Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
File: lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json)
Hash identifier: F6Fwbaz6rPCw/AUvo/bZg+XUoUgS/HpQoHSmmVIuJ08=
Subject key identifier: A3:C4:80:4F:43:58:42:62:43:8E:2A:51:0D:77:E8:D7:B5:0F:2D:A9
Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
Certificate issuer: /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Certificate serial: 0195903D339D059A007F2CDD2474B06C5C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
Manifest number: 0324
Signing time: Thu 13 Mar 2025 16:01:24 +0000
Manifest this update: Thu 13 Mar 2025 16:01:24 +0000
Manifest next update: Fri 14 Mar 2025 16:01:24 +0000
Files and hashes: 1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: g9CwR4MAVpc4P4LBr061KcDJEG9V70OqnmcNDNoa9TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:33:9d:05:9a:00:7f:2c:dd:24:74:b0:6c:5c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Validity
Not Before: Mar 13 16:01:24 2025 GMT
Not After : Mar 14 16:01:24 2025 GMT
Subject: CN=a3c4804f43584262438e2a510d77e8d7b50f2da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:c0:d6:a6:9e:e1:8a:d2:f0:f8:41:01:08:
d1:63:39:3e:8f:f8:09:23:0b:93:b9:06:d3:5a:39:
be:2d:69:4f:46:d6:c4:7a:f3:e9:f5:67:c4:de:47:
98:34:ef:66:f5:77:f3:01:cf:ab:a1:70:63:61:1e:
30:fa:5f:1f:88:c1:88:bb:80:c7:38:be:a5:38:b4:
07:c7:ca:f0:ac:8d:f5:77:b1:b7:dd:37:45:ad:93:
a6:49:8e:5b:9e:6a:93:34:1a:e4:5d:96:9a:a6:59:
5b:9f:f3:3b:46:f9:31:b5:5d:d9:39:9f:c3:24:ef:
07:86:f5:cd:ce:f9:93:bd:c9:81:d3:35:c9:6a:23:
6b:ca:06:cf:4c:f1:39:77:de:20:6d:23:d9:96:2b:
8f:54:bb:72:d9:c5:f7:65:76:27:69:80:f7:52:ff:
84:16:20:12:4c:b0:fb:35:75:92:67:26:ee:c6:d7:
9b:c3:ea:8b:25:d0:fb:ab:c8:53:01:1b:4d:6b:d6:
6f:a0:b4:72:dc:20:8c:e0:60:c0:bb:0a:3a:52:8b:
f0:f1:fb:99:d6:82:68:95:12:af:19:2e:1d:80:f0:
3f:0c:ae:7a:ff:f6:e7:dc:97:d1:40:c6:8d:8b:b5:
03:c0:6b:d1:46:5b:02:ac:b1:b6:06:07:65:d5:6b:
b1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C4:80:4F:43:58:42:62:43:8E:2A:51:0D:77:E8:D7:B5:0F:2D:A9
X509v3 Authority Key Identifier:
keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:bd:ad:a6:34:50:93:ec:49:8b:1b:c9:16:4d:83:72:cf:22:
21:98:5b:15:73:fa:26:81:c3:ea:d7:b0:60:2d:72:3c:33:02:
df:a8:df:e6:83:68:df:dc:9d:f6:ba:ce:a3:80:67:01:5f:fa:
e5:d6:89:1c:01:74:7e:27:13:42:6a:ce:42:bb:d3:e7:98:b5:
21:94:f3:7d:ee:e5:2e:d8:46:0b:a7:74:fb:75:ba:87:33:fc:
10:0f:bc:0d:ed:71:64:00:99:44:d5:8a:f4:5a:95:68:11:66:
d8:24:69:65:b0:8c:8c:7b:d7:7d:fd:75:1d:da:92:2a:74:d2:
e1:00:b3:0f:ea:6b:c1:aa:64:6f:e0:f0:a2:86:d2:02:66:b0:
b6:44:52:df:7d:3a:dc:38:f4:b0:f0:0f:1b:52:24:d5:ae:d4:
06:21:2c:0d:a5:de:f8:4a:a5:e5:15:65:39:69:17:75:57:2d:
1e:3a:da:6e:25:24:6a:7a:e5:82:65:01:e3:69:91:80:24:46:
bd:7e:8b:03:5d:07:24:7b:17:78:b6:54:1d:12:45:31:34:ca:
4c:f3:ff:dc:31:0a:1d:0f:47:e8:5c:ea:b3:41:ed:cf:28:cc:
4b:ec:be:67:c6:c4:65:bd:4d:e0:71:04:cb:4d:4f:24:e9:d9:
87:11:6b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:06 2025 by rpki-client