Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
File: LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json)
Hash identifier: iBxYNBLTMuIQZL1HFfUe63mPaQx6vjQ6Gz6/ygYiGy8=
Subject key identifier: 59:51:2C:E1:7D:5E:9C:2D:FF:5D:96:F5:7C:FB:20:17:BC:52:FE:A1
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial: 01965047EF9022BD370B0E6265211DB6666D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
Manifest number: 1220
Signing time: Sat 19 Apr 2025 23:00:13 +0000
Manifest this update: Sat 19 Apr 2025 23:00:13 +0000
Manifest next update: Sun 20 Apr 2025 23:00:13 +0000
Files and hashes: 1: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: 28PA3MZOHD80yYIHk02slUkQRgEwepXw7V6cyiDuOQo=)
2: _bmYfKJFyK9blFnDt5sQ68mX470.roa (hash: /IaqLo5gnKUuY45J9bE0d2C3v3+D2fXVryN2uunSGag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:47:ef:90:22:bd:37:0b:0e:62:65:21:1d:b6:66:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
Validity
Not Before: Apr 19 23:00:13 2025 GMT
Not After : Apr 20 23:00:13 2025 GMT
Subject: CN=59512ce17d5e9c2dff5d96f57cfb2017bc52fea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:00:cb:f3:61:b0:8b:db:02:7d:fa:d4:2c:
b5:cc:21:18:17:58:33:3e:2a:9c:12:3f:f8:cd:40:
d3:28:1d:77:9a:a8:7c:25:a3:8c:9a:cf:44:f0:5a:
b3:cb:a8:9f:3d:9d:5a:32:56:9f:99:11:5d:b4:87:
3d:aa:f3:d9:71:3d:5e:0d:fc:94:0e:0d:63:e3:5f:
b1:3c:e3:3b:7d:d6:8a:07:42:e5:52:87:b0:9b:e1:
57:d3:50:be:68:9e:fc:f6:d2:6d:23:80:3a:3b:49:
a7:85:f8:b2:ef:94:5d:fa:51:b2:c9:03:dd:a2:8e:
2e:dc:ef:61:b6:81:d2:25:85:68:88:2e:8a:9c:34:
7c:22:43:e4:77:a8:a7:7c:fd:38:56:91:10:d2:8a:
0f:d6:a0:62:57:25:c3:53:f3:e9:95:d7:ef:be:0d:
a1:ba:a8:ac:47:df:06:8b:34:ad:f6:1c:ad:62:82:
d6:c4:03:ac:b9:0f:e3:89:f6:86:be:cd:82:ad:7d:
d6:9b:7a:da:bb:87:c5:2d:a2:2d:cc:80:68:d0:de:
57:95:60:b7:88:3f:58:1f:05:26:51:e7:4e:b9:45:
37:c5:e4:fe:22:17:f9:29:9d:64:2f:3d:61:bc:02:
10:09:a2:69:38:6c:8b:3e:b4:90:f1:25:cb:5b:2a:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:51:2C:E1:7D:5E:9C:2D:FF:5D:96:F5:7C:FB:20:17:BC:52:FE:A1
X509v3 Authority Key Identifier:
keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f7:59:3f:b1:16:ed:4b:32:33:ad:ce:06:06:58:db:ce:d0:
07:01:19:55:41:46:8d:5c:17:27:a7:30:db:ac:ba:43:fb:df:
1b:24:5d:35:51:f5:70:7e:a2:0e:43:23:60:a0:c9:46:9e:9b:
01:aa:3f:4e:d4:be:dc:9b:c6:5c:b6:e1:fd:de:7e:67:85:1c:
2a:cd:92:72:14:6f:76:d1:c4:ce:d0:53:bb:23:3b:2f:0f:e3:
f1:20:b3:a1:d1:41:66:a9:27:dc:92:0c:76:40:f8:2a:5d:a4:
ff:43:b8:fb:4e:cc:51:35:93:2d:a9:9a:93:59:63:88:8f:75:
c6:d0:3f:a2:30:cd:45:d9:28:e4:61:49:1b:d2:51:20:dd:be:
72:87:b1:3a:ef:d6:fa:23:54:d1:95:f8:54:4e:4d:08:6e:aa:
33:c5:79:7f:3b:21:93:45:e1:49:3b:81:45:ff:fb:f0:6d:57:
e2:db:f4:b6:c5:e7:29:7d:7f:e5:8f:37:92:46:0a:b7:38:69:
4d:16:4f:3c:30:55:eb:aa:bb:b9:bc:8e:7b:27:9d:c0:38:81:
cb:f1:37:89:ec:bc:e2:fe:d0:db:85:69:ed:ad:cc:e5:cf:10:
fe:d0:b1:e4:ca:2b:db:49:af:2f:65:f7:8f:b7:b8:e7:83:50:
a3:22:43:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:25:50 2025 by rpki-client