Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
File: lJCxxOooQt35kp6oplRbgXoodoA.mft (raw, json)
Hash identifier: l/WXwK5G+J7Ybps/s3Q8U+wJ1aArWzd9NXRAH+7lpAY=
Subject key identifier: E6:F7:72:C4:3A:69:DE:78:3D:3A:BB:CE:58:C8:30:7D:DD:27:E4:0B
Authority key identifier: 94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
Certificate issuer: /CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Certificate serial: 019611A1DDC4F8069E77EA6FDBD71E3FBA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
Manifest number: 0367
Signing time: Mon 07 Apr 2025 19:02:22 +0000
Manifest this update: Mon 07 Apr 2025 19:02:22 +0000
Manifest next update: Tue 08 Apr 2025 19:02:22 +0000
Files and hashes: 1: lJCxxOooQt35kp6oplRbgXoodoA.crl (hash: fjj9cG6xMqfcpA36ahXkvXyEPnnMhFupmkxte49jMIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a1:dd:c4:f8:06:9e:77:ea:6f:db:d7:1e:3f:ba:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9490b1c4ea2842ddf9929ea8a6545b817a287680
Validity
Not Before: Apr 7 19:02:22 2025 GMT
Not After : Apr 8 19:02:22 2025 GMT
Subject: CN=e6f772c43a69de783d3abbce58c8307ddd27e40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:07:cf:5c:4b:8a:3f:f8:fc:7d:23:7f:f5:
83:ce:e3:48:ee:5b:6d:e9:51:a0:60:1a:15:a1:26:
06:c5:dc:12:b1:65:ad:10:79:ef:36:81:b1:db:3f:
9d:c5:d2:63:51:a1:3c:d7:f7:95:69:0c:06:74:20:
0a:0d:b9:b5:5b:8c:a1:ee:6f:54:cd:e6:bf:4d:52:
00:64:73:7b:b5:f4:d4:3f:78:f0:21:d6:9a:cb:b9:
cf:8e:6e:9f:68:9f:b2:3c:2b:04:0f:8f:76:6a:3c:
6e:50:1b:79:b4:98:77:aa:1a:39:2f:99:c2:66:b6:
d7:19:59:da:a3:99:06:a5:52:dd:39:a3:65:d4:bc:
7e:67:a1:02:91:4b:ba:87:43:8f:65:3a:14:ac:71:
b3:0c:c9:be:94:8b:31:86:a6:d9:bb:33:e6:38:92:
e9:95:c8:07:ad:ba:d2:d3:11:30:e5:41:3f:52:64:
1c:59:08:c7:c4:76:d3:a4:c6:7f:ee:18:84:13:54:
6d:b6:ef:f3:0d:b9:33:82:dc:32:63:87:c5:db:60:
6f:ad:28:3b:5c:e5:5f:10:b2:b1:3e:ed:3b:74:23:
2e:c8:98:8a:21:1c:b4:5e:b3:7c:8f:c2:c3:a0:0c:
ef:a8:97:d0:4c:e9:27:13:f1:ab:78:f7:ae:7d:d8:
7b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F7:72:C4:3A:69:DE:78:3D:3A:BB:CE:58:C8:30:7D:DD:27:E4:0B
X509v3 Authority Key Identifier:
keyid:94:90:B1:C4:EA:28:42:DD:F9:92:9E:A8:A6:54:5B:81:7A:28:76:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJCxxOooQt35kp6oplRbgXoodoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/edddaa-c31a-4026-8f85-0566f51252a9/1/lJCxxOooQt35kp6oplRbgXoodoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e6:63:31:75:63:40:52:ad:6d:2b:f3:f5:8f:36:1d:28:e6:
70:5a:6e:de:49:87:83:28:2b:b3:a0:c2:2c:b4:ff:79:63:d7:
69:6a:7d:cf:18:2d:df:dd:9d:94:3f:de:5a:38:f7:6d:89:6a:
d7:0d:5b:68:69:ce:55:3d:61:67:40:f8:50:78:2b:ae:60:59:
dd:0f:57:03:5a:cc:73:8f:71:69:8c:86:54:a9:63:a6:72:a6:
83:9b:f2:a0:cc:cb:73:fc:36:31:14:c5:e8:f7:6c:5b:fc:a1:
85:9f:d4:28:3d:34:d2:21:e0:31:7d:6f:f3:55:09:3d:03:5c:
ba:5f:b9:2b:3b:7f:66:85:90:bf:ac:45:30:ca:5b:bc:c9:ca:
07:9f:bf:09:82:47:d6:ce:a3:fb:f5:d1:45:4c:e6:98:ba:99:
58:c4:ac:7f:5d:b2:4c:99:29:e6:8d:ae:19:49:81:96:b9:a4:
d4:4e:90:d4:8d:a4:8a:f8:56:d0:1b:8a:e0:fd:52:dd:ad:5c:
cb:0a:08:ca:6c:79:bf:f2:91:17:57:09:fe:1c:ef:5f:a9:7e:
6a:93:92:43:59:35:bb:1f:ee:6c:f8:80:13:a5:56:1a:65:56:
5a:38:17:d7:16:d4:35:05:f9:8d:ea:06:88:93:36:82:96:ad:
f9:3e:7c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:43 2025 by rpki-client