:b0:9e:47:84:58:64:
72:b1:7d:36:db:da:f1:06:d2:4c:86:60:d1:0f:a1:
9f:2a:20:e1:38:e0:72:f9:16:f0:d0:48:0d:57:93:
a1:5d:0b:e0:0a:55:2e:d3:aa:3c:85:45:1b:e4:4b:
fa:dc:4a:c4:74:ef:2f:7f:78:d2:88:b7:eb:3c:a2:
10:1f:4e:63:19:82:4e:46:ee:6c:62:e9:63:84:31:
5a:7d:4e:f9:d2:53:50:b8:fe:b7:c0:05:5d:88:1d:
6e:14:07:7b:b5:26:06:10:c8:e5:86:75:1d:a5:40:
59:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:89:BA:26:C1:B9:B1:32:5A:8B:08:21:25:08:90:01:7D:4A:9F:79
X509v3 Authority Key Identifier:
keyid:2D:0F:33:E0:25:4B:FA:03:93:89:CD:1B:2C:EE:89:EC:A1:DD:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ8z4CVL-gOTic0bLO6J7KHdmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bd06c4-d937-4dc6-b149-10de8c0f92c8/1/LQ8z4CVL-gOTic0bLO6J7KHdmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c5:c8:12:cc:56:c0:f1:21:fd:7c:d4:18:f1:df:56:a5:f8:
85:75:72:cc:6d:30:16:f8:00:d8:3f:67:dd:cc:44:86:60:d6:
18:9a:55:9c:b0:91:0d:7b:c7:bc:18:35:2b:3f:81:90:cb:70:
5f:9d:a8:c1:98:5c:9b:34:64:b0:9a:db:1e:54:64:31:d5:1a:
17:24:c5:a8:92:96:3b:d8:29:21:96:77:3a:fd:b2:07:72:6d:
8d:91:8b:9b:fb:76:94:d7:9a:3a:51:8c:74:36:e4:d1:c1:38:
f5:7c:6f:ef:cb:bb:16:08:d9:66:c4:6c:09:d9:31:d3:10:c7:
20:25:81:ac:76:fa:cf:ec:17:03:0a:4c:98:03:8d:5a:e1:e2:
05:15:31:cb:f5:5a:77:1b:ea:69:88:e8:0c:2a:e5:ef:05:26:
71:5b:38:a6:69:e0:43:d3:39:0d:57:8a:16:69:88:56:1d:47:
24:82:ea:67:38:7a:91:a2:7f:00:f1:b3:45:2a:8c:55:d0:68:
21:26:f1:49:15:3d:b5:a1:70:da:b6:dd:3e:d2:a6:b1:40:66:
ed:b4:26:fc:73:e1:73:61:eb:dc:f9:d9:d7:7b:e0:9a:0c:84:
e6:70:bd:96:92:6e:b8:7c:c0:4d:db:df:6d:30:ec:e8:5c:ec:
8f:00:f8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:06 2025 by rpki-client